{"report_id":"93e39720-7d19-4668-a228-4443d02a7a8e","version":0,"status":"done","tags":[],"date":"2026-10-08T14:54:58Z","url":{"schema":"http","addr":"instagram.rents.ac/","fqdn":"instagram.rents.ac","domain":"rents.ac","tld":"ac"},"ip":{"addr":"195.246.230.67","port":0,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"final":{"url":{"schema":"https","addr":"instasklad.com/ru","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"title":"INSTAGRAM","dom":{"size":124736,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1298)","md5":"2c67ad0029a00f3ae592d5455a38b466","sha1":"8461debed4d7426231887789498d2aeeef18cfdd","sha256":"5fcd441469de7a2d2e47889e4676cd053efb03d08a461ccbdee7353676696ab6","sha512":"925fe03c470c4267f7a57521805834ef6bebf4f03b3e680374dc2d573128bf3e4d4c8a6ad9c1b2c6acdd5a9e782a2dcd2233b61e42ed4d059ce56324d40fe0d9","ssdeep":"3072:Jb1d4wH/J4+s5h3HX6C4EvOzEKWCDhhHZ:Jb1dp4+Eh3HX6C2qClP","tlshash":"e9c3b650b4fa0813441b94e2a6862f0d3ea0f267cb87ca45367c17b45fc6eb4f92b759","dom_hash":"domhashc584bab0f2fac18f874b5876df7d9c70","first_seen":"2026-10-08T14:55:03.063412Z","last_seen":"2026-10-08T14:55:03.063412Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"instagram.rents.ac/","fqdn":"instagram.rents.ac","domain":"rents.ac","tld":"ac"},"ip":{"addr":"195.246.230.67","port":0,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T14:54:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instagram.rents.ac","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instagram.rents.ac","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"instagram.rents.ac","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":536068,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.freekassa.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-04-26","domain_rank":0,"first_seen":"2021-10-07T14:25:57Z","last_seen":"2026-07-31T16:01:28.275953Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imageup.ru","ip":{"addr":"5.45.127.210","port":443,"asn":198068,"as":"P.a.g.m. Ou","country":"Estonia","country_code":"EE"},"domain_registered":"2007-07-10","domain_rank":282246,"first_seen":"2017-07-02T11:10:18Z","last_seen":"2026-10-08T14:24:44.548631Z","alert_count":0,"request_count":1,"received_data":2979409,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"instasklad.com","ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"domain_registered":"2023-07-01","domain_rank":0,"first_seen":"2026-09-10T21:20:11.926738Z","last_seen":"2026-10-08T14:24:44.595143Z","alert_count":66,"request_count":23,"received_data":1348444,"sent_data":33075,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery UI:1.11.4","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"tse1.mm.bing.net","ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":17960,"first_seen":"2014-03-13T14:42:52Z","last_seen":"2026-10-07T23:52:00.525539Z","alert_count":0,"request_count":1,"received_data":8079,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"instagram.rents.ac","ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"domain_registered":"2021-11-23","domain_rank":0,"first_seen":"2026-08-24T10:25:35.405514Z","last_seen":"2026-10-08T14:24:44.596558Z","alert_count":3,"request_count":1,"received_data":1086,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"instasklad.com/build/assets/_commonjsHelpers-Cpj98o6Y.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"146eaf85c344cee008c91f2685dbf82f","sha1":"42d63529a2c0f2f9cc2b797622f6a3a71cae3e66","sha256":"9625379badd4849610dfe6c15453cdf0c0071264c90eef177307fac094d2aa6c","sha512":"2251bb035f0032928f3b8eb47d260be9f4a8b15bee896f308ed1f4316f8f2a194f2cd23a6d9f4780dd92e5221c99f6534bcd7f1d6c613788800ed05e94ac0e2a","ssdeep":"","tlshash":"40d0a7886450d17540aa246ec21739017755217e42ec3991a39d867423a81efa414765","size":236,"data":"","first_seen":"2023-03-14T11:18:50Z","last_seen":"2026-10-09T22:32:05.246399Z","times_seen":3161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/static/js/jquery.qrcode.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3333ba9563665e3e188c364bd091b1c","sha1":"8875d9852a7d39adbe0af03d09834d14f05e1c4d","sha256":"95fd42638ed231583a18d600d4b47073b3cff698d77c0157e4c7e4f338a4de25","sha512":"08b16f7653b4a5f8c3a7340db7eafe81d9698df967ea0400df0d9c0000fa433bcd04edde4a73f54463220cb37de9374c6dc242adf84e0110b6f16643406f1fab","ssdeep":"384:I7Ecd9QIIAAFTRjjrlqwLHHfsgDZUnEbx4gW:g41L1e","tlshash":"9d52c8d1f39141b3b1466cd96c1f285e94a8a4a3ac14955cbfb8c0e2eb78fd15478f30","size":14114,"data":"","first_seen":"2023-03-07T13:46:34Z","last_seen":"2026-10-09T01:03:16.640428Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/ru","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-10-09T22:28:28.707046Z","times_seen":381287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/livewire/livewire.min.js?id=42cd7fd5","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f3ab27bc26c2e98d999105c9c99eedf","sha1":"8f5174d487dd5e096afbf2a673fdfb191bc09c7a","sha256":"433e9450445d75ee6b67551a163b429b57cd3c62e30e5c122e08c5f437c4bbae","sha512":"d09bbc292cc53e4cf7a539b1d6ebb97ecec879dbeafea896caf24c0fc8bd802466a1d26c138c80b3699ca4cb617bc3e6289f7a2191f7596ae63cb014b20b2422","ssdeep":"3072:NG2mSmQUVvL0xfKW259GWe0GqNW2KxEY/gUpvAColoIPkpArAA1m:42iQ76/NZKxEYYUpaovD","tlshash":"abf318e973dab07243ef117650bf420af3396885184f4028b629d8ca3d7999951f3f7a","size":164883,"data":"","first_seen":"2026-06-14T14:25:01.005644Z","last_seen":"2026-10-09T01:03:16.64156Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/lazysizes.min-GD8IIHgq.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"581cb568052aa363f6d3260eb6552058","sha1":"b8b3be23927403aaf131ddf3d3b6943557144885","sha256":"6b7269d664632b7b0c5671f4c6f13e3453a4367e1dcaafedabdc98939d7db68d","sha512":"27531af32a6751c91e3137b17ee4be34ceb3487989bc81aa02ea5c7ba19c23c51a1119b7d770a699fe93c186a45d8e8900f21001a480848d3d5a62355176a884","ssdeep":"192:uBgNrn01II3SYR9Zd9tMJGCJtsAH+Lvx7qFpuI+:u+NDSdiYRd9tk9zsAov5qFEI+","tlshash":"0de1c5dfb52ab1776983a0b6122f610fa2333622ed07c416a27ad0d55d3d958133be3d","size":7363,"data":"","first_seen":"2024-08-19T14:54:14.063768Z","last_seen":"2026-10-09T01:03:16.645716Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/vendor/jquery-ui-1.11.4/jquery-ui.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"d935d506ae9c8dd9e0f96706fbb91f65","sha1":"7f650ee30c6a4d3eea04032039b20ff72997559b","sha256":"c4d8dbe77feb63e5a61bee0bead4e5f66e8fa6a927599bd1b74aced52467273c","sha512":"0470c258bb5da745e900571c3f63627c26c97d8a1886c45264e50cdca9c0c72d9bfc0cb7067f757ebb9dfb703de5bac0e300d6577c84399ac9aa057c69945751","ssdeep":"3072:AUDKlUUSPVqCqoG3cYI70SDzOyAskRsIcQQ3+SuwC:yUNVEmYIHzQQ3Xu/","tlshash":"b034084db2413a3251ebe2a5103b2a0fa237555da605805cb43ccede9e7de0531bbf7a","size":240427,"data":"","first_seen":"2023-03-07T01:04:01Z","last_seen":"2026-10-09T18:57:12.450342Z","times_seen":9018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/static/js/bootstrap.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"046ba2b5f4cff7d2eaaa1af55caa9fd8","sha1":"b3f2ef9f985e7906c9360756b73cd64bf7733647","sha256":"c8eeec83fe8bf655eeeda291466d268770436dde4e3e40416a85d05d3893e892","sha512":"02d866a0e7ae7cf36dd5a34e318887a291102a74fbcb5e48786d1c7e860f143eefaef08640820cbf628767e9f7991410487d83d64d42e7c6e7047e32c0dbec75","ssdeep":"768:N8LJD27UwlNAMlbWqXYR+jS1s8ep0smQirXf8u8GfDZZSQ:iY7NBS1W8v8UDZMQ","tlshash":"56f29546b23031a107efb1e5415f020e72396a6de90690bc78a5daf63db9c48317bf39","size":35452,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-10-09T21:46:34.59699Z","times_seen":4088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KT9X7LPHP9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57263ad4a59b7e06884312eb2d549578","sha1":"28150abc614e4b3c53e0d7e9a164bb3ff1de0d06","sha256":"aca6a5d110520d967995811b3d489e653d2151c43b222e1b51fc3295d4084c20","sha512":"a0b4e1fb5ccd9c55161bfd5e56e5b04626b45e8faf3edd25f8a3025a4d8853fdf54a0cbed6c80a4aa5751bb9310cb605fc41f2c349fcd2ba3ff10f4f8a35c992","ssdeep":"6144:AgcUrtyDetGl0BqveZNAAycBcNMMb0Er533QN3UrxXNU4m9kpp84A:gDeq0B6eYnE3UrxXFm9YOb","tlshash":"9db409ce73c6742293a6f578903f01cb657b29a2b45cc89ab289dce02d3465a5173f7c","size":535464,"data":"","first_seen":"2026-10-08T14:24:46.674549Z","last_seen":"2026-10-08T14:55:03.085102Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/shop-old-FpYPzLs-.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"34b94294b229c0d968cf951cb9e0adc8","sha1":"d4243ae6d50a39ce088bd457a95cf8e4f06f2d3c","sha256":"b05b0994712c41a4b45a0083ab9375290a386e5fc52a3979ccb3b4a55288c30d","sha512":"6be5b4850d20e2920e1336f0f1d0e6e507c44bdbd3c868cebb861e04af2cd42e31d08af5a122dc8139d0ab5962fd7d38877efad7d51dfccbba9dd98431d7cc03","ssdeep":"","tlshash":"89e07dce404089292f7ee5a8ce53352670106a490290cb304c8346390121f57c0178f7","size":313,"data":"","first_seen":"2026-01-24T19:06:40.442123Z","last_seen":"2026-10-09T01:03:16.646528Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/vendor/jquery-2.1.3/jquery.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f9fb969ce353c5d77707836391eb28d","sha1":"62c4042e9ebc691a5372d653b424512a561d1670","sha256":"2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515","sha512":"7a027f63edb63fd350f5a2325428745423ac7f27729fc78d9aa072fb2d829c91be7e9448c57312ea36d63fcb552a9d23a7e34ee67f16b4c5009cd9c6a092a2e3","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrr:z4UdWJiz6UAIJ8pa98Hrr","tlshash":"cc83d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84355,"data":"","first_seen":"2023-03-07T01:14:40Z","last_seen":"2026-10-09T19:43:32.840409Z","times_seen":12262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/pusher-BVCVQPqm.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8128b82f15fc9010fd3d6b95e34b548","sha1":"3c561128bea0f88924d90c88f13e4f2191523b72","sha256":"160723a0aef2c978967d7262905694bb4e0a3c95ea03189f49ed074622269846","sha512":"08ba551ffcc29c446f7baebc520219ad725737d76476f2f154f4cbaca8282563d00923b06ea584a2aa60f847e532540139bd43f6d7284aed039a9b5a6cd670ef","ssdeep":"1536:fvo8h9adC0kssTh8wJcXDREw4oo7R6Wx4+s33GkGfpI0hI5UIJ0WkmnOKaMHRhbe:zht0zpRi+r0hILnOKaMHRhbZxmJp","tlshash":"5373f8c5b592f02247e7b061586b4107e3392aa4a509c07cbb7cd9e9ec746c8e23bf75","size":80702,"data":"","first_seen":"2026-01-24T19:06:40.465839Z","last_seen":"2026-10-09T01:03:16.639444Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/shop.new-s4_9xB9b.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f90075c590a34a164891ecdec866747","sha1":"f87d72fa55eee47c6ce5c2eecfb99d951c5a228d","sha256":"8720c72a09620bf0b40b231538c595e67b03952712c32153fa98ea08d822e090","sha512":"d13bf674336ecaf8f65900389267830d7179262bc01abbdc88eb43ab25166bcf3c85cb9c12e9ad0790aac8575ca04aec05a5e7113a365eed47b260fe6a52bc6b","ssdeep":"384:njXAtgP8Yd4DyRpD6nxh1Vvf8AtmSpnnyDnypmxGyiykgnyOqERWyjyoS+wmZ3Qo:njXCgpd4DyRsn31dfjpnnyDnypmxGyig","tlshash":"a572fa08f5a82cd353ba35b424365619233a9f74e907cd85b55771e93fb8e092c33e2a","size":16434,"data":"","first_seen":"2026-09-10T21:20:35.204852Z","last_seen":"2026-10-09T01:03:16.657132Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Detected multiple instances of Livewire running","filename":"https://instasklad.com/livewire/livewire.min.js?id=42cd7fd5","line_number":83,"column_number":9380},{"level":"warn","text":"Detected multiple instances of Alpine running","filename":"https://instasklad.com/livewire/livewire.min.js?id=42cd7fd5","line_number":83,"column_number":9380}]},"http":[{"url":{"schema":"https","addr":"instasklad.com/","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T14:54:17.341Z","timestamp":1791471257341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:54:17 GMT\r\nlocation: https://instasklad.com/ru\r\npragma: no-cache\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InZzVEdNeXdld2hoMnA4TUlqODhWVmc9PSIsInZhbHVlIjoiOXNhWHpCd0IyOEhwRkVUUVBiL2Q4WDFRTVZQZnFWdXRURTZTSmlHMW9vVVYwY2FYVjViOElpblFNN3p1a3BzN1c0Slpac24yWFFxTlYyRTJkc0VxL242SGVpZFhhdklWQmFoVWdvTGlHMEJTdGxpM1BNTFVJQVFRaVVJV2E4QUkiLCJtYWMiOiIzYzAyMmFjMGRhMTQ0OWI4NmI4NTkyMTE3YWIzNzM3NTg2MjgzODNhNjdiNzY3YTMwNzZmNTUxZjg0NjQ0MjQ0IiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; samesite=lax\nrentsws_session=eyJpdiI6ImYvWVNPZmhycmoyR0lBMHNlRUFJOUE9PSIsInZhbHVlIjoicThaYkNvM3JjOVZoR0RGL1pUSUhWSmpiZFVTQ2o4UXhrdXprVXh1TFVWY2NVMmZ0MU5TMU51Z1ZVNzZJM25OcjNsRmhxWEZHeUl0QVE4Vjh2ZWFlYWxpUHNDa20xNlpwSHhxTkFFSmxJNHhTMytTTHgxYjlYcFJRSC84cEU2dFQiLCJtYWMiOiIwYWE1YjU0MTM0ZTA2N2U1ZTJmZDU4MTQ2M2M0ZDBhMDA0ZDhhYzc2MWFkMzRjZjYzMzc3ZThhMWI4MmVmMjNmIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InZzVEdNeXdld2hoMnA4TUlqODhWVmc9PSIsInZhbHVlIjoiOXNhWHpCd0IyOEhwRkVUUVBiL2Q4WDFRTVZQZnFWdXRURTZTSmlHMW9vVVYwY2FYVjViOElpblFNN3p1a3BzN1c0Slpac24yWFFxTlYyRTJkc0VxL242SGVpZFhhdklWQmFoVWdvTGlHMEJTdGxpM1BNTFVJQVFRaVVJV2E4QUkiLCJtYWMiOiIzYzAyMmFjMGRhMTQ0OWI4NmI4NTkyMTE3YWIzNzM3NTg2MjgzODNhNjdiNzY3YTMwNzZmNTUxZjg0NjQ0MjQ0IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:17Z","raw_expires":"Thu, 29 Oct 2026 14:54:17 GMT","max_age":1814400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6InZzVEdNeXdld2hoMnA4TUlqODhWVmc9PSIsInZhbHVlIjoiOXNhWHpCd0IyOEhwRkVUUVBiL2Q4WDFRTVZQZnFWdXRURTZTSmlHMW9vVVYwY2FYVjViOElpblFNN3p1a3BzN1c0Slpac24yWFFxTlYyRTJkc0VxL242SGVpZFhhdklWQmFoVWdvTGlHMEJTdGxpM1BNTFVJQVFRaVVJV2E4QUkiLCJtYWMiOiIzYzAyMmFjMGRhMTQ0OWI4NmI4NTkyMTE3YWIzNzM3NTg2MjgzODNhNjdiNzY3YTMwNzZmNTUxZjg0NjQ0MjQ0IiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; samesite=lax"},{"name":"rentsws_session","value":"eyJpdiI6ImYvWVNPZmhycmoyR0lBMHNlRUFJOUE9PSIsInZhbHVlIjoicThaYkNvM3JjOVZoR0RGL1pUSUhWSmpiZFVTQ2o4UXhrdXprVXh1TFVWY2NVMmZ0MU5TMU51Z1ZVNzZJM25OcjNsRmhxWEZHeUl0QVE4Vjh2ZWFlYWxpUHNDa20xNlpwSHhxTkFFSmxJNHhTMytTTHgxYjlYcFJRSC84cEU2dFQiLCJtYWMiOiIwYWE1YjU0MTM0ZTA2N2U1ZTJmZDU4MTQ2M2M0ZDBhMDA0ZDhhYzc2MWFkMzRjZjYzMzc3ZThhMWI4MmVmMjNmIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:17Z","raw_expires":"Thu, 29 Oct 2026 14:54:17 GMT","max_age":1814400,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"rentsws_session=eyJpdiI6ImYvWVNPZmhycmoyR0lBMHNlRUFJOUE9PSIsInZhbHVlIjoicThaYkNvM3JjOVZoR0RGL1pUSUhWSmpiZFVTQ2o4UXhrdXprVXh1TFVWY2NVMmZ0MU5TMU51Z1ZVNzZJM25OcjNsRmhxWEZHeUl0QVE4Vjh2ZWFlYWxpUHNDa20xNlpwSHhxTkFFSmxJNHhTMytTTHgxYjlYcFJRSC84cEU2dFQiLCJtYWMiOiIwYWE1YjU0MTM0ZTA2N2U1ZTJmZDU4MTQ2M2M0ZDBhMDA0ZDhhYzc2MWFkMzRjZjYzMzc3ZThhMWI4MmVmMjNmIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T22:29:40.553637Z","times_seen":18983619,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":354,"connect":54,"send":0,"wait":226,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/livewire/livewire.min.js?id=42cd7fd5","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.385Z","timestamp":1791471259385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /livewire/livewire.min.js?id=42cd7fd5 HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkE5ODB4c3NlYUJXSE93c085TjI3TlE9PSIsInZhbHVlIjoiL0JnbHlYZ3EybXJ3dE5Eby8vTXJuNXFIY3lEbDVkOXZFQVdTY294V284RHhGN2h3TC8wemlpa1BDRkt5RldCZG56Qi9KdjJ6WlcrMDdMUGROdVdrdUNKM0ZrTzlIb1JYL1dCTjNCN1FXcGRWTHZqSmU0YXpJeWhWKzlEWXNkUUgiLCJtYWMiOiJhMDA1YjEwOGE4MDdjZGQyN2E2MWMwYTkzNWJkNDdiNThmNWVhYTNjZDI1NWM2NGQ0MDU3YWZlNTFlMDVjMWFkIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6IjhpdU1Ea21hK05ZUDBkZjYwaU5qclE9PSIsInZhbHVlIjoiT2N0TW95dWRVNkFidWNscFBDOVI1Z21wb3UyRkN1SU1VV2NIbTljWTV5NmhYdzBNOGtXWEJjcjVOZXJuMlIxVjdnaW5UaW9HOG5nM0JRRjgvdUE0aFQ4ZDFtQmY2N0tsSWRoTG1SakRjQ014WFpwSXhDdVBKaU9CUzd2aVo4UG0iLCJtYWMiOiI3NTk1OGEwNzM5ZjlhZjE1MWY1NDMyOWRkOTIyZjg4ZmNjYmUzOGMyZDc5NWM2NzI5NzI5NjYyYTg3MDU0ZDRiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkE5ODB4c3NlYUJXSE93c085TjI3TlE9PSIsInZhbHVlIjoiL0JnbHlYZ3EybXJ3dE5Eby8vTXJuNXFIY3lEbDVkOXZFQVdTY294V284RHhGN2h3TC8wemlpa1BDRkt5RldCZG56Qi9KdjJ6WlcrMDdMUGROdVdrdUNKM0ZrTzlIb1JYL1dCTjNCN1FXcGRWTHZqSmU0YXpJeWhWKzlEWXNkUUgiLCJtYWMiOiJhMDA1YjEwOGE4MDdjZGQyN2E2MWMwYTkzNWJkNDdiNThmNWVhYTNjZDI1NWM2NGQ0MDU3YWZlNTFlMDVjMWFkIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6IjhpdU1Ea21hK05ZUDBkZjYwaU5qclE9PSIsInZhbHVlIjoiT2N0TW95dWRVNkFidWNscFBDOVI1Z21wb3UyRkN1SU1VV2NIbTljWTV5NmhYdzBNOGtXWEJjcjVOZXJuMlIxVjdnaW5UaW9HOG5nM0JRRjgvdUE0aFQ4ZDFtQmY2N0tsSWRoTG1SakRjQ014WFpwSXhDdVBKaU9CUzd2aVo4UG0iLCJtYWMiOiI3NTk1OGEwNzM5ZjlhZjE1MWY1NDMyOWRkOTIyZjg4ZmNjYmUzOGMyZDc5NWM2NzI5NzI5NjYyYTg3MDU0ZDRiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\nexpires: Fri, 08 Oct 2027 14:54:19 GMT\r\nlast-modified: Sat, 27 Jun 2026 03:14:20 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":164883,"size_decoded":57093,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47229)","md5":"5f3ab27bc26c2e98d999105c9c99eedf","sha1":"8f5174d487dd5e096afbf2a673fdfb191bc09c7a","sha256":"433e9450445d75ee6b67551a163b429b57cd3c62e30e5c122e08c5f437c4bbae","sha512":"d09bbc292cc53e4cf7a539b1d6ebb97ecec879dbeafea896caf24c0fc8bd802466a1d26c138c80b3699ca4cb617bc3e6289f7a2191f7596ae63cb014b20b2422","ssdeep":"3072:NG2mSmQUVvL0xfKW259GWe0GqNW2KxEY/gUpvAColoIPkpArAA1m:42iQ76/NZKxEYYUpaovD","tlshash":"abf318e973dab07243ef117650bf420af3396885184f4028b629d8ca3d7999951f3f7a","first_seen":"2026-06-14T14:25:01.005644Z","last_seen":"2026-10-09T01:03:16.64156Z","times_seen":85,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tse1.mm.bing.net/th?id=OIP.S6QPskMGZZ8WNLNZV-lZ5AAAAA\u0026pid=Api\u0026P=0\u0026w=300\u0026h=300","fqdn":"tse1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.916Z","timestamp":1791471259916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 16","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 28 Aug 2026 11:48:45 GMT","end":"Wed, 24 Feb 2027 11:48:45 GMT"},"fingerprint":{"sha1":"05:B4:F2:CA:7E:6F:88:B6:6B:43:95:F4:81:63:A6:8B:20:15:89:58","sha256":"E8:93:A2:61:5A:8F:B4:A1:DC:5A:21:20:42:7B:FB:04:3F:C6:92:7B:1E:C7:AB:9B:70:BC:4C:88:96:75:7C:CF"}}},"request":{"raw":"GET /th?id=OIP.S6QPskMGZZ8WNLNZV-lZ5AAAAA\u0026pid=Api\u0026P=0\u0026w=300\u0026h=300 HTTP/1.1\r\nHost: tse1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=1209600\r\ncontent-length: 7174\r\ncontent-type: image/jpeg\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 529D1EA430FE4EEE87A29488F52DAAB7 Ref B: OSL231050212042 Ref C: 2026-10-08T14:54:20Z\r\ndate: Thu, 08 Oct 2026 14:54:20 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7174,"size_decoded":8079,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2], baseline, precision 8, 277x240, components 3","md5":"38541a9ff59a486ce5541042d6691120","sha1":"e364c4163ab19ff80909d6fc2de6e674f04247db","sha256":"16f6d231b25398c22b3984a52ca4ea7aff67b94114fcf446516c44ceb91f4ebe","sha512":"8c193b3231d2e4f10d406681f97dd25077e1367b5fcdf8f14ba530d57cf556df3216aeafc1e3060687bffa27737fee4e3463190bafec5cd55ba902d14bddb835","ssdeep":"192:v1RS0Wxc+yADMXjJDaZjhNQrdkBvs9Aspym+oCgznUscg:NQX2xAD0FDojbQrdUs2sQmeuUzg","tlshash":"98e1b0c173960592eb2fdcf0160660a5c26c483d3c64f26b36856fcaf621f2a4ccd593","first_seen":"2026-10-08T14:55:03.070176Z","last_seen":"2026-10-09T01:03:16.636698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":30,"receive":1,"ssl":736},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/shop.new-s4_9xB9b.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.778Z","timestamp":1791471258778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /build/assets/shop.new-s4_9xB9b.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: W/\"6ac6eb98-4038\"\r\nlast-modified: Thu, 08 Oct 2026 01:02:16 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16440,"size_decoded":5024,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13106)","md5":"1f90075c590a34a164891ecdec866747","sha1":"f87d72fa55eee47c6ce5c2eecfb99d951c5a228d","sha256":"8720c72a09620bf0b40b231538c595e67b03952712c32153fa98ea08d822e090","sha512":"d13bf674336ecaf8f65900389267830d7179262bc01abbdc88eb43ab25166bcf3c85cb9c12e9ad0790aac8575ca04aec05a5e7113a365eed47b260fe6a52bc6b","ssdeep":"384:njXAtgP8Yd4DyRpD6nxh1Vvf8AtmSpnnyDnypmxGyiykgnyOqERWyjyoS+wmZ3Qo:njXCgpd4DyRsn31dfjpnnyDnypmxGyig","tlshash":"a572fa08f5a82cd353ba35b424365619233a9f74e907cd85b55771e93fb8e092c33e2a","first_seen":"2026-09-10T21:20:35.204852Z","last_seen":"2026-10-09T01:03:16.657132Z","times_seen":4,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/static/fonts/fontawesome/fontawesome-webfont.woff2?v=4.3.0","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.224Z","timestamp":1791471259224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /static/fonts/fontawesome/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/build/assets/style-BpvK4UZE.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IkozMldSNUxYcEw1NWU0cDJJRC9IWnc9PSIsInZhbHVlIjoiUG0xOEZwWnhlcHlGRHMrdEY1b1JtZkc1anJvZUxYcnI4dENPYWN6Vmp3c2dJZW5YdjhDY3RldzlVc3R0N2dWL3lVRWJlYTMrbVlKWnhBemQwbXBzM2F3VE4vak5zd1FkWThhK2dqT0ZJRjl2Vm9ETExZOVNnN0F6M0EreWkrNG4iLCJtYWMiOiJlNTFiM2Q3ODA4OTNlNTRkNzY4Y2QyNWEzNGJhZmVhZjcwZmE2NWJmNjE0MTgyZGE0NjRmOTY0ZDA1ZDY3ZTQ4IiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6ImtkUmZNazFzRHBMcnkxWmxSTTQyVVE9PSIsInZhbHVlIjoiaTFUWmVXelJRMTRFTEpXc0JWSkI5ZEpadURxejJwV244bll4Y2xzSE91NS9ZdGZBWGRzS0RUNnEvT1RMbTI4R2U5WkRjMFpSdmRvclhHWE1NTVQ0ZlZZaWFJUW1ZNm5PMmJXVVczMGJZU1hVR3gzK09FOGNPMC9TWFd6Y1ltQkYiLCJtYWMiOiJmYWIxYTcyZDA1ZTkxZWFjNDQ5NmNhYjIzZWQ4MTk5ZjlhNTYyNWQxOThlMTMzMzkyZmM2OGM0MjFiMWFmNWJiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkozMldSNUxYcEw1NWU0cDJJRC9IWnc9PSIsInZhbHVlIjoiUG0xOEZwWnhlcHlGRHMrdEY1b1JtZkc1anJvZUxYcnI4dENPYWN6Vmp3c2dJZW5YdjhDY3RldzlVc3R0N2dWL3lVRWJlYTMrbVlKWnhBemQwbXBzM2F3VE4vak5zd1FkWThhK2dqT0ZJRjl2Vm9ETExZOVNnN0F6M0EreWkrNG4iLCJtYWMiOiJlNTFiM2Q3ODA4OTNlNTRkNzY4Y2QyNWEzNGJhZmVhZjcwZmE2NWJmNjE0MTgyZGE0NjRmOTY0ZDA1ZDY3ZTQ4IiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6ImtkUmZNazFzRHBMcnkxWmxSTTQyVVE9PSIsInZhbHVlIjoiaTFUWmVXelJRMTRFTEpXc0JWSkI5ZEpadURxejJwV244bll4Y2xzSE91NS9ZdGZBWGRzS0RUNnEvT1RMbTI4R2U5WkRjMFpSdmRvclhHWE1NTVQ0ZlZZaWFJUW1ZNm5PMmJXVVczMGJZU1hVR3gzK09FOGNPMC9TWFd6Y1ltQkYiLCJtYWMiOiJmYWIxYTcyZDA1ZTkxZWFjNDQ5NmNhYjIzZWQ4MTk5ZjlhNTYyNWQxOThlMTMzMzkyZmM2OGM0MjFiMWFmNWJiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public\r\ncontent-type: font/woff2\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InpsT0hiS1hOSWpiQjk3T1VXaHkvcHc9PSIsInZhbHVlIjoiV29sSCtwZlB5bTgyNWRxMWd5U0xoSmJ1UC9RMEMra1JIVFJCR0JhNzMvOXQzbnI3NXU4YU9QZGRYdFIwcXRLWG9aQ1N2c3ByK3MrcXAxUjNhRXNvZ0pYaTUvYXBPN1lzTFYyMEhha3AxOWpLa0JubnVPMlR5RzU1Tkx3aWlGaTYiLCJtYWMiOiIzYTAyMmFlZDlmZDljMGI2YjczZDQ4YjgwY2RkMWI3ZjUyYjZjZDJkNGVlNzRmM2UwN2Q3Y2FlZjhiMjM3ODZlIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; samesite=lax\nrentsws_session=eyJpdiI6IjJEL3ovT2c2R2xtMHFHYWsxeTB4SkE9PSIsInZhbHVlIjoiblREL00yNUltcHZlTXdqZ1ovNWtGYnRtMWF4eHV0M2xESnNpK0lNcC9MZ3lQUkx2RnJ0N2JERmdCa3lpRDdDbVUxVmpzeTJRUWpMOUtJNFVKQ1pIWnl3dGtmTVh0aDNZelg0aEUzcitFMWZiZ0V4M21DN0dVdDUzYjFwMXNwQVQiLCJtYWMiOiI1MzVkNjFlMGM5NGQxODM5NzhiMjY2OTllNjhjNWJjM2I3NjRjODAwMDUyYmRlNzA2MmRiOTQ4MzdiOWM0OWY2IiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax\r\nvia: 2.0 Caddy\r\ncontent-length: 56780\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InpsT0hiS1hOSWpiQjk3T1VXaHkvcHc9PSIsInZhbHVlIjoiV29sSCtwZlB5bTgyNWRxMWd5U0xoSmJ1UC9RMEMra1JIVFJCR0JhNzMvOXQzbnI3NXU4YU9QZGRYdFIwcXRLWG9aQ1N2c3ByK3MrcXAxUjNhRXNvZ0pYaTUvYXBPN1lzTFYyMEhha3AxOWpLa0JubnVPMlR5RzU1Tkx3aWlGaTYiLCJtYWMiOiIzYTAyMmFlZDlmZDljMGI2YjczZDQ4YjgwY2RkMWI3ZjUyYjZjZDJkNGVlNzRmM2UwN2Q3Y2FlZjhiMjM3ODZlIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:19Z","raw_expires":"Thu, 29 Oct 2026 14:54:19 GMT","max_age":1814400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6InpsT0hiS1hOSWpiQjk3T1VXaHkvcHc9PSIsInZhbHVlIjoiV29sSCtwZlB5bTgyNWRxMWd5U0xoSmJ1UC9RMEMra1JIVFJCR0JhNzMvOXQzbnI3NXU4YU9QZGRYdFIwcXRLWG9aQ1N2c3ByK3MrcXAxUjNhRXNvZ0pYaTUvYXBPN1lzTFYyMEhha3AxOWpLa0JubnVPMlR5RzU1Tkx3aWlGaTYiLCJtYWMiOiIzYTAyMmFlZDlmZDljMGI2YjczZDQ4YjgwY2RkMWI3ZjUyYjZjZDJkNGVlNzRmM2UwN2Q3Y2FlZjhiMjM3ODZlIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; samesite=lax"},{"name":"rentsws_session","value":"eyJpdiI6IjJEL3ovT2c2R2xtMHFHYWsxeTB4SkE9PSIsInZhbHVlIjoiblREL00yNUltcHZlTXdqZ1ovNWtGYnRtMWF4eHV0M2xESnNpK0lNcC9MZ3lQUkx2RnJ0N2JERmdCa3lpRDdDbVUxVmpzeTJRUWpMOUtJNFVKQ1pIWnl3dGtmTVh0aDNZelg0aEUzcitFMWZiZ0V4M21DN0dVdDUzYjFwMXNwQVQiLCJtYWMiOiI1MzVkNjFlMGM5NGQxODM5NzhiMjY2OTllNjhjNWJjM2I3NjRjODAwMDUyYmRlNzA2MmRiOTQ4MzdiOWM0OWY2IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:19Z","raw_expires":"Thu, 29 Oct 2026 14:54:19 GMT","max_age":1814400,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"rentsws_session=eyJpdiI6IjJEL3ovT2c2R2xtMHFHYWsxeTB4SkE9PSIsInZhbHVlIjoiblREL00yNUltcHZlTXdqZ1ovNWtGYnRtMWF4eHV0M2xESnNpK0lNcC9MZ3lQUkx2RnJ0N2JERmdCa3lpRDdDbVUxVmpzeTJRUWpMOUtJNFVKQ1pIWnl3dGtmTVh0aDNZelg0aEUzcitFMWZiZ0V4M21DN0dVdDUzYjFwMXNwQVQiLCJtYWMiOiI1MzVkNjFlMGM5NGQxODM5NzhiMjY2OTllNjhjNWJjM2I3NjRjODAwMDUyYmRlNzA2MmRiOTQ4MzdiOWM0OWY2IiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56780,"size_decoded":57931,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-10-09T21:46:34.626887Z","times_seen":32251,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/vendor/jquery-ui-1.11.4/jquery-ui.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.763Z","timestamp":1791471258763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /vendor/jquery-ui-1.11.4/jquery-ui.min.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: W/\"6ac6eb64-3ab2b\"\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":240427,"size_decoded":65586,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32035)","md5":"d935d506ae9c8dd9e0f96706fbb91f65","sha1":"7f650ee30c6a4d3eea04032039b20ff72997559b","sha256":"c4d8dbe77feb63e5a61bee0bead4e5f66e8fa6a927599bd1b74aced52467273c","sha512":"0470c258bb5da745e900571c3f63627c26c97d8a1886c45264e50cdca9c0c72d9bfc0cb7067f757ebb9dfb703de5bac0e300d6577c84399ac9aa057c69945751","ssdeep":"3072:AUDKlUUSPVqCqoG3cYI70SDzOyAskRsIcQQ3+SuwC:yUNVEmYIHzQQ3Xu/","tlshash":"b034084db2413a3251ebe2a5103b2a0fa237555da605805cb43ccede9e7de0531bbf7a","first_seen":"2023-03-07T01:04:01Z","last_seen":"2026-10-09T18:57:12.450342Z","times_seen":9018,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/lazysizes.min-GD8IIHgq.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.766Z","timestamp":1791471258766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /build/assets/lazysizes.min-GD8IIHgq.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: W/\"6ac6eb98-1cc3\"\r\nlast-modified: Thu, 08 Oct 2026 01:02:16 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7363,"size_decoded":3722,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7362)","md5":"581cb568052aa363f6d3260eb6552058","sha1":"b8b3be23927403aaf131ddf3d3b6943557144885","sha256":"6b7269d664632b7b0c5671f4c6f13e3453a4367e1dcaafedabdc98939d7db68d","sha512":"27531af32a6751c91e3137b17ee4be34ceb3487989bc81aa02ea5c7ba19c23c51a1119b7d770a699fe93c186a45d8e8900f21001a480848d3d5a62355176a884","ssdeep":"192:uBgNrn01II3SYR9Zd9tMJGCJtsAH+Lvx7qFpuI+:u+NDSdiYRd9tk9zsAov5qFEI+","tlshash":"0de1c5dfb52ab1776983a0b6122f610fa2333622ed07c416a27ad0d55d3d958133be3d","first_seen":"2024-08-19T14:54:14.063768Z","last_seen":"2026-10-09T01:03:16.645716Z","times_seen":9,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/static/js/jquery.qrcode.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.775Z","timestamp":1791471258775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /static/js/jquery.qrcode.min.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-encoding: gzip\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkozMldSNUxYcEw1NWU0cDJJRC9IWnc9PSIsInZhbHVlIjoiUG0xOEZwWnhlcHlGRHMrdEY1b1JtZkc1anJvZUxYcnI4dENPYWN6Vmp3c2dJZW5YdjhDY3RldzlVc3R0N2dWL3lVRWJlYTMrbVlKWnhBemQwbXBzM2F3VE4vak5zd1FkWThhK2dqT0ZJRjl2Vm9ETExZOVNnN0F6M0EreWkrNG4iLCJtYWMiOiJlNTFiM2Q3ODA4OTNlNTRkNzY4Y2QyNWEzNGJhZmVhZjcwZmE2NWJmNjE0MTgyZGE0NjRmOTY0ZDA1ZDY3ZTQ4IiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; samesite=lax\nrentsws_session=eyJpdiI6ImtkUmZNazFzRHBMcnkxWmxSTTQyVVE9PSIsInZhbHVlIjoiaTFUWmVXelJRMTRFTEpXc0JWSkI5ZEpadURxejJwV244bll4Y2xzSE91NS9ZdGZBWGRzS0RUNnEvT1RMbTI4R2U5WkRjMFpSdmRvclhHWE1NTVQ0ZlZZaWFJUW1ZNm5PMmJXVVczMGJZU1hVR3gzK09FOGNPMC9TWFd6Y1ltQkYiLCJtYWMiOiJmYWIxYTcyZDA1ZTkxZWFjNDQ5NmNhYjIzZWQ4MTk5ZjlhNTYyNWQxOThlMTMzMzkyZmM2OGM0MjFiMWFmNWJiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkozMldSNUxYcEw1NWU0cDJJRC9IWnc9PSIsInZhbHVlIjoiUG0xOEZwWnhlcHlGRHMrdEY1b1JtZkc1anJvZUxYcnI4dENPYWN6Vmp3c2dJZW5YdjhDY3RldzlVc3R0N2dWL3lVRWJlYTMrbVlKWnhBemQwbXBzM2F3VE4vak5zd1FkWThhK2dqT0ZJRjl2Vm9ETExZOVNnN0F6M0EreWkrNG4iLCJtYWMiOiJlNTFiM2Q3ODA4OTNlNTRkNzY4Y2QyNWEzNGJhZmVhZjcwZmE2NWJmNjE0MTgyZGE0NjRmOTY0ZDA1ZDY3ZTQ4IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:18Z","raw_expires":"Thu, 29 Oct 2026 14:54:18 GMT","max_age":1814400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IkozMldSNUxYcEw1NWU0cDJJRC9IWnc9PSIsInZhbHVlIjoiUG0xOEZwWnhlcHlGRHMrdEY1b1JtZkc1anJvZUxYcnI4dENPYWN6Vmp3c2dJZW5YdjhDY3RldzlVc3R0N2dWL3lVRWJlYTMrbVlKWnhBemQwbXBzM2F3VE4vak5zd1FkWThhK2dqT0ZJRjl2Vm9ETExZOVNnN0F6M0EreWkrNG4iLCJtYWMiOiJlNTFiM2Q3ODA4OTNlNTRkNzY4Y2QyNWEzNGJhZmVhZjcwZmE2NWJmNjE0MTgyZGE0NjRmOTY0ZDA1ZDY3ZTQ4IiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; samesite=lax"},{"name":"rentsws_session","value":"eyJpdiI6ImtkUmZNazFzRHBMcnkxWmxSTTQyVVE9PSIsInZhbHVlIjoiaTFUWmVXelJRMTRFTEpXc0JWSkI5ZEpadURxejJwV244bll4Y2xzSE91NS9ZdGZBWGRzS0RUNnEvT1RMbTI4R2U5WkRjMFpSdmRvclhHWE1NTVQ0ZlZZaWFJUW1ZNm5PMmJXVVczMGJZU1hVR3gzK09FOGNPMC9TWFd6Y1ltQkYiLCJtYWMiOiJmYWIxYTcyZDA1ZTkxZWFjNDQ5NmNhYjIzZWQ4MTk5ZjlhNTYyNWQxOThlMTMzMzkyZmM2OGM0MjFiMWFmNWJiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:18Z","raw_expires":"Thu, 29 Oct 2026 14:54:18 GMT","max_age":1814400,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"rentsws_session=eyJpdiI6ImtkUmZNazFzRHBMcnkxWmxSTTQyVVE9PSIsInZhbHVlIjoiaTFUWmVXelJRMTRFTEpXc0JWSkI5ZEpadURxejJwV244bll4Y2xzSE91NS9ZdGZBWGRzS0RUNnEvT1RMbTI4R2U5WkRjMFpSdmRvclhHWE1NTVQ0ZlZZaWFJUW1ZNm5PMmJXVVczMGJZU1hVR3gzK09FOGNPMC9TWFd6Y1ltQkYiLCJtYWMiOiJmYWIxYTcyZDA1ZTkxZWFjNDQ5NmNhYjIzZWQ4MTk5ZjlhNTYyNWQxOThlMTMzMzkyZmM2OGM0MjFiMWFmNWJiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14114,"size_decoded":5962,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"a3333ba9563665e3e188c364bd091b1c","sha1":"8875d9852a7d39adbe0af03d09834d14f05e1c4d","sha256":"95fd42638ed231583a18d600d4b47073b3cff698d77c0157e4c7e4f338a4de25","sha512":"08b16f7653b4a5f8c3a7340db7eafe81d9698df967ea0400df0d9c0000fa433bcd04edde4a73f54463220cb37de9374c6dc242adf84e0110b6f16643406f1fab","ssdeep":"384:I7Ecd9QIIAAFTRjjrlqwLHHfsgDZUnEbx4gW:g41L1e","tlshash":"9d52c8d1f39141b3b1466cd96c1f285e94a8a4a3ac14955cbfb8c0e2eb78fd15478f30","first_seen":"2023-03-07T13:46:34Z","last_seen":"2026-10-09T01:03:16.640428Z","times_seen":32,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram.rents.ac/","fqdn":"instagram.rents.ac","domain":"rents.ac","tld":"ac"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T14:54:16.953Z","timestamp":1791471256953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rents.ac","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 11:05:57 GMT","end":"Wed, 06 Jan 2027 11:05:56 GMT"},"fingerprint":{"sha1":"0D:53:08:9B:7B:41:D6:DF:BE:6C:9B:F6:7B:4D:2E:45:D8:F7:08:83","sha256":"28:9E:E7:BC:0C:25:53:69:F6:F5:62:F6:7D:77:0F:99:13:F5:31:21:47:9F:7D:D5:14:82:1B:A8:CE:6B:28:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram.rents.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:54:17 GMT\r\nlocation: https://instasklad.com/\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjJacWkrODdxM25nNUhFNDF3VnBXdnc9PSIsInZhbHVlIjoiT1ByS0xqNVZsYll4a25LV1N2YmdrNFl0YTl6bklHS2ZDZmxTaDkvYlA5QWFhK3JiS2kwc2hTUjI3dDIwNW44QUZSYWZid2RXWTE0OXEwanhEUDNvdHJIOThRTDJTZjNsNmJMRytoVWNkd1A0T2pJNG11akt4b1RoM0NuT3kzN0giLCJtYWMiOiI0N2Q2M2Y0MTdjYjNlMDA0NDRiZGJiOGFjYmMyMGYyNWIxMDkxNmQzYmYyNmM1ZjMzOWE5MWI3ZThmNTg1NDZjIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; samesite=lax\nrentsws_session=eyJpdiI6InN2Qy8xMWU5V2labndldEtYOEpkYkE9PSIsInZhbHVlIjoid1h1c0hxQld3Skgvc0dtMkhjNEw2SExqWGh5TFJDaTgwb1pCRVhGc2FZcDZTS3U2U3VBRXFxNGVpSFhtcmVHQ0kvM243d1JGaWR1OWt5d1pvcVFiQnhkK1B5WGRHb2J4WmdMMjJyWHVmeHlwUGpBV1poa2E3WS9KUjR0anpLelUiLCJtYWMiOiIyYTBmYTZkMzYyMmQ1N2FlODVmODU2MmFiZjJhNjU1ZmRhNWFhNzI3MDkxZjNmZWUwZTgwMTZlNDlhN2ZhMzkyIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IjJacWkrODdxM25nNUhFNDF3VnBXdnc9PSIsInZhbHVlIjoiT1ByS0xqNVZsYll4a25LV1N2YmdrNFl0YTl6bklHS2ZDZmxTaDkvYlA5QWFhK3JiS2kwc2hTUjI3dDIwNW44QUZSYWZid2RXWTE0OXEwanhEUDNvdHJIOThRTDJTZjNsNmJMRytoVWNkd1A0T2pJNG11akt4b1RoM0NuT3kzN0giLCJtYWMiOiI0N2Q2M2Y0MTdjYjNlMDA0NDRiZGJiOGFjYmMyMGYyNWIxMDkxNmQzYmYyNmM1ZjMzOWE5MWI3ZThmNTg1NDZjIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:17Z","raw_expires":"Thu, 29 Oct 2026 14:54:17 GMT","max_age":1814400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IjJacWkrODdxM25nNUhFNDF3VnBXdnc9PSIsInZhbHVlIjoiT1ByS0xqNVZsYll4a25LV1N2YmdrNFl0YTl6bklHS2ZDZmxTaDkvYlA5QWFhK3JiS2kwc2hTUjI3dDIwNW44QUZSYWZid2RXWTE0OXEwanhEUDNvdHJIOThRTDJTZjNsNmJMRytoVWNkd1A0T2pJNG11akt4b1RoM0NuT3kzN0giLCJtYWMiOiI0N2Q2M2Y0MTdjYjNlMDA0NDRiZGJiOGFjYmMyMGYyNWIxMDkxNmQzYmYyNmM1ZjMzOWE5MWI3ZThmNTg1NDZjIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; samesite=lax"},{"name":"rentsws_session","value":"eyJpdiI6InN2Qy8xMWU5V2labndldEtYOEpkYkE9PSIsInZhbHVlIjoid1h1c0hxQld3Skgvc0dtMkhjNEw2SExqWGh5TFJDaTgwb1pCRVhGc2FZcDZTS3U2U3VBRXFxNGVpSFhtcmVHQ0kvM243d1JGaWR1OWt5d1pvcVFiQnhkK1B5WGRHb2J4WmdMMjJyWHVmeHlwUGpBV1poa2E3WS9KUjR0anpLelUiLCJtYWMiOiIyYTBmYTZkMzYyMmQ1N2FlODVmODU2MmFiZjJhNjU1ZmRhNWFhNzI3MDkxZjNmZWUwZTgwMTZlNDlhN2ZhMzkyIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:17Z","raw_expires":"Thu, 29 Oct 2026 14:54:17 GMT","max_age":1814400,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"rentsws_session=eyJpdiI6InN2Qy8xMWU5V2labndldEtYOEpkYkE9PSIsInZhbHVlIjoid1h1c0hxQld3Skgvc0dtMkhjNEw2SExqWGh5TFJDaTgwb1pCRVhGc2FZcDZTS3U2U3VBRXFxNGVpSFhtcmVHQ0kvM243d1JGaWR1OWt5d1pvcVFiQnhkK1B5WGRHb2J4WmdMMjJyWHVmeHlwUGpBV1poa2E3WS9KUjR0anpLelUiLCJtYWMiOiIyYTBmYTZkMzYyMmQ1N2FlODVmODU2MmFiZjJhNjU1ZmRhNWFhNzI3MDkxZjNmZWUwZTgwMTZlNDlhN2ZhMzkyIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:17 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T22:29:40.553637Z","times_seen":18983619,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":25,"connect":55,"send":0,"wait":177,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instagram.rents.ac","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instagram.rents.ac","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"instagram.rents.ac","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/instagram_icon-DPoemYJX.png","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.098Z","timestamp":1791471259098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /build/assets/instagram_icon-DPoemYJX.png HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\netag: \"6ac6eb98-f36\"\r\nlast-modified: Thu, 08 Oct 2026 01:02:16 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 3894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3894,"size_decoded":4134,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"eb33d9ce74c6e8eabe9e2beb01174023","sha1":"451a659eded6d8943d02c3d96a469ad5d8e67859","sha256":"52fa8e121cf18a6aeae438490db124201576bad714d4c86a4f1636ac3fd4e05a","sha512":"94d072e937e432e3f2e3408dfede372722051a06290f17b29962e87d7e852aebd1e4c211cb51318e65553d16647dbcee4eb9f4e8f107adfe613cf44f3ee7d24f","ssdeep":"","tlshash":"38816ddad4916bd1686e1376954f6be764a0ced51723071c34a7ffc8c136bf05284219","first_seen":"2026-09-10T21:20:35.257472Z","last_seen":"2026-10-09T01:03:16.643818Z","times_seen":4,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/vendor/jquery-ui-1.11.4/themes/smoothness/jquery-ui.min.css","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.168Z","timestamp":1791471259168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /vendor/jquery-ui-1.11.4/themes/smoothness/jquery-ui.min.css HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkozMldSNUxYcEw1NWU0cDJJRC9IWnc9PSIsInZhbHVlIjoiUG0xOEZwWnhlcHlGRHMrdEY1b1JtZkc1anJvZUxYcnI4dENPYWN6Vmp3c2dJZW5YdjhDY3RldzlVc3R0N2dWL3lVRWJlYTMrbVlKWnhBemQwbXBzM2F3VE4vak5zd1FkWThhK2dqT0ZJRjl2Vm9ETExZOVNnN0F6M0EreWkrNG4iLCJtYWMiOiJlNTFiM2Q3ODA4OTNlNTRkNzY4Y2QyNWEzNGJhZmVhZjcwZmE2NWJmNjE0MTgyZGE0NjRmOTY0ZDA1ZDY3ZTQ4IiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6ImtkUmZNazFzRHBMcnkxWmxSTTQyVVE9PSIsInZhbHVlIjoiaTFUWmVXelJRMTRFTEpXc0JWSkI5ZEpadURxejJwV244bll4Y2xzSE91NS9ZdGZBWGRzS0RUNnEvT1RMbTI4R2U5WkRjMFpSdmRvclhHWE1NTVQ0ZlZZaWFJUW1ZNm5PMmJXVVczMGJZU1hVR3gzK09FOGNPMC9TWFd6Y1ltQkYiLCJtYWMiOiJmYWIxYTcyZDA1ZTkxZWFjNDQ5NmNhYjIzZWQ4MTk5ZjlhNTYyNWQxOThlMTMzMzkyZmM2OGM0MjFiMWFmNWJiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkozMldSNUxYcEw1NWU0cDJJRC9IWnc9PSIsInZhbHVlIjoiUG0xOEZwWnhlcHlGRHMrdEY1b1JtZkc1anJvZUxYcnI4dENPYWN6Vmp3c2dJZW5YdjhDY3RldzlVc3R0N2dWL3lVRWJlYTMrbVlKWnhBemQwbXBzM2F3VE4vak5zd1FkWThhK2dqT0ZJRjl2Vm9ETExZOVNnN0F6M0EreWkrNG4iLCJtYWMiOiJlNTFiM2Q3ODA4OTNlNTRkNzY4Y2QyNWEzNGJhZmVhZjcwZmE2NWJmNjE0MTgyZGE0NjRmOTY0ZDA1ZDY3ZTQ4IiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6ImtkUmZNazFzRHBMcnkxWmxSTTQyVVE9PSIsInZhbHVlIjoiaTFUWmVXelJRMTRFTEpXc0JWSkI5ZEpadURxejJwV244bll4Y2xzSE91NS9ZdGZBWGRzS0RUNnEvT1RMbTI4R2U5WkRjMFpSdmRvclhHWE1NTVQ0ZlZZaWFJUW1ZNm5PMmJXVVczMGJZU1hVR3gzK09FOGNPMC9TWFd6Y1ltQkYiLCJtYWMiOiJmYWIxYTcyZDA1ZTkxZWFjNDQ5NmNhYjIzZWQ4MTk5ZjlhNTYyNWQxOThlMTMzMzkyZmM2OGM0MjFiMWFmNWJiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\netag: W/\"6ac6eb64-7545\"\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30021,"size_decoded":7633,"mime_type":"text/css","magic":"ASCII text, with very long lines (28290)","md5":"840cca94d5e33faf324bcd4988fa8401","sha1":"b25622cc0b25fe0ce8ec344f5817cc140d19143c","sha256":"8964f1fe20bd22829aa12283e7e59515e7fc658348810e00c55a4c6c1c368628","sha512":"be58d0f2edd73ae574bb418b1ba6514e8122d9928259e2707b3bf6ecf38a9aafecd4c211892bf7da6e4c2996aab8be1621d877034c04f870a1347facea9b0515","ssdeep":"384:6YpypxHLzBI1J1eovo+4O37L/72fZBhVZqR:64yTLzBIrvsO3cBhe","tlshash":"99d25330a5c2202dfe23d23161e11ff4523bc142eda65e7db09aa75993e98f4c47b971","first_seen":"2023-04-08T18:11:12Z","last_seen":"2026-10-09T17:34:26.767486Z","times_seen":1947,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/vendor/fontawesome-5.15.4/webfonts/fa-solid-900.woff2","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.515Z","timestamp":1791471259515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /vendor/fontawesome-5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/vendor/fontawesome-5.15.4/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6InpsT0hiS1hOSWpiQjk3T1VXaHkvcHc9PSIsInZhbHVlIjoiV29sSCtwZlB5bTgyNWRxMWd5U0xoSmJ1UC9RMEMra1JIVFJCR0JhNzMvOXQzbnI3NXU4YU9QZGRYdFIwcXRLWG9aQ1N2c3ByK3MrcXAxUjNhRXNvZ0pYaTUvYXBPN1lzTFYyMEhha3AxOWpLa0JubnVPMlR5RzU1Tkx3aWlGaTYiLCJtYWMiOiIzYTAyMmFlZDlmZDljMGI2YjczZDQ4YjgwY2RkMWI3ZjUyYjZjZDJkNGVlNzRmM2UwN2Q3Y2FlZjhiMjM3ODZlIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6IjJEL3ovT2c2R2xtMHFHYWsxeTB4SkE9PSIsInZhbHVlIjoiblREL00yNUltcHZlTXdqZ1ovNWtGYnRtMWF4eHV0M2xESnNpK0lNcC9MZ3lQUkx2RnJ0N2JERmdCa3lpRDdDbVUxVmpzeTJRUWpMOUtJNFVKQ1pIWnl3dGtmTVh0aDNZelg0aEUzcitFMWZiZ0V4M21DN0dVdDUzYjFwMXNwQVQiLCJtYWMiOiI1MzVkNjFlMGM5NGQxODM5NzhiMjY2OTllNjhjNWJjM2I3NjRjODAwMDUyYmRlNzA2MmRiOTQ4MzdiOWM0OWY2IiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InpsT0hiS1hOSWpiQjk3T1VXaHkvcHc9PSIsInZhbHVlIjoiV29sSCtwZlB5bTgyNWRxMWd5U0xoSmJ1UC9RMEMra1JIVFJCR0JhNzMvOXQzbnI3NXU4YU9QZGRYdFIwcXRLWG9aQ1N2c3ByK3MrcXAxUjNhRXNvZ0pYaTUvYXBPN1lzTFYyMEhha3AxOWpLa0JubnVPMlR5RzU1Tkx3aWlGaTYiLCJtYWMiOiIzYTAyMmFlZDlmZDljMGI2YjczZDQ4YjgwY2RkMWI3ZjUyYjZjZDJkNGVlNzRmM2UwN2Q3Y2FlZjhiMjM3ODZlIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6IjJEL3ovT2c2R2xtMHFHYWsxeTB4SkE9PSIsInZhbHVlIjoiblREL00yNUltcHZlTXdqZ1ovNWtGYnRtMWF4eHV0M2xESnNpK0lNcC9MZ3lQUkx2RnJ0N2JERmdCa3lpRDdDbVUxVmpzeTJRUWpMOUtJNFVKQ1pIWnl3dGtmTVh0aDNZelg0aEUzcitFMWZiZ0V4M21DN0dVdDUzYjFwMXNwQVQiLCJtYWMiOiI1MzVkNjFlMGM5NGQxODM5NzhiMjY2OTllNjhjNWJjM2I3NjRjODAwMDUyYmRlNzA2MmRiOTQ4MzdiOWM0OWY2IiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\netag: \"6ac6eb64-131bc\"\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 78268\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78268,"size_decoded":78512,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-10-09T22:07:59.43735Z","times_seen":60794,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/ru","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T14:54:18.052Z","timestamp":1791471258052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /ru HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InZzVEdNeXdld2hoMnA4TUlqODhWVmc9PSIsInZhbHVlIjoiOXNhWHpCd0IyOEhwRkVUUVBiL2Q4WDFRTVZQZnFWdXRURTZTSmlHMW9vVVYwY2FYVjViOElpblFNN3p1a3BzN1c0Slpac24yWFFxTlYyRTJkc0VxL242SGVpZFhhdklWQmFoVWdvTGlHMEJTdGxpM1BNTFVJQVFRaVVJV2E4QUkiLCJtYWMiOiIzYzAyMmFjMGRhMTQ0OWI4NmI4NTkyMTE3YWIzNzM3NTg2MjgzODNhNjdiNzY3YTMwNzZmNTUxZjg0NjQ0MjQ0IiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6ImYvWVNPZmhycmoyR0lBMHNlRUFJOUE9PSIsInZhbHVlIjoicThaYkNvM3JjOVZoR0RGL1pUSUhWSmpiZFVTQ2o4UXhrdXprVXh1TFVWY2NVMmZ0MU5TMU51Z1ZVNzZJM25OcjNsRmhxWEZHeUl0QVE4Vjh2ZWFlYWxpUHNDa20xNlpwSHhxTkFFSmxJNHhTMytTTHgxYjlYcFJRSC84cEU2dFQiLCJtYWMiOiIwYWE1YjU0MTM0ZTA2N2U1ZTJmZDU4MTQ2M2M0ZDBhMDA0ZDhhYzc2MWFkMzRjZjYzMzc3ZThhMWI4MmVmMjNmIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InZzVEdNeXdld2hoMnA4TUlqODhWVmc9PSIsInZhbHVlIjoiOXNhWHpCd0IyOEhwRkVUUVBiL2Q4WDFRTVZQZnFWdXRURTZTSmlHMW9vVVYwY2FYVjViOElpblFNN3p1a3BzN1c0Slpac24yWFFxTlYyRTJkc0VxL242SGVpZFhhdklWQmFoVWdvTGlHMEJTdGxpM1BNTFVJQVFRaVVJV2E4QUkiLCJtYWMiOiIzYzAyMmFjMGRhMTQ0OWI4NmI4NTkyMTE3YWIzNzM3NTg2MjgzODNhNjdiNzY3YTMwNzZmNTUxZjg0NjQ0MjQ0IiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6ImYvWVNPZmhycmoyR0lBMHNlRUFJOUE9PSIsInZhbHVlIjoicThaYkNvM3JjOVZoR0RGL1pUSUhWSmpiZFVTQ2o4UXhrdXprVXh1TFVWY2NVMmZ0MU5TMU51Z1ZVNzZJM25OcjNsRmhxWEZHeUl0QVE4Vjh2ZWFlYWxpUHNDa20xNlpwSHhxTkFFSmxJNHhTMytTTHgxYjlYcFJRSC84cEU2dFQiLCJtYWMiOiIwYWE1YjU0MTM0ZTA2N2U1ZTJmZDU4MTQ2M2M0ZDBhMDA0ZDhhYzc2MWFkMzRjZjYzMzc3ZThhMWI4MmVmMjNmIiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; samesite=lax\nrentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax\nstorefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D; expires=Fri, 12 Nov 2027 14:54:18 GMT; Max-Age=34560000; path=/; secure; httponly; samesite=lax\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:18Z","raw_expires":"Thu, 29 Oct 2026 14:54:18 GMT","max_age":1814400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; samesite=lax"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:18Z","raw_expires":"Thu, 29 Oct 2026 14:54:18 GMT","max_age":1814400,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:18 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D","quoted":false,"path":"/","expires":"2027-11-12T14:54:18Z","raw_expires":"Fri, 12 Nov 2027 14:54:18 GMT","max_age":34560000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D; expires=Fri, 12 Nov 2027 14:54:18 GMT; Max-Age=34560000; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"jQuery UI:1.11.4","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]}],"data":{"size":126344,"size_decoded":20077,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1299)","md5":"5e2a43632983aaa382928c9b6f8e4856","sha1":"82d17939ad1d47d5c6dcb889bd851633a83a469c","sha256":"c5ef7c059b78c476152824a82a0f13e39a2bf45cae065c96bf88896a487943ed","sha512":"8f8fd022010959a5535069f209411fbf27fa1765d5c490a8968900fb83cbf1129420beaf7762a7f19a76ff1814f534556b8e57d6373dcc154331c46dac7e6cf8","ssdeep":"1536:O8HkWdcbtH/J4+sq+h3HVs80EyLIOg4ERVfm0l+au+cwgFprsbbHUEOv7ljZp+yt:O8RdAtH/J4+s5h3HX6C4EvfqCDhh2/","tlshash":"4fc39450b5fa0497442f90e6e6a62f0d7da0f037eb878604367c17a52fc2ea4f56b748","first_seen":"2026-10-08T14:55:03.080311Z","last_seen":"2026-10-08T14:55:03.080311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/pusher-BVCVQPqm.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.770Z","timestamp":1791471258770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /build/assets/pusher-BVCVQPqm.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: W/\"6ac6eb98-13b3e\"\r\nlast-modified: Thu, 08 Oct 2026 01:02:16 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80702,"size_decoded":24950,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44794)","md5":"e8128b82f15fc9010fd3d6b95e34b548","sha1":"3c561128bea0f88924d90c88f13e4f2191523b72","sha256":"160723a0aef2c978967d7262905694bb4e0a3c95ea03189f49ed074622269846","sha512":"08ba551ffcc29c446f7baebc520219ad725737d76476f2f154f4cbaca8282563d00923b06ea584a2aa60f847e532540139bd43f6d7284aed039a9b5a6cd670ef","ssdeep":"1536:fvo8h9adC0kssTh8wJcXDREw4oo7R6Wx4+s33GkGfpI0hI5UIJ0WkmnOKaMHRhbe:zht0zpRi+r0hILnOKaMHRhbZxmJp","tlshash":"5373f8c5b592f02247e7b061586b4107e3392aa4a509c07cbb7cd9e9ec746c8e23bf75","first_seen":"2026-01-24T19:06:40.465839Z","last_seen":"2026-10-09T01:03:16.639444Z","times_seen":9,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/livewire/livewire.min.js?id=42cd7fd5","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.080Z","timestamp":1791471259080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /livewire/livewire.min.js?id=42cd7fd5 HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\nexpires: Fri, 08 Oct 2027 14:54:19 GMT\r\nlast-modified: Sat, 27 Jun 2026 03:14:20 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":164883,"size_decoded":57093,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47229)","md5":"5f3ab27bc26c2e98d999105c9c99eedf","sha1":"8f5174d487dd5e096afbf2a673fdfb191bc09c7a","sha256":"433e9450445d75ee6b67551a163b429b57cd3c62e30e5c122e08c5f437c4bbae","sha512":"d09bbc292cc53e4cf7a539b1d6ebb97ecec879dbeafea896caf24c0fc8bd802466a1d26c138c80b3699ca4cb617bc3e6289f7a2191f7596ae63cb014b20b2422","ssdeep":"3072:NG2mSmQUVvL0xfKW259GWe0GqNW2KxEY/gUpvAColoIPkpArAA1m:42iQ76/NZKxEYYUpaovD","tlshash":"abf318e973dab07243ef117650bf420af3396885184f4028b629d8ca3d7999951f3f7a","first_seen":"2026-06-14T14:25:01.005644Z","last_seen":"2026-10-09T01:03:16.64156Z","times_seen":85,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/storage/images/flags/GB.png","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.095Z","timestamp":1791471259095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /storage/images/flags/GB.png HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\netag: \"65df72d9-97a\"\r\nlast-modified: Wed, 28 Feb 2024 17:52:25 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 2426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2426,"size_decoded":2666,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"aa799dc92524f9d4f5e82c00eff9212a","sha1":"487840d61f0ae4ca7c0040943153334bd26d9203","sha256":"13d9a7e559c88c9da0009c529d8a1facc463374af58f7cf272d1e401c6dfa9bc","sha512":"0edabc51f27f678a9876c79107f6d35176801c94fd01e69630c485f1bd1be5b133b0ec6716950a6b37b18a0fe0b6b366ac7d926391fbd1dca5067c7e0e8ad6a3","ssdeep":"","tlshash":"2d415f5f26455cb9c671daf52e3c46d1c57cf520f5c251d5209bbd511514cced451ec0","first_seen":"2023-05-08T22:04:28Z","last_seen":"2026-10-09T01:03:16.649912Z","times_seen":73,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/vendor/jquery-2.1.3/jquery.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.756Z","timestamp":1791471258756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /vendor/jquery-2.1.3/jquery.min.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: W/\"6ac6eb64-14983\"\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84355,"size_decoded":30058,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32180)","md5":"7f9fb969ce353c5d77707836391eb28d","sha1":"62c4042e9ebc691a5372d653b424512a561d1670","sha256":"2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515","sha512":"7a027f63edb63fd350f5a2325428745423ac7f27729fc78d9aa072fb2d829c91be7e9448c57312ea36d63fcb552a9d23a7e34ee67f16b4c5009cd9c6a092a2e3","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrr:z4UdWJiz6UAIJ8pa98Hrr","tlshash":"cc83d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T01:14:40Z","last_seen":"2026-10-09T19:43:32.840409Z","times_seen":12262,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KT9X7LPHP9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.071Z","timestamp":1791471259071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-KT9X7LPHP9 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\nexpires: Thu, 08 Oct 2026 14:54:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 178616\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535464,"size_decoded":179220,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"57263ad4a59b7e06884312eb2d549578","sha1":"28150abc614e4b3c53e0d7e9a164bb3ff1de0d06","sha256":"aca6a5d110520d967995811b3d489e653d2151c43b222e1b51fc3295d4084c20","sha512":"a0b4e1fb5ccd9c55161bfd5e56e5b04626b45e8faf3edd25f8a3025a4d8853fdf54a0cbed6c80a4aa5751bb9310cb605fc41f2c349fcd2ba3ff10f4f8a35c992","ssdeep":"6144:AgcUrtyDetGl0BqveZNAAycBcNMMb0Er533QN3UrxXNU4m9kpp84A:gDeq0B6eYnE3UrxXFm9YOb","tlshash":"9db409ce73c6742293a6f578903f01cb657b29a2b45cc89ab289dce02d3465a5173f7c","first_seen":"2026-10-08T14:24:46.674549Z","last_seen":"2026-10-08T14:55:03.085102Z","times_seen":2,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":42,"receive":72,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/captcha/default?IACqaVjj","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.097Z","timestamp":1791471259097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /captcha/default?IACqaVjj HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, private\r\ncontent-type: image/png\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjVOSkZqNGV1N0FuekE3QXoyb0dpMlE9PSIsInZhbHVlIjoiTkltdmIzMW1tUXdEL1VQV2FHRE0yTVJUbDV5YVc5R2EwQlJleHlpakVCOEpVWHd6dHVZcUpaYVFPZElsTlRFN1RGdER5SExjZ1U4dEJ3bGN5M0V0clMxOERwUVh6WlZ0RDRNUFBna1dURkwrbG9Walc2SVorc1N0YVgraUNGNWEiLCJtYWMiOiJiZWMzNDhhMTc5OTQwNjc3NDdiYjQzZWRkZGJmMzUzZTJkOThhNjFjMTExMzBmMDcyNzY5Y2ZhMWM5N2ZhOTRkIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; samesite=lax\nrentsws_session=eyJpdiI6ImlyT0kzZ05OM0grdGFuQnpTZ081eWc9PSIsInZhbHVlIjoiME9vMnZ1NHRMTk4yanpFbktVcVdWM0RkOVIzMkhacml5SlhaNk4zVW5rNThKZTNJWHlMNi9qTUVJMFlueVl6bmdDaEZIdlFiejVFOGhORmgxVkFzK2NEVGRSZHM1KzF4RkJwYUNYeGYrNkhNbW1oVUQ1aFQ4cUdiajBzMWdRQ2ciLCJtYWMiOiIzZGI3MzliODUwYzg5NDNmY2YzYjkyMjY0YzZjOWVmOGU3YjI5OGY2YzVmY2JhZWFiZjU3ZDIxMTEwMWViNjZiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax\r\nvia: 2.0 Caddy\r\ncontent-length: 6865\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IjVOSkZqNGV1N0FuekE3QXoyb0dpMlE9PSIsInZhbHVlIjoiTkltdmIzMW1tUXdEL1VQV2FHRE0yTVJUbDV5YVc5R2EwQlJleHlpakVCOEpVWHd6dHVZcUpaYVFPZElsTlRFN1RGdER5SExjZ1U4dEJ3bGN5M0V0clMxOERwUVh6WlZ0RDRNUFBna1dURkwrbG9Walc2SVorc1N0YVgraUNGNWEiLCJtYWMiOiJiZWMzNDhhMTc5OTQwNjc3NDdiYjQzZWRkZGJmMzUzZTJkOThhNjFjMTExMzBmMDcyNzY5Y2ZhMWM5N2ZhOTRkIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:19Z","raw_expires":"Thu, 29 Oct 2026 14:54:19 GMT","max_age":1814400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IjVOSkZqNGV1N0FuekE3QXoyb0dpMlE9PSIsInZhbHVlIjoiTkltdmIzMW1tUXdEL1VQV2FHRE0yTVJUbDV5YVc5R2EwQlJleHlpakVCOEpVWHd6dHVZcUpaYVFPZElsTlRFN1RGdER5SExjZ1U4dEJ3bGN5M0V0clMxOERwUVh6WlZ0RDRNUFBna1dURkwrbG9Walc2SVorc1N0YVgraUNGNWEiLCJtYWMiOiJiZWMzNDhhMTc5OTQwNjc3NDdiYjQzZWRkZGJmMzUzZTJkOThhNjFjMTExMzBmMDcyNzY5Y2ZhMWM5N2ZhOTRkIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; samesite=lax"},{"name":"rentsws_session","value":"eyJpdiI6ImlyT0kzZ05OM0grdGFuQnpTZ081eWc9PSIsInZhbHVlIjoiME9vMnZ1NHRMTk4yanpFbktVcVdWM0RkOVIzMkhacml5SlhaNk4zVW5rNThKZTNJWHlMNi9qTUVJMFlueVl6bmdDaEZIdlFiejVFOGhORmgxVkFzK2NEVGRSZHM1KzF4RkJwYUNYeGYrNkhNbW1oVUQ1aFQ4cUdiajBzMWdRQ2ciLCJtYWMiOiIzZGI3MzliODUwYzg5NDNmY2YzYjkyMjY0YzZjOWVmOGU3YjI5OGY2YzVmY2JhZWFiZjU3ZDIxMTEwMWViNjZiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:19Z","raw_expires":"Thu, 29 Oct 2026 14:54:19 GMT","max_age":1814400,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"rentsws_session=eyJpdiI6ImlyT0kzZ05OM0grdGFuQnpTZ081eWc9PSIsInZhbHVlIjoiME9vMnZ1NHRMTk4yanpFbktVcVdWM0RkOVIzMkhacml5SlhaNk4zVW5rNThKZTNJWHlMNi9qTUVJMFlueVl6bmdDaEZIdlFiejVFOGhORmgxVkFzK2NEVGRSZHM1KzF4RkJwYUNYeGYrNkhNbW1oVUQ1aFQ4cUdiajBzMWdRQ2ciLCJtYWMiOiIzZGI3MzliODUwYzg5NDNmY2YzYjkyMjY0YzZjOWVmOGU3YjI5OGY2YzVmY2JhZWFiZjU3ZDIxMTEwMWViNjZiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6865,"size_decoded":7957,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit/color RGBA, non-interlaced","md5":"3f5bf24a157fdb2cd6a8e6053cd076ba","sha1":"9cb7c24ccb20e86beac983b9a1b2b59ce8f33066","sha256":"dd413b7d43c0250c6f84973a41cff68d7441b6870281d874573047dbc9633256","sha512":"9da766a7791f6b3d8932c232cfc3eed838030bfb637bf5f90899efbfd71f1f0cef9395f0159808880e41de0106af0224f53d679664577586686c7e52855615c4","ssdeep":"192:pWE9HYpb6Fy3o1PgZHxU003BB0axBx/Rnp9Il:VHYV6Fy34Y00HaxBx/T2l","tlshash":"bce18ee4846081f325e7785978d2527fbc309188d5f2f311ca750ba4eb1ab258d2dce9","first_seen":"2026-10-08T14:55:03.086751Z","last_seen":"2026-10-08T14:55:03.086751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/vendor/fontawesome-5.15.4/css/all.min.css","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.351Z","timestamp":1791471259351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /vendor/fontawesome-5.15.4/css/all.min.css HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkE5ODB4c3NlYUJXSE93c085TjI3TlE9PSIsInZhbHVlIjoiL0JnbHlYZ3EybXJ3dE5Eby8vTXJuNXFIY3lEbDVkOXZFQVdTY294V284RHhGN2h3TC8wemlpa1BDRkt5RldCZG56Qi9KdjJ6WlcrMDdMUGROdVdrdUNKM0ZrTzlIb1JYL1dCTjNCN1FXcGRWTHZqSmU0YXpJeWhWKzlEWXNkUUgiLCJtYWMiOiJhMDA1YjEwOGE4MDdjZGQyN2E2MWMwYTkzNWJkNDdiNThmNWVhYTNjZDI1NWM2NGQ0MDU3YWZlNTFlMDVjMWFkIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6IjhpdU1Ea21hK05ZUDBkZjYwaU5qclE9PSIsInZhbHVlIjoiT2N0TW95dWRVNkFidWNscFBDOVI1Z21wb3UyRkN1SU1VV2NIbTljWTV5NmhYdzBNOGtXWEJjcjVOZXJuMlIxVjdnaW5UaW9HOG5nM0JRRjgvdUE0aFQ4ZDFtQmY2N0tsSWRoTG1SakRjQ014WFpwSXhDdVBKaU9CUzd2aVo4UG0iLCJtYWMiOiI3NTk1OGEwNzM5ZjlhZjE1MWY1NDMyOWRkOTIyZjg4ZmNjYmUzOGMyZDc5NWM2NzI5NzI5NjYyYTg3MDU0ZDRiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkE5ODB4c3NlYUJXSE93c085TjI3TlE9PSIsInZhbHVlIjoiL0JnbHlYZ3EybXJ3dE5Eby8vTXJuNXFIY3lEbDVkOXZFQVdTY294V284RHhGN2h3TC8wemlpa1BDRkt5RldCZG56Qi9KdjJ6WlcrMDdMUGROdVdrdUNKM0ZrTzlIb1JYL1dCTjNCN1FXcGRWTHZqSmU0YXpJeWhWKzlEWXNkUUgiLCJtYWMiOiJhMDA1YjEwOGE4MDdjZGQyN2E2MWMwYTkzNWJkNDdiNThmNWVhYTNjZDI1NWM2NGQ0MDU3YWZlNTFlMDVjMWFkIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6IjhpdU1Ea21hK05ZUDBkZjYwaU5qclE9PSIsInZhbHVlIjoiT2N0TW95dWRVNkFidWNscFBDOVI1Z21wb3UyRkN1SU1VV2NIbTljWTV5NmhYdzBNOGtXWEJjcjVOZXJuMlIxVjdnaW5UaW9HOG5nM0JRRjgvdUE0aFQ4ZDFtQmY2N0tsSWRoTG1SakRjQ014WFpwSXhDdVBKaU9CUzd2aVo4UG0iLCJtYWMiOiI3NTk1OGEwNzM5ZjlhZjE1MWY1NDMyOWRkOTIyZjg4ZmNjYmUzOGMyZDc5NWM2NzI5NzI5NjYyYTg3MDU0ZDRiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\netag: W/\"6ac6eb64-e7a9\"\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59305,"size_decoded":13133,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-10-09T22:07:59.475628Z","times_seen":49927,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/shop-old-FpYPzLs-.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.768Z","timestamp":1791471258768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /build/assets/shop-old-FpYPzLs-.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: \"6ac6eb98-139\"\r\nlast-modified: Thu, 08 Oct 2026 01:02:16 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 313\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":313,"size_decoded":565,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (312)","md5":"34b94294b229c0d968cf951cb9e0adc8","sha1":"d4243ae6d50a39ce088bd457a95cf8e4f06f2d3c","sha256":"b05b0994712c41a4b45a0083ab9375290a386e5fc52a3979ccb3b4a55288c30d","sha512":"6be5b4850d20e2920e1336f0f1d0e6e507c44bdbd3c868cebb861e04af2cd42e31d08af5a122dc8139d0ab5962fd7d38877efad7d51dfccbba9dd98431d7cc03","ssdeep":"","tlshash":"89e07dce404089292f7ee5a8ce53352670106a490290cb304c8346390121f57c0178f7","first_seen":"2026-01-24T19:06:40.442123Z","last_seen":"2026-10-09T01:03:16.646528Z","times_seen":7,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/style-BpvK4UZE.css","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.781Z","timestamp":1791471258781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /build/assets/style-BpvK4UZE.css HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: W/\"6ac6eb98-27d72\"\r\nlast-modified: Thu, 08 Oct 2026 01:02:16 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163186,"size_decoded":29772,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65019), with no line terminators","md5":"20892f2bb95eacc3d8ba3e97cc76171d","sha1":"2b32c00fb8e635fe76c66d80d87d1f0a7a246741","sha256":"6feba211d9aae0e0eefa3d82e443ebca50649fd29d682c800ccd948aa07a0ed1","sha512":"24a2a3866df9eb42292aebde0ddc5a26c9328eff523e24e29a878d516a9bf7ed00564ddaabbdd0d1673a68191d02a9ede76889fd1de9755a0308b776dbc60d62","ssdeep":"1536:ixQlorNYHZf2oOVfNq4yVN8HT+4dfkqTNP:fTDRN8z+mfkqV","tlshash":"19f395a0f50030ea7333c95b73d0be5a6629f262d5564e76f21f699c8fc528a0673f18","first_seen":"2026-09-10T21:20:35.191734Z","last_seen":"2026-10-09T01:03:16.647815Z","times_seen":4,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/storage/images/flags/RU.png","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.092Z","timestamp":1791471259092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /storage/images/flags/RU.png HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\netag: \"65df72d9-1c7\"\r\nlast-modified: Wed, 28 Feb 2024 17:52:25 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":455,"size_decoded":694,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"ea0d24ddc1c2d9963c4f3c10351412d4","sha1":"600688b25203b8dbd43103dc753097096c1c162a","sha256":"890eacbec1eeb44f57a265f5b8e8fd4dde6bd0891a3e891561c8b246226343ea","sha512":"42117b64c1ed2b3375977b19956aa67f5684444269c3b68527e4d2531c027d95a8692ccb5bfa59099220dad1e094888c6acbbbbc201ea01a2c64a376b0c2dbea","ssdeep":"","tlshash":"77f0dce2af80abf8d4dc2024129b05b1f9fe36bc5a43940b092d6afb554584821962a1","first_seen":"2023-05-08T22:04:28Z","last_seen":"2026-10-09T01:03:16.643143Z","times_seen":14,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.freekassa.ru/banners/big-dark-2.png","fqdn":"cdn.freekassa.ru","domain":"freekassa.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.112Z","timestamp":1791471259112,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /banners/big-dark-2.png HTTP/1.1\r\nHost: cdn.freekassa.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T22:29:40.553637Z","times_seen":18983619,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imageup.ru/img53/4175480/group-45.jpg","fqdn":"imageup.ru","domain":"imageup.ru","tld":"ru"},"ip":{"addr":"5.45.127.210","port":443,"asn":198068,"as":"P.a.g.m. Ou","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.395Z","timestamp":1791471259395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imageup.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 07:06:48 GMT","end":"Mon, 04 Jan 2027 07:06:47 GMT"},"fingerprint":{"sha1":"93:00:69:C6:13:68:0B:AC:8E:88:B3:A7:24:EB:9B:38:05:98:D2:6F","sha256":"E8:76:E2:90:37:E3:B6:DB:7F:F7:36:9E:94:11:7C:5B:E1:BF:55:0F:76:10:33:73:79:01:B9:0B:FE:95:6B:71"}}},"request":{"raw":"GET /img53/4175480/group-45.jpg HTTP/1.1\r\nHost: imageup.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2979055\r\nlast-modified: Mon, 23 Jan 2023 20:41:35 GMT\r\nexpires: Fri, 08 Oct 2027 14:54:19 GMT\r\netag: \"63cef0ff-2d74ef\"\r\nstrict-transport-security: max-age=2592000\r\ncache-control: no-cache, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2979055,"size_decoded":2979409,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 3991x2250, components 3","md5":"7a82906728097c73757cbcee95174c42","sha1":"091ab681a0a4e2b9f5f6516d2c87fdbed04ad3ca","sha256":"026f8b3c0451be40581491e18410fea6d83f481463ab1211151fb0cfa109d94d","sha512":"34d2ebf0bb96b43199d2c364886c8d108bbeb102235872a0406b3bb4dccdd4566641258f2e6fff1fa692b51d228822585489a6ead799d88aebd8458607ecd950","ssdeep":"24576:g/pTe00S4iwAXXyf7VwGWR3EsiPPPPPxohGyWnMqGTpwL2Rq:g/pa00hAXXyTvWFniPPPPPxohuOwLl","tlshash":"3b25121ede234a974e2d15b4346f7ece6182239935ec9ccc89102d7fab185c3cad78a5","first_seen":"2026-09-10T21:20:35.232296Z","last_seen":"2026-10-09T01:03:16.66225Z","times_seen":4,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":0,"dns":41,"connect":22,"send":0,"wait":66,"receive":352,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/build/assets/_commonjsHelpers-Cpj98o6Y.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:18.772Z","timestamp":1791471258772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /build/assets/_commonjsHelpers-Cpj98o6Y.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ndate: Thu, 08 Oct 2026 14:54:18 GMT\r\netag: \"6ac6eb98-ec\"\r\nlast-modified: Thu, 08 Oct 2026 01:02:16 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 236\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236,"size_decoded":487,"mime_type":"application/javascript","magic":"ASCII text","md5":"146eaf85c344cee008c91f2685dbf82f","sha1":"42d63529a2c0f2f9cc2b797622f6a3a71cae3e66","sha256":"9625379badd4849610dfe6c15453cdf0c0071264c90eef177307fac094d2aa6c","sha512":"2251bb035f0032928f3b8eb47d260be9f4a8b15bee896f308ed1f4316f8f2a194f2cd23a6d9f4780dd92e5221c99f6534bcd7f1d6c613788800ed05e94ac0e2a","ssdeep":"","tlshash":"40d0a7886450d17540aa246ec21739017755217e42ec3991a39d867423a81efa414765","first_seen":"2023-03-14T11:18:50Z","last_seen":"2026-10-09T22:32:05.246399Z","times_seen":3161,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instasklad.com/static/js/bootstrap.min.js","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.077Z","timestamp":1791471259077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /static/js/bootstrap.min.js HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instasklad.com/ru\r\nCookie: XSRF-TOKEN=eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkR3WFFMakxTUDJmT2hGam5SM2VNZnc9PSIsInZhbHVlIjoiRkl1MDhXSk5MNlVIaFFDNUhkeks1YzIzL2twTnpMbE1OUEoxN2lIY3Iwd25XekRaWFRoYUhMWG5QMDl6V1N2ei8yNlp4VUtqOUdsQUV3c3FxcmhvTDR1cXVINmtNaWQ4eEdVVzRtMENZa2FyUWlxeG1UOW5Gc3Vwc3FrK3Q2RWMiLCJtYWMiOiJkNTcxMDE2MDg2NjNkZjI5OTY1ZTQyYTRiYzRjYzI1MTExMGNkNDBhN2YxNTBmNzdmMjBiNTRjZjhjZDgzMzgzIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6Ii9ISFJWQnFzWlRuK0FHcDZDWVE2WkE9PSIsInZhbHVlIjoiMVlMc2RrTi9aS0VFMU8yNDMvYUEwR0NIZmdRc2UvQmpsN2s5OEJKTGJQRUtIRlNvUHpJRG8yUDRFMzBOR3BSRHo2NFBsZWVFL1hJdmlRd1hvSmZpY21aOGtFdFVhSHBXS2VGMUhqL0xOZnBNTWQwN21Tb2ROVWg0YjB1QWFOS2YiLCJtYWMiOiI1M2M3MDVhNGE1NWY2MmM4YzJmMjk1ODY5NTk5M2E1NjVmNTQxYjc5ZmIwMDc0MmUwYzc1YTJjNGU2OWVmMTZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-encoding: gzip\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:54:19 GMT\r\nlast-modified: Thu, 08 Oct 2026 01:01:24 GMT\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkE5ODB4c3NlYUJXSE93c085TjI3TlE9PSIsInZhbHVlIjoiL0JnbHlYZ3EybXJ3dE5Eby8vTXJuNXFIY3lEbDVkOXZFQVdTY294V284RHhGN2h3TC8wemlpa1BDRkt5RldCZG56Qi9KdjJ6WlcrMDdMUGROdVdrdUNKM0ZrTzlIb1JYL1dCTjNCN1FXcGRWTHZqSmU0YXpJeWhWKzlEWXNkUUgiLCJtYWMiOiJhMDA1YjEwOGE4MDdjZGQyN2E2MWMwYTkzNWJkNDdiNThmNWVhYTNjZDI1NWM2NGQ0MDU3YWZlNTFlMDVjMWFkIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; samesite=lax\nrentsws_session=eyJpdiI6IjhpdU1Ea21hK05ZUDBkZjYwaU5qclE9PSIsInZhbHVlIjoiT2N0TW95dWRVNkFidWNscFBDOVI1Z21wb3UyRkN1SU1VV2NIbTljWTV5NmhYdzBNOGtXWEJjcjVOZXJuMlIxVjdnaW5UaW9HOG5nM0JRRjgvdUE0aFQ4ZDFtQmY2N0tsSWRoTG1SakRjQ014WFpwSXhDdVBKaU9CUzd2aVo4UG0iLCJtYWMiOiI3NTk1OGEwNzM5ZjlhZjE1MWY1NDMyOWRkOTIyZjg4ZmNjYmUzOGMyZDc5NWM2NzI5NzI5NjYyYTg3MDU0ZDRiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkE5ODB4c3NlYUJXSE93c085TjI3TlE9PSIsInZhbHVlIjoiL0JnbHlYZ3EybXJ3dE5Eby8vTXJuNXFIY3lEbDVkOXZFQVdTY294V284RHhGN2h3TC8wemlpa1BDRkt5RldCZG56Qi9KdjJ6WlcrMDdMUGROdVdrdUNKM0ZrTzlIb1JYL1dCTjNCN1FXcGRWTHZqSmU0YXpJeWhWKzlEWXNkUUgiLCJtYWMiOiJhMDA1YjEwOGE4MDdjZGQyN2E2MWMwYTkzNWJkNDdiNThmNWVhYTNjZDI1NWM2NGQ0MDU3YWZlNTFlMDVjMWFkIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:19Z","raw_expires":"Thu, 29 Oct 2026 14:54:19 GMT","max_age":1814400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IkE5ODB4c3NlYUJXSE93c085TjI3TlE9PSIsInZhbHVlIjoiL0JnbHlYZ3EybXJ3dE5Eby8vTXJuNXFIY3lEbDVkOXZFQVdTY294V284RHhGN2h3TC8wemlpa1BDRkt5RldCZG56Qi9KdjJ6WlcrMDdMUGROdVdrdUNKM0ZrTzlIb1JYL1dCTjNCN1FXcGRWTHZqSmU0YXpJeWhWKzlEWXNkUUgiLCJtYWMiOiJhMDA1YjEwOGE4MDdjZGQyN2E2MWMwYTkzNWJkNDdiNThmNWVhYTNjZDI1NWM2NGQ0MDU3YWZlNTFlMDVjMWFkIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; samesite=lax"},{"name":"rentsws_session","value":"eyJpdiI6IjhpdU1Ea21hK05ZUDBkZjYwaU5qclE9PSIsInZhbHVlIjoiT2N0TW95dWRVNkFidWNscFBDOVI1Z21wb3UyRkN1SU1VV2NIbTljWTV5NmhYdzBNOGtXWEJjcjVOZXJuMlIxVjdnaW5UaW9HOG5nM0JRRjgvdUE0aFQ4ZDFtQmY2N0tsSWRoTG1SakRjQ014WFpwSXhDdVBKaU9CUzd2aVo4UG0iLCJtYWMiOiI3NTk1OGEwNzM5ZjlhZjE1MWY1NDMyOWRkOTIyZjg4ZmNjYmUzOGMyZDc5NWM2NzI5NzI5NjYyYTg3MDU0ZDRiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-29T14:54:19Z","raw_expires":"Thu, 29 Oct 2026 14:54:19 GMT","max_age":1814400,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"rentsws_session=eyJpdiI6IjhpdU1Ea21hK05ZUDBkZjYwaU5qclE9PSIsInZhbHVlIjoiT2N0TW95dWRVNkFidWNscFBDOVI1Z21wb3UyRkN1SU1VV2NIbTljWTV5NmhYdzBNOGtXWEJjcjVOZXJuMlIxVjdnaW5UaW9HOG5nM0JRRjgvdUE0aFQ4ZDFtQmY2N0tsSWRoTG1SakRjQ014WFpwSXhDdVBKaU9CUzd2aVo4UG0iLCJtYWMiOiI3NTk1OGEwNzM5ZjlhZjE1MWY1NDMyOWRkOTIyZjg4ZmNjYmUzOGMyZDc5NWM2NzI5NzI5NjYyYTg3MDU0ZDRiIiwidGFnIjoiIn0%3D; expires=Thu, 29 Oct 2026 14:54:19 GMT; Max-Age=1814400; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35452,"size_decoded":10658,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32405)","md5":"046ba2b5f4cff7d2eaaa1af55caa9fd8","sha1":"b3f2ef9f985e7906c9360756b73cd64bf7733647","sha256":"c8eeec83fe8bf655eeeda291466d268770436dde4e3e40416a85d05d3893e892","sha512":"02d866a0e7ae7cf36dd5a34e318887a291102a74fbcb5e48786d1c7e860f143eefaef08640820cbf628767e9f7991410487d83d64d42e7c6e7047e32c0dbec75","ssdeep":"768:N8LJD27UwlNAMlbWqXYR+jS1s8ep0smQirXf8u8GfDZZSQ:iY7NBS1W8v8UDZMQ","tlshash":"56f29546b23031a107efb1e5415f020e72396a6de90690bc78a5daf63db9c48317bf39","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-10-09T21:46:34.59699Z","times_seen":4088,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"instasklad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://instasklad.com/app/kfp6sic0bgzh5oxiv6r0?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false","fqdn":"instasklad.com","domain":"instasklad.com","tld":"com"},"ip":{"addr":"195.246.230.67","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://instasklad.com/ru","date":"2026-10-08T14:54:19.809Z","timestamp":1791471259809,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instasklad.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:02:30 GMT","end":"Wed, 06 Jan 2027 00:02:29 GMT"},"fingerprint":{"sha1":"E2:1B:55:32:61:3F:B8:B7:B8:F1:F7:02:8A:93:DF:DC:31:F5:7B:52","sha256":"C6:59:0F:3F:17:F2:FD:AF:DD:E9:21:1A:E5:3A:17:22:A6:36:B1:ED:E5:CD:87:24:22:D4:65:47:23:AA:8A:40"}}},"request":{"raw":"GET /app/kfp6sic0bgzh5oxiv6r0?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false HTTP/1.1\r\nHost: instasklad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://instasklad.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SZcEIsaETbyVqntovxOUpw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVOSkZqNGV1N0FuekE3QXoyb0dpMlE9PSIsInZhbHVlIjoiTkltdmIzMW1tUXdEL1VQV2FHRE0yTVJUbDV5YVc5R2EwQlJleHlpakVCOEpVWHd6dHVZcUpaYVFPZElsTlRFN1RGdER5SExjZ1U4dEJ3bGN5M0V0clMxOERwUVh6WlZ0RDRNUFBna1dURkwrbG9Walc2SVorc1N0YVgraUNGNWEiLCJtYWMiOiJiZWMzNDhhMTc5OTQwNjc3NDdiYjQzZWRkZGJmMzUzZTJkOThhNjFjMTExMzBmMDcyNzY5Y2ZhMWM5N2ZhOTRkIiwidGFnIjoiIn0%3D; rentsws_session=eyJpdiI6ImlyT0kzZ05OM0grdGFuQnpTZ081eWc9PSIsInZhbHVlIjoiME9vMnZ1NHRMTk4yanpFbktVcVdWM0RkOVIzMkhacml5SlhaNk4zVW5rNThKZTNJWHlMNi9qTUVJMFlueVl6bmdDaEZIdlFiejVFOGhORmgxVkFzK2NEVGRSZHM1KzF4RkJwYUNYeGYrNkhNbW1oVUQ1aFQ4cUdiajBzMWdRQ2ciLCJtYWMiOiIzZGI3MzliODUwYzg5NDNmY2YzYjkyMjY0YzZjOWVmOGU3YjI5OGY2YzVmY2JhZWFiZjU3ZDIxMTEwMWViNjZiIiwidGFnIjoiIn0%3D; storefront_locale=eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IjVOSkZqNGV1N0FuekE3QXoyb0dpMlE9PSIsInZhbHVlIjoiTkltdmIzMW1tUXdEL1VQV2FHRE0yTVJUbDV5YVc5R2EwQlJleHlpakVCOEpVWHd6dHVZcUpaYVFPZElsTlRFN1RGdER5SExjZ1U4dEJ3bGN5M0V0clMxOERwUVh6WlZ0RDRNUFBna1dURkwrbG9Walc2SVorc1N0YVgraUNGNWEiLCJtYWMiOiJiZWMzNDhhMTc5OTQwNjc3NDdiYjQzZWRkZGJmMzUzZTJkOThhNjFjMTExMzBmMDcyNzY5Y2ZhMWM5N2ZhOTRkIiwidGFnIjoiIn0%3D"},{"name":"rentsws_session","value":"eyJpdiI6ImlyT0kzZ05OM0grdGFuQnpTZ081eWc9PSIsInZhbHVlIjoiME9vMnZ1NHRMTk4yanpFbktVcVdWM0RkOVIzMkhacml5SlhaNk4zVW5rNThKZTNJWHlMNi9qTUVJMFlueVl6bmdDaEZIdlFiejVFOGhORmgxVkFzK2NEVGRSZHM1KzF4RkJwYUNYeGYrNkhNbW1oVUQ1aFQ4cUdiajBzMWdRQ2ciLCJtYWMiOiIzZGI3MzliODUwYzg5NDNmY2YzYjkyMjY0YzZjOWVmOGU3YjI5OGY2YzVmY2JhZWFiZjU3ZDIxMTEwMWViNjZiIiwidGFnIjoiIn0%3D"},{"name":"storefront_locale","value":"eyJpdiI6ImlDeGVZaXViaDBiRW84MnpFWm8xQ1E9PSIsInZhbHVlIjoiSnhlMnFrdTBKaktWaWx0ZEFQME5wTGJsTE1KWFhyaHgvSmEzSENsOFRzVDVCdlJwUHdMTGtZbTFhZXJoR1Z4YyIsIm1hYyI6ImM2OTBmMzllMjlmZGVhMzdjYTk3ODU5NjZmZWFkMzZiNTdjYThlYTRlYThiMjdjYmFmODFiYjE4ODBiNWUzMDEiLCJ0YWciOiIifQ%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: o4/r6b48QtC8GV+zv6kqYer2MmE=\r\nServer: Caddy\r\nUpgrade: websocket\r\nX-Powered-By: Laravel Reverb\r\nDate: Thu, 08 Oct 2026 14:54:20 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":211,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T22:29:40.553637Z","times_seen":18983619,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":55,"send":0,"wait":278,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}