{"report_id":"9d131f90-9f55-4503-beae-1998d6c11b93","version":6,"status":"done","tags":[],"date":"2025-07-28T06:18:12Z","url":{"schema":"http","addr":"legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","fqdn":"legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","fqdn":"www.legalizer.cc","domain":"legalizer.cc","tld":"cc"},"title":"DDoS-Guard"},"submit":{"url":{"schema":"http","addr":"legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","fqdn":"legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-01T06:18:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-28T06:17:45Z","timestamp":1753683465,"ip_dst":{"addr":"172.18.0.17","port":33684,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING DDoS-Guard Hosted Content","source":"{\"timestamp\":\"2025-07-28T06:17:45.557261+0000\",\"flow_id\":563519406315753,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"186.2.163.231\",\"src_port\":80,\"dest_ip\":\"172.18.0.17\",\"dest_port\":33684,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043310,\"rev\":1,\"signature\":\"ET HUNTING DDoS-Guard Hosted Content\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Low\"],\"created_at\":[\"2023_01_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2023_01_17\"]}},\"http\":{\"hostname\":\"www.legalizer.cc\",\"url\":\"/.well-known/ddos-guard/wrongip.js\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":5567},\"files\":[{\"filename\":\"/.well-known/ddos-guard/wrongip.js\",\"sid\":[],\"gaps\":false,\"state\":\"TRUNCATED\",\"stored\":false,\"size\":5567,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":7,\"bytes_toserver\":1182,\"bytes_toclient\":7710,\"start\":\"2025-07-28T06:17:45.497897+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-28T06:17:55Z","timestamp":1753683475,"ip_dst":{"addr":"172.18.0.17","port":33674,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING DDoS-Guard Hosted Content","source":"{\"timestamp\":\"2025-07-28T06:17:55.557389+0000\",\"flow_id\":1268463126030188,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"186.2.163.231\",\"src_port\":80,\"dest_ip\":\"172.18.0.17\",\"dest_port\":33674,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043310,\"rev\":1,\"signature\":\"ET HUNTING DDoS-Guard Hosted Content\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Low\"],\"created_at\":[\"2023_01_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2023_01_17\"]}},\"http\":{\"hostname\":\"www.legalizer.cc\",\"url\":\"/.well-known/ddos-guard/wrongip.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2037},\"files\":[{\"filename\":\"/.well-known/ddos-guard/wrongip.css\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":2037,\"tx_id\":1}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":6,\"bytes_toserver\":1943,\"bytes_toclient\":3804,\"start\":\"2025-07-28T06:17:45.239468+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.legalizer.cc","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-11-16","domain_rank":0,"first_seen":"2018-12-14T10:58:45Z","last_seen":"2025-06-10T09:24:32.865124Z","alert_count":2,"request_count":5,"received_data":35194,"sent_data":3594,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"legalizer.cc","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-11-16","domain_rank":0,"first_seen":"2025-03-18T03:46:13.608092Z","last_seen":"2025-03-18T03:46:13.608092Z","alert_count":0,"request_count":1,"received_data":1155,"sent_data":759,"comment":"","tags":null,"fingerprints":[{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]},{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-28T06:17:45Z","timestamp":1753683465,"ip_dst":{"addr":"172.18.0.17","port":33684,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING DDoS-Guard Hosted Content","source":"{\"timestamp\":\"2025-07-28T06:17:45.557261+0000\",\"flow_id\":563519406315753,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"186.2.163.231\",\"src_port\":80,\"dest_ip\":\"172.18.0.17\",\"dest_port\":33684,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043310,\"rev\":1,\"signature\":\"ET HUNTING DDoS-Guard Hosted Content\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Low\"],\"created_at\":[\"2023_01_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2023_01_17\"]}},\"http\":{\"hostname\":\"www.legalizer.cc\",\"url\":\"/.well-known/ddos-guard/wrongip.js\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":5567},\"files\":[{\"filename\":\"/.well-known/ddos-guard/wrongip.js\",\"sid\":[],\"gaps\":false,\"state\":\"TRUNCATED\",\"stored\":false,\"size\":5567,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":7,\"bytes_toserver\":1182,\"bytes_toclient\":7710,\"start\":\"2025-07-28T06:17:45.497897+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-28T06:17:55Z","timestamp":1753683475,"ip_dst":{"addr":"172.18.0.17","port":33674,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING DDoS-Guard Hosted Content","source":"{\"timestamp\":\"2025-07-28T06:17:55.557389+0000\",\"flow_id\":1268463126030188,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"186.2.163.231\",\"src_port\":80,\"dest_ip\":\"172.18.0.17\",\"dest_port\":33674,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043310,\"rev\":1,\"signature\":\"ET HUNTING DDoS-Guard Hosted Content\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Low\"],\"created_at\":[\"2023_01_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2023_01_17\"]}},\"http\":{\"hostname\":\"www.legalizer.cc\",\"url\":\"/.well-known/ddos-guard/wrongip.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2037},\"files\":[{\"filename\":\"/.well-known/ddos-guard/wrongip.css\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":2037,\"tx_id\":1}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":6,\"bytes_toserver\":1943,\"bytes_toclient\":3804,\"start\":\"2025-07-28T06:17:45.239468+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.legalizer.cc/.well-known/ddos-guard/wrongip.js","fqdn":"www.legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa83093b54cc45784e7b3416237dc61f","sha1":"4f93cb43dc130732f0eeb558e3ad6cc595589f11","sha256":"5e89fd3c7c928d63f050e24a6f536cc5ae2def0fd51a7b3cc64113499c136c1e","sha512":"28cabc87dce4b59aab1e2de8759092a8e854414339dd7c431d3b83a0f2cc7fa10d4d3b8cfc635ee18b3a3d80a064eb3e7b6f83a5116e68db32fcc1451eb9e0ae","ssdeep":"384:ekMzelCQR05TN23zWEkoIsOzWY3r1toVkJKfgwUnqyZFrdW4WKtm3tV9wzl6T+94:ekMzelCImyWqGWwHKfgwUNP9ODZWOMmB","tlshash":"97d2c2c9f6c2f064439b7561403f100bf33a2d69a86e8094e2aad4d47cbd94ac17bf6d","size":30406,"data":"","first_seen":"2024-12-18T07:13:09.332755Z","last_seen":"2026-04-26T03:32:56.38047Z","times_seen":280,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-28T06:17:45Z","timestamp":1753683465,"ip_dst":{"addr":"172.18.0.17","port":33684,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING DDoS-Guard Hosted Content","source":"{\"timestamp\":\"2025-07-28T06:17:45.557261+0000\",\"flow_id\":563519406315753,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"186.2.163.231\",\"src_port\":80,\"dest_ip\":\"172.18.0.17\",\"dest_port\":33684,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043310,\"rev\":1,\"signature\":\"ET HUNTING DDoS-Guard Hosted Content\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Low\"],\"created_at\":[\"2023_01_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2023_01_17\"]}},\"http\":{\"hostname\":\"www.legalizer.cc\",\"url\":\"/.well-known/ddos-guard/wrongip.js\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":5567},\"files\":[{\"filename\":\"/.well-known/ddos-guard/wrongip.js\",\"sid\":[],\"gaps\":false,\"state\":\"TRUNCATED\",\"stored\":false,\"size\":5567,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":7,\"bytes_toserver\":1182,\"bytes_toclient\":7710,\"start\":\"2025-07-28T06:17:45.497897+0000\"}}"}],"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","fqdn":"www.legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-28T06:17:44.931Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread HTTP/1.1\r\nHost: www.legalizer.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1950,"data":"e=37dfbd8ee84e00126fedc13de9438c9d9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f6718878488527a374fac7c7403d1398c64c156655422c0525409355557c7bc384877be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db3870f29de3ad33e46daf40d612f04a6f73a0c7402c6821069a67899c19f00535f983c77b0f2f7489ce31218884421e385863455ee69c26727f06acf8402fdff9a07893e65e724b2ca3f7a3979926b8d48d5ce255995b6c33dff488eba3269adfe56a943b12c3bc8b700a1ce5392becd0576ef1c7a031d152aa18acc64995529291299b7a68c7dd7e837bc487f7e193fdb74c38fc2eaaa9b87c0077e38d719ab542b345461dc50e488fc2afe581b2c530887280d0f59f7bae242d7ac4682c9093815e20c0a82beb41a9d34c9c37f73d614d45ea31b1069e88ec79b5883bcc10a5c09ed564825f4f61f84c175679093087a060a04ed1cf912fa89225a5d0209acca9fb7eaebeec586a68a3ef1e1c9bf8491442f0ecc33afd6fc4ae25bbf224a061b22d87118806ddc33dc71a27e4b293663f3d681f2b0b5c14a8fd8d6cd201bf594a5f34f9b647c3851b04f9a4c2b9ba68def0e2fe86e4b2f64b4b20e64087b7457384426107ca655d7070eb7daf7274def99526d334c52f99aa32ccbf089a7d072224047c0df6c3b8da651907936a1cc296dbc3c68241198cf3f824c2dd7969d9cc133b6cfa97d15525b1279b26e15c855fe0408d8964acd24796c489c0845526aab96f718864a793b1ac139f6a3c150192685d53ceeb5bfaa64bad9ae0b9168fdef1411c2b55fc7dfd17a03edf9d7bd4761a334b3a616db50bcad04f0aea3e84feaa6bbb9a1ad52b2dbd1b7e308dbc844848e470f58e10da1b234017ed292683b3c52896027c888f12a1dfddff9c509a0017301ff26b370ddfc35d4eb03cfbec9e6edc86ae1c5761a368281416905403a48be41911906276d38b95189f81a8c5583ea861f8156053cc4d237bc9c24605d290f1dcbcf74fbd77\u0026cri=L2ZIUKGk5s\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026uvid=324fb53abd9e0b404dd01b0f0babceb32b235cae\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=4280\u0026ti=15121\u0026mo=0\u0026pn=16745\u0026spn=1624\u0026fp=615\u0026snt=1\u0026mm=13%7C745%2C27%2C-104%2C17%2C745%2C27%2C4280%2C1%2C745%2C27%7C727%2C34%2C-2%2C3%2C727%2C34%2C14233%2C1%2C727%2C34\u0026gi=9%2C5904%7C12%2C5904%7C5%2C13740"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T18:51:39.072062Z","times_seen":17874979,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":87,"dns":0,"connect":30,"send":0,"wait":0,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","fqdn":"www.legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-28T06:17:45.240Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread HTTP/1.1\r\nHost: www.legalizer.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":241,"data":"{\"events\":[{\"schema_id\":\"trekkie_metrics/2.0\",\"payload\":{\"metric_name\":\"navigation-PerformanceNavigationTiming-navigate\",\"shop_id\":90134151555},\"metadata\":{\"event_created_at_ms\":1753683424142}}],\"metadata\":{\"event_sent_at_ms\":1753683424142}}"}},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nServer: ddos-guard\r\nDate: Mon, 28 Jul 2025 06:17:45 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nSet-Cookie: __ddg8_=JVB2wQUW9E3qBNDI; Domain=.legalizer.cc; Path=/; Expires=Mon, 28-Jul-2025 06:37:45 GMT\n__ddg10_=1753683465; Domain=.legalizer.cc; Path=/; Expires=Mon, 28-Jul-2025 06:37:45 GMT\n__ddg9_=91.90.42.154; Domain=.legalizer.cc; Path=/; Expires=Mon, 28-Jul-2025 06:37:45 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 587\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":587,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (587), with no line terminators","md5":"0044f599bb1614bc412f3b3331bf4ff6","sha1":"e1c98e479ba8f8d01ad96090f0ecc69d2246b4a9","sha256":"bb4ad35776dadba17794f9a00462fbfd625cde7e155e42fe99fb4a107776f451","sha512":"da657684c2778690720d0e3dfe19c1c9731b5c200b371fed973bc8b2e474062d71a5749fc762968d032a05dec20156635b6b15361d90c5ded71ae0d46d93cf21","ssdeep":"","tlshash":"5ff0a2fbc870382f605347c4bc81370c1699da0dee95a4316be9569d86d67649913448","first_seen":"2024-12-18T07:13:09.325278Z","last_seen":"2026-07-24T02:56:53.099235Z","times_seen":334,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":30,"dns":1,"connect":30,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.legalizer.cc/.well-known/ddos-guard/wrongip.js","fqdn":"www.legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","date":"2025-07-28T06:17:45.503Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /.well-known/ddos-guard/wrongip.js HTTP/1.1\r\nHost: www.legalizer.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\r\nCookie: __ddg8_=JVB2wQUW9E3qBNDI; __ddg10_=1753683465; __ddg9_=91.90.42.154\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":926,"data":"{\"events\":[{\"schema_id\":\"trekkie_storefront_page_view/1.2\",\"payload\":{\"name\":null,\"referrer\":\"\",\"path\":\"/\",\"search\":\"\",\"title\":\"Luminara\",\"url\":\"https://www.luminara-mode.de/\",\"properties\":{},\"eventId\":\"sh-4fad8029-453E-41AC-909B-AA7402039E3A\",\"s2sMetadata\":{\"navigationApi\":\"PerformanceNavigationTiming\",\"navigationType\":\"navigate\"},\"shopifyEmitted\":true,\"pageType\":\"home\",\"shopId\":90134151555,\"isMerchantRequest\":null,\"themeId\":179914506627,\"themeCityHash\":\"11709736985266631970\",\"contentLanguage\":\"de\",\"currency\":\"EUR\",\"eventMetadataId\":\"72f56065-9e64-4797-8b2b-7395f3b03c12\",\"appName\":\"storefront\",\"uniqToken\":\"00000000-0000-0000-5000-000000000000\",\"visitToken\":\"00000000-0000-0000-5000-000000000000\",\"microSessionId\":\"4fad7fe0-CD03-4755-874C-DCADA095A0C0\",\"microSessionCount\":1,\"isPersistentCookie\":true,\"eventType\":\"page\"},\"metadata\":{\"event_created_at_ms\":1753683424618}}],\"metadata\":{\"event_sent_at_ms\":1753683424618}}"}},"response":{"raw":"HTTP/1.1 200 Ok\r\nServer: ddos-guard\r\nDate: Mon, 28 Jul 2025 06:17:45 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nContent-Type: application/javascript\r\nExpires: Mon, 28 Jul 2025 07:17:45 GMT\r\nContent-Length: 30468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"Ok","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25340), with LF, NEL line terminators","md5":"aa83093b54cc45784e7b3416237dc61f","sha1":"4f93cb43dc130732f0eeb558e3ad6cc595589f11","sha256":"5e89fd3c7c928d63f050e24a6f536cc5ae2def0fd51a7b3cc64113499c136c1e","sha512":"28cabc87dce4b59aab1e2de8759092a8e854414339dd7c431d3b83a0f2cc7fa10d4d3b8cfc635ee18b3a3d80a064eb3e7b6f83a5116e68db32fcc1451eb9e0ae","ssdeep":"384:ekMzelCQR05TN23zWEkoIsOzWY3r1toVkJKfgwUnqyZFrdW4WKtm3tV9wzl6T+94:ekMzelCImyWqGWwHKfgwUNP9ODZWOMmB","tlshash":"97d2c2c9f6c2f064439b7561403f100bf33a2d69a86e8094e2aad4d47cbd94ac17bf6d","first_seen":"2024-12-18T07:13:09.332755Z","last_seen":"2026-04-26T03:32:56.38047Z","times_seen":280,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":26,"dns":1,"connect":31,"send":0,"wait":30,"receive":37,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-28T06:17:45Z","timestamp":1753683465,"ip_dst":{"addr":"172.18.0.17","port":33684,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING DDoS-Guard Hosted Content","source":"{\"timestamp\":\"2025-07-28T06:17:45.557261+0000\",\"flow_id\":563519406315753,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"186.2.163.231\",\"src_port\":80,\"dest_ip\":\"172.18.0.17\",\"dest_port\":33684,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043310,\"rev\":1,\"signature\":\"ET HUNTING DDoS-Guard Hosted Content\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Low\"],\"created_at\":[\"2023_01_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2023_01_17\"]}},\"http\":{\"hostname\":\"www.legalizer.cc\",\"url\":\"/.well-known/ddos-guard/wrongip.js\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":5567},\"files\":[{\"filename\":\"/.well-known/ddos-guard/wrongip.js\",\"sid\":[],\"gaps\":false,\"state\":\"TRUNCATED\",\"stored\":false,\"size\":5567,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":7,\"bytes_toserver\":1182,\"bytes_toclient\":7710,\"start\":\"2025-07-28T06:17:45.497897+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.legalizer.cc/.well-known/ddos-guard/wrongip.css","fqdn":"www.legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","date":"2025-07-28T06:17:45.498Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /.well-known/ddos-guard/wrongip.css HTTP/1.1\r\nHost: www.legalizer.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\r\nCookie: __ddg8_=JVB2wQUW9E3qBNDI; __ddg10_=1753683465; __ddg9_=91.90.42.154\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2053,"data":"{\"signature\":\"UxFdVMwNFNwN0wzODEybVeyJhZF9sb2FkZWRfY2FsbGJhY2siOnsiY29udGFpbmVyTmFtZSI6InJzIiwiYWRzTG9hZGVkIjp0cnVlLCJjYWxsYmFja09wdGlvbnMiOnsiY2FmUmVxdWVzdEFjY2VwdGVkIjp0cnVlLCJjYWZTdGF0dXMiOnsiY2xpZW50IjoicGFydG5lci1kcC1ib2RpczMwXzNwaCIsImFkdWx0IjpmYWxzZX19fSwiYXBwX3ZlcnNpb24iOiIwLjguNCIsImNhZl9jbGllbnRfaWQiOiJwYXJ0bmVyLWRwLWJvZGlzMzBfM3BoIiwiY2FmX3RpbWVkX291dCI6ZmFsc2UsImNhZl9sb2FkZWRfbXMiOjY3OCwiY2hhbm5lbCI6InBpZC1ib2Rpcy1nY29udHJvbDk3LHBpZC1ib2Rpcy1nY29udHJvbDEwNixwaWQtYm9kaXMtZ2NvbnRyb2w0MjUscGlkLWJvZGlzLWdjb250cm9sMTUxLHBpZC1ib2Rpcy1nY29udHJvbDE2MiIsImRlc2t0b3AiOnRydWUsInRlcm1zIjoiIiwiZmRfc2VydmVyX2RhdGV0aW1lIjoxNzUzNjgzNDI3LCJmZF9zZXJ2ZXIiOiJpcC0xMC0yMDEtNDAtMTA2LmV1LXdlc3QtMS5jb21wdXRlLmludGVybmFsIiwiZmxleF9ydWxlIjp7ImFjdGlvbiI6IiIsImN1c3RvbV9yZWFzb24iOiIiLCJmbGV4X2lkIjowLCJtaXNtYXRjaCI6ZmFsc2V9LCJob3N0Ijoid3cyNS5jMWVjMTVlOTcwLm5ld3Mtc2l0dWZpLmNvbSIsImlwIjoiOTEuOTAuNDIuMTU0IiwiaXZ0IjpmYWxzZSwibW9iaWxlIjpmYWxzZSwicGFnZV9oZWFkZXJzIjp7fSwicGFnZV9sb2FkZWRfY2FsbGJhY2siOnsicmVxdWVzdEFjY2VwdGVkIjp0cnVlLCJzdGF0dXMiOnsiY2xpZW50IjoicGFydG5lci1kcC1ib2RpczMwXzNwaCIsImFkdWx0IjpmYWxzZX19LCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6eyJzdWJpZDEiOiIyMDI1MDcyOC0xNjE2LTQ0YzgtOTliNy03ZTU0MGY0YzEyNWMifSwicGFnZV90aW1lIjoxNzUzNjgzNDI2LCJwYWdlX3VybCI6Imh0dHA6Ly93dzI1LmMxZWMxNWU5NzAubmV3cy1zaXR1ZmkuY29tLz9zdWJpZDE9MjAyNTA3MjgtMTYxNi00NGM4LTk5YjctN2U1NDBmNGMxMjVjIiwidGFibGV0IjpmYWxzZSwidGVtcGxhdGVfaWQiOjM0NSwidHlwZSI6InZpc2l0IiwidXNlcl9oYXNfYWRfYmxvY2tlciI6bnVsbCwidXNlcl9pZCI6NzcwMjYsInV1aWQiOiJmNjNjZGI5YS05NzQ4LTQ0MTgtOGQ4Zi04OWQ1MTQ2NjIzZWEiLCJ6ZXJvY2xpY2siOnt9LCJwb3B1cCI6ZmFsc2UsInRpbWV6b25lX29mZnNldCI6MCwidXNlcl9wcmVmZXJlbmNlIjp7ImxvY2FsZSI6ImVuLVVTIiwiY2FsZW5kYXIiOiJncmVnb3J5IiwibnVtYmVyaW5nU3lzdGVtIjoibGF0biIsInRpbWVab25lIjoiVVRDIiwieWVhciI6Im51bWVyaWMiLCJtb250aCI6Im51bWVyaWMiLCJkYXkiOiJudW1lcmljIn0sInVzZXJfdXNpbmdfZGFya21vZGUiOmZhbHNlLCJ1c2VyX3N1cHBvcnRzX2Rhcmttb2RlIjp0cnVlLCJ3aW5kb3dfcmVzb2x1dGlvbiI6eyJ3aWR0aCI6MTI4MCwiaGVpZ2h0IjoxMDI0fSwic2NyZWVuX3Jlc29sdXRpb24iOnsid2lkdGgiOjEyODAsImhlaWdodCI6MTAyNH0sImZyYW1lIjpudWxsfQ==\"}"}},"response":{"raw":"HTTP/1.1 200 Ok\r\nServer: ddos-guard\r\nDate: Mon, 28 Jul 2025 06:17:45 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nContent-Type: text/css\r\nExpires: Mon, 28 Jul 2025 07:17:45 GMT\r\nContent-Length: 2037\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"Ok","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2037,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2037), with no line terminators","md5":"a68b0d6dda5b68426925486b7c8d6ca7","sha1":"3b4fe309ca96432b919974676e4d6165754cec64","sha256":"1ad07bb78a8ce1d938b93339581d963edb773041deda339bc3bf1b5ebcfe9533","sha512":"f0866c9cb447917f327636c287d6f0bcad38db12bb90cecc47efb92ae6ce47ad26f4c291c7a63dd383ea4c0a68b0416d748aa6d5122d69994baf1c0d8fb69396","ssdeep":"","tlshash":"e54152226660b02db4b7c8a525c9aa993424ca15a0aff7fcde537131dacf1932e3174d","first_seen":"2025-02-26T21:52:29.856114Z","last_seen":"2026-03-23T03:15:25.75936Z","times_seen":255,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-28T06:17:55Z","timestamp":1753683475,"ip_dst":{"addr":"172.18.0.17","port":33674,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING DDoS-Guard Hosted Content","source":"{\"timestamp\":\"2025-07-28T06:17:55.557389+0000\",\"flow_id\":1268463126030188,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"186.2.163.231\",\"src_port\":80,\"dest_ip\":\"172.18.0.17\",\"dest_port\":33674,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2043310,\"rev\":1,\"signature\":\"ET HUNTING DDoS-Guard Hosted Content\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Low\"],\"created_at\":[\"2023_01_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2023_01_17\"]}},\"http\":{\"hostname\":\"www.legalizer.cc\",\"url\":\"/.well-known/ddos-guard/wrongip.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2037},\"files\":[{\"filename\":\"/.well-known/ddos-guard/wrongip.css\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":2037,\"tx_id\":1}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":6,\"bytes_toserver\":1943,\"bytes_toclient\":3804,\"start\":\"2025-07-28T06:17:45.239468+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.legalizer.cc/favicon.ico","fqdn":"www.legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"186.2.163.231","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","date":"2025-07-28T06:17:45.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.legalizer.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\r\nCookie: __ddg8_=JVB2wQUW9E3qBNDI; __ddg10_=1753683465; __ddg9_=91.90.42.154\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":3639,"data":"{\"data\":\"dUu6VR3AVG1LAlc3KFo0HgH7aYREUsClBs18X2xP7OP9E%2BJEGzIxVwaXPy1yYcLMvmT0L%2BM9SnofnDF2cvoOM6KxUhBTo9Npkiba6v1FS2%2B3eHEx0oz3PQCGRn3uPnqcz0bYa%2FZlEv0F2ayryz3kSht%2B2Pie351CkDQVewXv4wm0kuK2JuQqgXDzy%2FSctiEwcM8uKlcmEFkkn7ospqP0589t59eyf05qEE5ldufFz0xaDAG01Oxg4RnQFAHlVJ73cg7KiSMMCIn2rjWRZFsl8KlDj8XoF4tcHG3D8JXmoxVgfXBO%2FU0ZAzRyzZUbGeIHE37QTIU11OrbAa41ks8TvEbR8nfLxLGM6qJWPajEgZl%2BDzs52C4lFZgyVs6AMGPerxqlPavBCT6zyNkSL9rzKNDjqR2nwV3n6wky9%2BLBtAYvZubOrGjbBQu7qhQMF6%2F4lwufhIz%2FxSgFpfAXEVLBEJTL7d7FVofxJxvsL5oJXVQDmy7DoMWQ88i9TR2XMGTeu0Lp91CPP7SCkNl8okDE%2BMaSRgO9sOA6X8piOPY5uaycyOeJ2Hj1JSyx%2FQZMZT5dto03VNjwDwEyUc8Svr6tAyF6C%2BKhUwbzMkO7IrwDJWVGAiyuuxG0lHuAghJGdkIFnWdohczUfTBraP51q%2BZF8Zfeq5XJQdasJ7F9UugQyhJvwLk1yM1mnvgCfyCnptvJ0eJf7oJ5C6y8T%2F05btV7plRW9CzumyUBDco5TgWSKLmxCfNdSLGLasgyk1q%2FCJN7qq%2FYFZv867CGpw7zJhlaCg%2FSzt%2F4c%2BQxrwQEE1KySwMNORXBSWlCU96ghJQSN%2FmGSlVUpsbcKiIAmWXLI7BbT%2BpnzxX3HZTEpyMIUoRXaeABiy%2BmEzj1KP15TEpim52dU5uS%2B%2FJpPx1OdF77rXrC9aQNanRnaN7iHbqtuQHvfX4yoSEv179cA01X16dz6ZopZBgvZiTTntx9yGxlwMwFlaajnemAyJLNEnILeB2T8if525GEp6scs%2BzUDuMX8bIx9U5RGZRhPCuztL21WBJAxjUhqG4WDjoo76mK8QRjrp3%2BOZQGgZurCMW4dwOth9opqltaJWR9YlgDKlbZBWYWPsoLNem2AHazK0UriSb6DBcnaMT0fys7bY9uWAYpxmp3rR%2FBq2SxL9STt3awyBE2UyQCexWJ2SuqlcA%2FcOz%2FDqpHRNYmR53BItX%2F4174SLlbUmme%2BtkhkVgEVZ51MrUZL%2F%2BrXhhYc9482D6RaIBC8BqQRqW0GSVwUhwo3En3Lp6tEObvDLdSO6gIuzuBO0B96BQAHEMfAL0J5%2FoNmJL7lnFLN1GBI0UPtkxN43Wwx4H%2BiGLN3O3uRQZqcnhYQBP2Y4tCC74sxZ7A2Qzh%2B%2BP3ULu%2FIybgyupgBDjsM3%2Bkq%2FBh4jzEdi6YwXQUmMUYE19eK85Q2vxaxPB2uAQ22CxR9SWXL8zvbYG4BPfa5Io6E6Qf89eZCQTgW%2BcwVouOup7sdNj3SloMvhxwlrSVWYSQl%2FqvRXn6qVlfQjv4pT1FsDalJthBo7JMXd8rlYifUA3OY8rNrSR4k%2FwEUglD4uwkmZIVJyWIloNapGNAa1XYwKp9Y39%2FoiYOiFP254P8vzQjVqHQQzYtKPvezGjv7qPeD5%2FjjA4dhJ5kbotEd%2BGNBlLk%2BgXb%2FurvGLaweMdJ9AzTYihCxCO1WDQSyFX%2BTROqVRRpc8IL1CG3Pn%2F2hbx%2BBdJHz2Xmjn%2FXi17juoTA99LNZcq3QSyn1bWd8wYPnXm7fGt%2FVZOQwQD4knsrPmGF3lyWprMuGEG00O0vaUxJytw0gB8FWVp1bCfPpXF0XqhwdAx6UlUwIAWjScWN0AoNiCgjk57u7SvPLpDisKIYy%2B579kH5A2UFULoxNqmTbBT9vFJ45MjUI6E2qcMJzPvr3QwlcgplL9u3D1cvB139Iwhl3uy8AJPYrJhCnJeTqyqSMeUlZSYmWa7NmhnKVac6L7OR6X%2B4EeJvUdHII%2B7R24HV3e1Yz8SI8yUHBeFBJ988mLD67a8tbD%2BP64aCLstbRYiLyUfxInwpLz3teN7F2%2BU4%2BCiJhoI1WmD%2FPH47sQwXFhaMqV7w1D6sJLFh%2B7Gvy20e8BeQKpR2RB03tR%2FQ20PuauZiz7%2Fh%2FZjBxrdOGRLEejiFdBIZkOxGf2V0vc4f9n29xRkaGRQkUPWGH4RrrlJI%2B%2BlZlUJQt%2FJ2aUzxqJBP32nzJKpKECmMlz63Np8Dmr9F9crNI7CKHA0Wb%2FUVFF8N4IWOkm%2FoMb956C8XWJ4NHLKZTwFWVDf5370SFWQRq9IgIkxtjflS%2FYznmoi8X0Pje%2FV1%2FAmt%2BqN6RxqDicvCnKMh%2FEd%2F%2FWDph4eV85EuTFdwqpVIEYQclLy4so9P9NeI03fmZoHytNKRTiooeaxcUjb2exDIp%2FHF1sp1EzYwXql%2BZEn072hB3vQ75MMIkbfZXyhrC812Tv5ML59IdG6rsQtxI2TYaeZ7qr7K9YBISIxLywbnkrxQMr6ETA%2F7PeAsdIpnYJ5473R2mEd%2FalgNbUwdcqHaQKQP2yYOT3MJd%2FjDR0Wv9I3gC%2BnLP9L7PPyoPZmWjDEg%2F0PXCc7fr6Q8uJMhPTO1BXR8df5SdupmMYzC%2BieTJGtsmXR%2BvPWA%2FTxxAgUJIZ8DU2O219Kyln0AWfjpNYEwRqoO6%2BDaVesd6gnSl%2FpIH1Tdkl7uf2u95er3Kws%2BccmAj7K70JnDsNWBjhHu8uknwQmjee9GpDdrn4QNZsMXFnshv1T50oCpWBxrC4hhlHuDJXOYUP4hrGp7RPzgXbbeny4bzqMQCNEskEVME4wW3BHuKY%2Fcr524vlmnLGxAacyVlrocmPa88Ql0Qz8shFqUpXy46Ua2Fzs0bnDuPjJCsM5vDGs3EQMKGfWQMOP8WlWLIQ4xRgsahy9Sd5Vm8OMdlD9%2BAxBEHIswqvz7XfE8XtdaHl5KfdAUVR66dH2LjJR71YH0c6FfOU9jeRJfYonZUMwEf7IKQ%2FiBwceDY7uTqmDyUc6BVSz11PqwooRTW1ComAQDkrKipNcBLCtvtrFQIcpdYsqDBOUaoahOSq0xBzd6mS6Eg4qdBgaGYjI%2Fagy%2BEaZ5PkDO8lsYA2RztMNqrlD4fHG4xht7RXDwQIptEvfDtzOXwlZQy6iDjOFkXXOyMfPc73QjrL3LMRQdVnGxyzHqSVy%2BX8EeHCKW0g8IRria1c4eZ4cEG92uHuo67%2B4prBOg8hucuZY5BFg7KCJhRs%2BSe3dmsDg3jCdk7HuLJu3Aim41NyRm1jbDwpmy5UiwTnhmZDWTaJmSL38e0NrjmlQn55MKzKBXHBr1qfmdEB4O4NUzRDAq%2FipBLiYmUP30U5Zi4LkVBNhwzCpXzcuTZKc%2BRHFzmq64GZvkbc%2Bl2%2FKkYyFYg2Gtha%2Baiw%3D%3D\"}"}},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nServer: ddos-guard\r\nDate: Mon, 28 Jul 2025 06:17:45 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nSet-Cookie: __ddg8_=5SEJ5XgBavG32DMi; Domain=.legalizer.cc; Path=/; Expires=Mon, 28-Jul-2025 06:37:45 GMT\n__ddg10_=1753683465; Domain=.legalizer.cc; Path=/; Expires=Mon, 28-Jul-2025 06:37:45 GMT\n__ddg9_=91.90.42.154; Domain=.legalizer.cc; Path=/; Expires=Mon, 28-Jul-2025 06:37:45 GMT\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 587\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":587,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (587), with no line terminators","md5":"0044f599bb1614bc412f3b3331bf4ff6","sha1":"e1c98e479ba8f8d01ad96090f0ecc69d2246b4a9","sha256":"bb4ad35776dadba17794f9a00462fbfd625cde7e155e42fe99fb4a107776f451","sha512":"da657684c2778690720d0e3dfe19c1c9731b5c200b371fed973bc8b2e474062d71a5749fc762968d032a05dec20156635b6b15361d90c5ded71ae0d46d93cf21","ssdeep":"","tlshash":"5ff0a2fbc870382f605347c4bc81370c1699da0dee95a4316be9569d86d67649913448","first_seen":"2024-12-18T07:13:09.325278Z","last_seen":"2026-07-24T02:56:53.099235Z","times_seen":334,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread","fqdn":"legalizer.cc","domain":"legalizer.cc","tld":"cc"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-28T06:17:44.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legalizer.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Jun 2025 03:48:39 GMT","end":"Sat, 27 Sep 2025 04:44:46 GMT"},"fingerprint":{"sha1":"E1:4B:51:C8:4B:02:FE:E6:8C:78:54:72:A9:3D:95:9D:3E:3A:90:0E","sha256":"5D:38:DD:26:04:19:9F:DB:E0:DF:E4:7F:3D:F0:68:79:80:60:09:FB:4C:69:49:5F:8D:BF:8C:BF:64:E7:C7:65"}}},"request":{"raw":"GET /threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread HTTP/1.1\r\nHost: legalizer.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":78,"data":"userStatus=%3Cspan+class%3D%22offline%22%3EOffline%3C%2Fspan%3E\u0026id_user=490413"}},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 28 Jul 2025 06:17:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://www.legalizer.cc/threads/%D0%A2%D0%9E%D0%9B%D0%AC%D0%AF%D0%A2%D0%A2%D0%98-%D0%90%D0%9D%D0%A2%D0%98%D0%9A%D0%A0%D0%98%D0%97%D0%98%D0%A1-%D0%9A%D0%90%D0%A7%D0%95%D0%A1%D0%A2%D0%92%D0%9E-%D0%9F%D0%9E-%D0%93%D0%9E%D0%A1%D0%A2%D0%A3-24-7-%D0%97%D0%B0%D0%BA%D0%BB%D0%B0%D0%B4%D0%BA%D0%B8.436312/unread\r\ncache-control: max-age=3600\r\nexpires: Mon, 28 Jul 2025 07:17:44 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6zfctMV6MFQC4o1GaO3e6qwcZw1GiNlJgZHUE2byACrFtTQrvWJ8TmU7%2Fsz%2B%2FBBzJ9I6hVV0cvmYwCcYZBNw34IixNX33uDXBnwM0DBxVbuH57v1qFjEmoor4uNoIPM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 966241577c0ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=586\u0026min_rtt=417\u0026rtt_var=280\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3274\u0026recv_bytes=1457\u0026delivery_rate=7489655\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=de3efc3e86a8f8a6\u0026ts=55\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HTTP/3","description":"HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.","website":"https://httpwg.org/","common_platform_enumeration":"","icon":"HTTP3.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HTTP/2","description":"HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.","website":"https://http2.github.io","common_platform_enumeration":"","icon":"HTTP2.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T18:51:39.072062Z","times_seen":17874979,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":31,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}