{"report_id":"a0cc3e6c-0b5b-42f7-b4a4-ed2627f079f7","version":6,"status":"done","tags":[],"date":"2024-04-17T08:26:21Z","url":{"schema":"http","addr":"cdn8.bunkr.ru/mernis-Turkey-2016-50kk-gC0F7iWd.7z","fqdn":"cdn8.bunkr.ru","domain":"bunkr.ru","tld":"ru"},"ip":{"addr":"91.149.226.35","port":0,"asn":201744,"as":"Bulletnet Ltd","country":"Poland","country_code":"PL"},"final":{"url":{"schema":"http","addr":"bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"title":"Bunkr"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T20:00:27Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static.bunkr.ru","ip":{"addr":"146.70.80.218","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Denmark","country_code":"DK"},"domain_registered":"2022-08-25","domain_rank":0,"first_seen":"2022-12-21 18:18:10","last_seen":"2024-04-16 20:48:49","alert_count":0,"request_count":1,"received_data":12299,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5i68sbhin.com","ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2023-03-30","domain_rank":0,"first_seen":"2023-04-18 10:59:45","last_seen":"2024-04-16 19:15:29","alert_count":0,"request_count":3,"received_data":2757,"sent_data":4599,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn8.bunkr.ru","ip":{"addr":"91.149.226.35","port":443,"asn":201744,"as":"Bulletnet Ltd","country":"Poland","country_code":"PL"},"domain_registered":"2022-08-25","domain_rank":0,"first_seen":"2022-12-06 08:32:09","last_seen":"2024-04-16 21:58:38","alert_count":0,"request_count":1,"received_data":460,"sent_data":503,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bnkrdlvr.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2023-01-14 12:34:44","last_seen":"2024-04-16 19:09:32","alert_count":0,"request_count":1,"received_data":169207,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"core-apps.b-cdn.net","ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-02-13 19:52:44","last_seen":"2024-04-16 16:11:43","alert_count":0,"request_count":2,"received_data":2827,"sent_data":864,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tx.trionalpistler.com","ip":{"addr":"23.109.170.72","port":80,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-01-31","domain_rank":0,"first_seen":"2024-01-31 09:16:11","last_seen":"2024-04-16 20:48:47","alert_count":1,"request_count":1,"received_data":1412,"sent_data":324,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.bunny.net","ip":{"addr":"146.70.80.218","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Denmark","country_code":"DK"},"domain_registered":"1999-11-22","domain_rank":0,"first_seen":"2022-03-21 08:38:02","last_seen":"2024-04-16 22:24:10","alert_count":0,"request_count":3,"received_data":58225,"sent_data":1430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bunkrr.su","ip":{"addr":"186.2.163.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-06-02","domain_rank":0,"first_seen":"2023-06-07 17:57:09","last_seen":"2024-04-17 05:14:09","alert_count":0,"request_count":1,"received_data":695,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bunkr.si","ip":{"addr":"104.21.76.180","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-13","domain_rank":0,"first_seen":"2024-01-25 17:06:27","last_seen":"2024-04-16 19:09:18","alert_count":0,"request_count":6,"received_data":150046,"sent_data":2212,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lylufhuxqwi.com","ip":{"addr":"212.117.190.201","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2022-12-13","domain_rank":0,"first_seen":"2022-12-13 17:03:59","last_seen":"2024-04-16 20:48:47","alert_count":0,"request_count":3,"received_data":46426,"sent_data":1787,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-04-17","alert":"Sinkholed","trigger":"trionalpistler.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"5i68sbhin.com/ssp/req/2021505/?pb=18ca0bc57ecba4a482d18ca4fad5b0051713349556\u0026psp=Z9IjRHp23zu0eGC-Vul2hVWhQ-Qnh4vCWe0mhSbeuUmlEnI8YDYUnRNDbgaNmxVKMcXSGSzWiWUilmFIHOZvGGju823JBTMq79oXXvk_znh5zlbWCKxXbHU8AsKTTa4lUAEDwzSWflmpbjPUs7cBKhLGJRAwVYj6r5OuDDrXkp8HpbodlTe4DR703-M58iafHGlndqeHjYAfcG3txXb6xx8PfNdxn9UCU3LI3pwbNhzLY5xrJopGmcGzHcjLjHibF2DoYVTENIZnlu6uj16E4g4Q0-8LV7uYCP1ILsiwV8PaN8_SqLPZtsU1Nr6awYsCV44QFUO2V_Vn0QH-T7RqtJAqDoao_GnEq_r8IdRCnmi0sjUnHQxoGYfrHNEzHx_SOhNIUlJGynYF86UTc1l35krILssamJhV3wO0ApXo8p_V7McEd13euQtRkoae8xHwoXFInj-RmgflZQDSH1kNEcP4LB8d8b_sNIHb6YZFTuv9zQMEf6s7tNdFigZvzYzkmrFDEUjn-miKB1M6mVIinq4i3EqSIwhfUhnItpTiltTKpqMgY-j_wFdVJ0clFwg5E2sB3qLCjKwMz_Ov0zwcdgsYbnyKMXonMjRJaa9jhMeisN-PNr4x8v7BjPqABT86Xs__Siw9ioSpivXWNMrf0bNnVl1-ze_cTy8-Kk3GRzO-PQajPyemlrsWuI_sbHdwpCRgXnkx8RQDiaOVRoQJuPy_MYBmbA0yMhXzEvuhmLpzHBE=\u0026cb=_cldeppd7x9a83a54s20m2u\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1","fqdn":"5i68sbhin.com","domain":"5i68sbhin.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"21ec8e2618a084072f88abcf843e4ebc","sha1":"a4d009044f59137a8decefe989558856d505381d","sha256":"51f177ca75f52c4a2483745e0f3089d3b742d6df7f406a431ec1f9a51d21ceb5","sha512":"b18f20a8888cc495b5a348835b2fd77b9d5e87cb3fecc341cbcc95c3a745364cca0eb62bf8ae74486b57dcf52187ab2aff7bd18f1607887d79dfd3b59265d95e","ssdeep":"","tlshash":"d29004d504d75050f1f54140d1d7314470141005d1035d3175c1405cd4445d37050175","size":37,"data":"","first_seen":"2024-04-16T15:27:12Z","last_seen":"2025-02-04T01:24:30.932501Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/build/370.a4405777.js","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"172.67.198.103","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79ed4be5936705a7cf87602db7e144a2","sha1":"2bc50d1e98bc9bcdde8829c1a95894b68f37cc9c","sha256":"82845b94a737f10b85fe113ac6819b03e4dba508ee1a5f88cf3c53a42ad63167","sha512":"e25d6f9dec16a103cbfdbe27174d84c09ddd9ed9b315e86ebb4d75f3cbc76bb9d09dcc6054338cac2281a77905eaaa21a8e60e3e082487b133f477d9a8767188","ssdeep":"6144:NYXPP+VyohgJPK7ss6p5DaVmyZs4EX/Fd:+8gRyGfFd","tlshash":"d7a408897251b47306ef40e6407b4207f2266569640748acf5adddce2b7cc89b2b7f3a","size":457528,"data":"","first_seen":"2023-05-08T12:47:44Z","last_seen":"2025-01-06T13:47:55.490378Z","times_seen":1445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"104.21.76.180","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a210c998f7636e990793b9fa384083c7","sha1":"294971a9de57b6b7de6960706bb8622f8155e200","sha256":"066af95f0302017528e6a6cf3b9cabecc08903c84c1a6a9ac76ec8a662a1c842","sha512":"b9c4ced512354c880fcf2a407ae8e71dc38963e21999ddba34ed9eb478e45af001dc8d78ac156f06e383d6da5162407873bb77c435ce1d8bc99ed938e477ef7a","ssdeep":"192:3P/2gB9Kv24LzdFadUCpBCWGEpnq3jnxNY0zysTqyJmbCO9He8rok:n2i9KOYB+pBCWGEA3jnXHzysTqsmbCOb","tlshash":"892282687ed0642c1393c73b713bb9eff12a3a69255c884fd1127c91241a22ff9da572","size":10091,"data":"","first_seen":"2024-04-09T23:33:33Z","last_seen":"2024-08-20T05:13:31.771169Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"tx.trionalpistler.com/fNLpfingvXt/54083","fqdn":"tx.trionalpistler.com","domain":"trionalpistler.com","tld":"com"},"ip":{"addr":"23.109.170.72","port":80,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"4350003303c00000cc300000300300000000000000000c00c000000000000000000303","size":6,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-03T12:19:59.158661Z","times_seen":10521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/build/runtime.9a71ee5d.js","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"172.67.198.103","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f667bac66ff97a3b30bf628c79b6e82","sha1":"0f6fef8cca58b9e33e67e0d02b470ff3a45a0972","sha256":"7ac8f192ba7190dcf6a08cdf8d8642cdfb86d1710478a51634bc1d88fdb1cd67","sha512":"38f69c221d987f87afd22b077eb1d832efbf8e6ad3178f880c1b4700fb107a0f3d2fa92abd5147e8c38db11049b47a73b627a16e5d6fe08a762fb8a58c9651a2","ssdeep":"","tlshash":"3e21749531e4f4e437d6d8c5091f8046f6129873117ee8f1e71bcc6578249920267eb2","size":1405,"data":"","first_seen":"2023-05-08T12:47:44Z","last_seen":"2026-03-27T09:40:15.366991Z","times_seen":1486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/build/app.291ea157.js","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"172.67.198.103","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c41d9cf3409695f2ff381e38f12fb95","sha1":"a948d817c8b815d1e9a08bfeb9a1c07c9103a615","sha256":"df0d317f430aac3ef6ed4c0a30eef09858699eef77a07649c33094e126fc0aeb","sha512":"f089d071f36bcf4f188ed8877cbf5c08946756a48a3d091b330172c6178012639526adff733e0548a018412557a6e03bd73570d5f20ecc1298843f2540ea38ea","ssdeep":"","tlshash":"3061738939a2f0b803e7a069912f440ef22db9b9605dd0e0e659d4f0bcf55ee4633f19","size":3131,"data":"","first_seen":"2023-03-13T17:21:15Z","last_seen":"2025-01-06T13:47:55.493811Z","times_seen":1445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylufhuxqwi.com/get/2021505?zoneid=2021505\u0026jp=_clocpa56pauvkbdn1qtpdv\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1\u0026uf=0","fqdn":"lylufhuxqwi.com","domain":"lylufhuxqwi.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e9e27ef161a319a2b8f7853ba74c88e","sha1":"7e3a4da958871c7f21ddc4e7138ccbd5109c054e","sha256":"5522705aa8d22d7322698e029857c482450ba217341f62684fdc9d68f0021788","sha512":"1c61c8fa67818348537441f91d80667d6c42d4ae858d0de5f2f975a67c8d5c7fea27b47b143668cdff0ff8983eee0dc1e678c27632ea19a7a26aec7d1efac467","ssdeep":"96:edDOwVAqrceBcDOwVAqrceBZLSdj1grlYgeM:gD1VnrcqcD1VnrcqZWdurwM","tlshash":"c48172db829225c68a97c42f21c37c391cd83ac9668aa07ee098ff491d0fde3455d997","size":3764,"data":"","first_seen":"2024-08-20T04:11:27.734589Z","last_seen":"2024-08-20T04:11:27.734589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lylufhuxqwi.com/aas/r45d/vki/2021505/ea44c3f6.js","fqdn":"lylufhuxqwi.com","domain":"lylufhuxqwi.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5bdb60ce3508e18a4d3c421cbdb5b66","sha1":"e6f84147622d6903b403b59602b5017c3bb7c07d","sha256":"eebe8209847fafce87dce23ee13c3f670f251666699e487976ecdba4661e95c8","sha512":"2e489fa40d5936dba5ba836a2ecd7a82ee1435fd770dce550ec14f6063274923ea4330e41874355a9cbeec8fd00bcc9b3b2b6cf6e5e6c45f32543ff8e66f2377","ssdeep":"1536:v7YRloZR1/3w7jxqESvq3BTadlKw72f6rpmmweTngEJft/9fG20pheqXsgLfYnko:v7YRf7nt3BTS0PiaMB","tlshash":"1aa3f6a4b2767c1342f1d46f00ef7d8a20ea89445819ce7aac73df4c2ae417ac167b75","size":105946,"data":"","first_seen":"2024-04-09T23:33:33Z","last_seen":"2024-08-20T05:13:31.7701Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"104.21.76.180","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b56f956173922524d906bee2b8b9a56","sha1":"e9c3897e5b8f0beadaa8892b0d00ccd82a5e23e9","sha256":"c8e72cd7a3675799efc2b168895b388593219fb0e18813eee1d0ca4dd50c6175","sha512":"bdab25bb4340f314ec476af82995f3ad1eaf6e25e309615ea4738a7e31797fcce1ef02adbc8ca88215abecc7fe9820fe172f0ca4c53f39c72078d16aaf5fbf0c","ssdeep":"","tlshash":"a7b024d7f7541031547f0f0013ddd4cc310000c104c040010c44cc000373554047355c","size":118,"data":"","first_seen":"2023-03-13T17:21:15Z","last_seen":"2024-10-18T01:46:52.180031Z","times_seen":1388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-apps.b-cdn.net/js/script.js","fqdn":"core-apps.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd4e2373b2e8c4dac2e80159641c5f1","sha1":"e273656e58ca934d873204e68dd35670fde657ed","sha256":"021f0fd27042b279a49e982215c6dc3c3ab84e95b35553a119dfdbd50af6be94","sha512":"fb04feb14c2eb999da4b032812a447e1d3b9f0fbc85abcdfb886df2cf1bdc1bcae1684a4e118626ecad9441fa56302ff8981b4ded5da2033012eed2e8a258398","ssdeep":"","tlshash":"a02189deb841353249b0e5a7aa2f370330277169280950279201d9577414d5f8379fce","size":1346,"data":"","first_seen":"2023-05-22T17:22:24Z","last_seen":"2026-04-03T23:40:17.380726Z","times_seen":7512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn8.bunkr.ru/mernis-Turkey-2016-50kk-gC0F7iWd.7z","fqdn":"cdn8.bunkr.ru","domain":"bunkr.ru","tld":"ru"},"ip":{"addr":"91.149.226.35","port":443,"asn":201744,"as":"Bulletnet Ltd","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-04-17T08:25:55.423Z","timestamp":1713342355423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn8.bunkr.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Feb 2024 06:40:38 GMT","end":"Fri, 24 May 2024 06:40:37 GMT"},"fingerprint":{"sha1":"E9:9C:DA:25:FD:17:D3:C6:01:B5:D6:6B:A3:00:A7:23:CA:12:6F:01","sha256":"F4:8C:B0:AF:9A:0D:D9:8E:8F:43:79:25:C4:B3:DE:3C:7A:77:EB:DA:70:D8:F8:1B:BC:01:39:D7:30:3E:33:9F"}}},"request":{"raw":"GET /mernis-Turkey-2016-50kk-gC0F7iWd.7z HTTP/1.1\r\nHost: cdn8.bunkr.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Wed, 17 Apr 2024 08:25:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://bunkrr.su/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":162,"size_decoded":162,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4f8e702cc244ec5d4de32740c0ecbd97","sha1":"3adb1f02d5b6054de0046e367c1d687b6cdf7aff","sha256":"9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a","sha512":"21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f","ssdeep":"","tlshash":"0bc08cadab022cc8b8a73b3861c36160e2ec80701699451101b04a07f1cf1979ec23d1","first_seen":"2023-04-05T03:07:27Z","last_seen":"2025-10-21T23:58:19.216342Z","times_seen":131101,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":103,"dns":89,"connect":3,"send":0,"wait":3,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bunkrr.su/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","fqdn":"bunkrr.su","domain":"bunkrr.su","tld":"su"},"ip":{"addr":"186.2.163.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-04-17T08:25:55.537Z","timestamp":1713342355537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bunkrr.su","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Apr 2024 00:31:50 GMT","end":"Fri, 05 Jul 2024 00:31:49 GMT"},"fingerprint":{"sha1":"39:7C:6C:9D:C4:2B:A9:43:EA:F6:18:1A:E2:5F:DD:3C:A1:81:24:0B","sha256":"58:5A:7E:74:31:B4:E9:A3:94:32:13:AC:C5:15:28:BD:BC:33:1D:E7:20:28:5C:3F:4C:07:59:D8:18:C3:A7:6E"}}},"request":{"raw":"GET /d/mernis-Turkey-2016-50kk-gC0F7iWd.7z HTTP/1.1\r\nHost: bunkrr.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: ddos-guard\r\ncontent-security-policy: upgrade-insecure-requests;\r\nset-cookie: __ddg1_=TjxyuYFHdDz1lYMfhrq5; Domain=.bunkrr.su; HttpOnly; Path=/; Expires=Thu, 17-Apr-2025 08:25:55 GMT\r\ndate: Wed, 17 Apr 2024 08:25:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z\r\nx-rate-limit-enabled: True\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 0\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":162,"size_decoded":162,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4f8e702cc244ec5d4de32740c0ecbd97","sha1":"3adb1f02d5b6054de0046e367c1d687b6cdf7aff","sha256":"9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a","sha512":"21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f","ssdeep":"","tlshash":"0bc08cadab022cc8b8a73b3861c36160e2ec80701699451101b04a07f1cf1979ec23d1","first_seen":"2023-04-05T03:07:27Z","last_seen":"2025-10-21T23:58:19.216342Z","times_seen":131101,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":76,"dns":23,"connect":18,"send":0,"wait":39,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"104.21.76.180","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-04-17T08:25:55.988Z","timestamp":1713342355988,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /d/mernis-Turkey-2016-50kk-gC0F7iWd.7z HTTP/1.1\r\nHost: bunkr.si\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=14400, must-revalidate\r\nX-Rate-Limit-Enabled: True\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nx-front-cache: MISS\r\nx-front-cache-status: BYPASS\r\nExpires: Wednesday, 17-Apr-2024 08:25:55 GMT plus 1 hour\r\nCF-Cache-Status: HIT\r\nAge: 1\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MgzQ31Hmu%2Fw7i9d2%2BLmMlqcsjL3qhSz5dl%2FVlNEPwt4kZgYRYw1g6MhUH1IJSGZiLPq7V2WLfeRnpdf4TMVQuh2sXsiDPsadHQXcfnwiazh9sJJfD8uLWyMo%2BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 875b06fd9f3a8f63-CPH\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":6619,"size_decoded":18189,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (10276)","md5":"dec4156b9bd2fefef28c6b8b62ba3b21","sha1":"6a5ee01f6e3ef80aee11ca90d21877fb95740ad5","sha256":"a3502fef29e37365ae3d7b38de9f04bbcd49a65b1a0ad90f6411120365377437","sha512":"2bd24efa0cf06e410c16dd55b32b9f76765c40969eb6b0c1f48e875b9b0fba5746950d9ad641aaacca7ad589cb69c3d52ae654e924344dbced97a6352c845422","ssdeep":"384:sgA2i9KOYB+pBCWGEA3jnXHzysTqsmbCO88rod0A+8KLUO/R7Dw43OSh6LOFmB3l:3A2whYLWW3jXHzysTQb5880d0WsUKtFW","tlshash":"3582d7647fc0282e1353c7667227bafde06e5e3ae40fc88ef1736890264551ef896176","first_seen":"2024-04-15T16:49:20Z","last_seen":"2024-08-20T04:26:40.196981Z","times_seen":132,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":100,"dns":82,"connect":28,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/build/app.26f3607a.css","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"104.21.76.180","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.327Z","timestamp":1713342356327,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /build/app.26f3607a.css HTTP/1.1\r\nHost: bunkr.si\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 25 Feb 2024 03:19:51 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65dab1d7-106b0\"\r\nX-Rate-Limit-Enabled: True\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: HIT\r\nAge: 5994\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=We4LZxH7nnzvBjC3pElYHt%2FvZyYBI0DXQ0FWf8QhP17L8%2BKJGgZojf6UOghbKdA8oeQ1r6MeiUYWdatD3vXsJMJvC2qFruv9IC14IcKCXnR6%2F%2BG90sLrPQhGPw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 875b06ff0a3d8f63-CPH\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11585,"size_decoded":67248,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"4b302a3816687daf7f82abd20c9b15e9","sha1":"247cab2f4f48cefda9e6d535fd113747a2537235","sha256":"810bb9972bbb8daab52bee77d27c074055067af69bc3d542f56fcc7d36c8a271","sha512":"9734639caf7ef50db24062c565c3a9affe0df22aa7775d837fd681fe14e34fbef4fca491ca0787526faa6ac5fd6e8c9cfefaf99460c41a871c31076e267a9f10","ssdeep":"768:KwcHoV/RsH29fPExb7AlsK7ZNtFBIF5+ums+8F5/x2Rsby:KwcHQ/RsH29fAbMuKtFeF5+k5/x2Rsby","tlshash":"1263731cbb46103f3c6b84f6e698f9dd911b71c0ef3a09e6bd4292105b917f62da7608","first_seen":"2023-12-12T07:22:29Z","last_seen":"2024-08-20T16:03:43.248782Z","times_seen":773,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"lylufhuxqwi.com/aas/r45d/vki/2021505/ea44c3f6.js","fqdn":"lylufhuxqwi.com","domain":"lylufhuxqwi.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":80,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.334Z","timestamp":1713342356334,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /aas/r45d/vki/2021505/ea44c3f6.js HTTP/1.1\r\nHost: lylufhuxqwi.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 08 Apr 2024 13:20:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6613ef14-19e1e\"\r\nX-JS-AB2: current\r\nTiming-Allow-Origin: *\r\nAccept-CH: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40077,"size_decoded":105946,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65106)","md5":"f5bdb60ce3508e18a4d3c421cbdb5b66","sha1":"e6f84147622d6903b403b59602b5017c3bb7c07d","sha256":"eebe8209847fafce87dce23ee13c3f670f251666699e487976ecdba4661e95c8","sha512":"2e489fa40d5936dba5ba836a2ecd7a82ee1435fd770dce550ec14f6063274923ea4330e41874355a9cbeec8fd00bcc9b3b2b6cf6e5e6c45f32543ff8e66f2377","ssdeep":"1536:v7YRloZR1/3w7jxqESvq3BTadlKw72f6rpmmweTngEJft/9fG20pheqXsgLfYnko:v7YRf7nt3BTS0PiaMB","tlshash":"1aa3f6a4b2767c1342f1d46f00ef7d8a20ea89445819ce7aac73df4c2ae417ac167b75","first_seen":"2024-04-09T23:33:33Z","last_seen":"2024-08-20T05:13:31.7701Z","times_seen":165,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":25,"dns":16,"connect":17,"send":0,"wait":18,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/build/app.291ea157.js","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"172.67.198.103","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.338Z","timestamp":1713342356338,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /build/app.291ea157.js HTTP/1.1\r\nHost: bunkr.si\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 25 Feb 2024 03:19:51 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65dab1d7-c3b\"\r\nX-Rate-Limit-Enabled: True\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: HIT\r\nAge: 798\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VjIY9Vw11tQwIf%2FWGBTl0jSVtafhcR%2Fn7o%2Bp3%2Fe808T1BQxiof5Nw%2BAKFhRJeGanvswF5nC4bxda8woUKxy7yQxulRWDVyZ056SybmEnr9kARkDSQ72gVYziZA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 875b06ff6cbc92b0-CPH\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1383,"size_decoded":3131,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3131), with no line terminators","md5":"5c41d9cf3409695f2ff381e38f12fb95","sha1":"a948d817c8b815d1e9a08bfeb9a1c07c9103a615","sha256":"df0d317f430aac3ef6ed4c0a30eef09858699eef77a07649c33094e126fc0aeb","sha512":"f089d071f36bcf4f188ed8877cbf5c08946756a48a3d091b330172c6178012639526adff733e0548a018412557a6e03bd73570d5f20ecc1298843f2540ea38ea","ssdeep":"","tlshash":"3061738939a2f0b803e7a069912f440ef22db9b9605dd0e0e659d4f0bcf55ee4633f19","first_seen":"2023-03-13T17:21:15Z","last_seen":"2025-01-06T13:47:55.493811Z","times_seen":1445,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":30,"dns":14,"connect":27,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/build/370.a4405777.js","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"172.67.198.103","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.336Z","timestamp":1713342356336,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /build/370.a4405777.js HTTP/1.1\r\nHost: bunkr.si\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 25 Feb 2024 03:19:51 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65dab1d7-6fb38\"\r\nX-Rate-Limit-Enabled: True\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: HIT\r\nAge: 6775\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=abocApAYVIr1IWdattw43k4Qbp7%2BDCHP%2FqNbLOKMZCgcmS6E5Nyo7iczK2bMGA5TQt06rMpeDKTKN87KLv%2BbR3c8rghjwvxnTaViQ9Ky4tmk2gTlAesBd5TJ9A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 875b06ff5dbb92a9-CPH\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123073,"size_decoded":457528,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65465)","md5":"79ed4be5936705a7cf87602db7e144a2","sha1":"2bc50d1e98bc9bcdde8829c1a95894b68f37cc9c","sha256":"82845b94a737f10b85fe113ac6819b03e4dba508ee1a5f88cf3c53a42ad63167","sha512":"e25d6f9dec16a103cbfdbe27174d84c09ddd9ed9b315e86ebb4d75f3cbc76bb9d09dcc6054338cac2281a77905eaaa21a8e60e3e082487b133f477d9a8767188","ssdeep":"6144:NYXPP+VyohgJPK7ss6p5DaVmyZs4EX/Fd:+8gRyGfFd","tlshash":"d7a408897251b47306ef40e6407b4207f2266569640748acf5adddce2b7cc89b2b7f3a","first_seen":"2023-05-08T12:47:44Z","last_seen":"2025-01-06T13:47:55.490378Z","times_seen":1445,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":32,"dns":14,"connect":26,"send":0,"wait":36,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/build/runtime.9a71ee5d.js","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"172.67.198.103","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.335Z","timestamp":1713342356335,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /build/runtime.9a71ee5d.js HTTP/1.1\r\nHost: bunkr.si\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 25 Feb 2024 03:19:51 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65dab1d7-57d\"\r\nX-Rate-Limit-Enabled: True\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: HIT\r\nAge: 4572\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3XHTeY%2F9XxsjJNROppgvm%2BzJxpGvn1caXmTwUpYKnb12GdAHhRn6AJMZWYPW1HGAgE0CvVKv%2FFlUGDi%2FISRD0SgKBia3jaOiUWg84u%2Bd7UDfqU0OpzKNObzRiw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 875b06ff5b8c9302-CPH\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":774,"size_decoded":1405,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1405), with no line terminators","md5":"1f667bac66ff97a3b30bf628c79b6e82","sha1":"0f6fef8cca58b9e33e67e0d02b470ff3a45a0972","sha256":"7ac8f192ba7190dcf6a08cdf8d8642cdfb86d1710478a51634bc1d88fdb1cd67","sha512":"38f69c221d987f87afd22b077eb1d832efbf8e6ad3178f880c1b4700fb107a0f3d2fa92abd5147e8c38db11049b47a73b627a16e5d6fe08a762fb8a58c9651a2","ssdeep":"","tlshash":"3e21749531e4f4e437d6d8c5091f8046f6129873117ee8f1e71bcc6578249920267eb2","first_seen":"2023-05-08T12:47:44Z","last_seen":"2026-03-27T09:40:15.366991Z","times_seen":1486,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":33,"dns":15,"connect":27,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"tx.trionalpistler.com/fNLpfingvXt/54083","fqdn":"tx.trionalpistler.com","domain":"trionalpistler.com","tld":"com"},"ip":{"addr":"23.109.170.72","port":80,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.331Z","timestamp":1713342356331,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /fNLpfingvXt/54083 HTTP/1.1\r\nHost: tx.trionalpistler.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: http://bunkr.si\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Thu, 18-Apr-2024 08:25:56 GMT; Max-Age=86400; path=/\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Thu, 18-Apr-2024 08:25:56 GMT; Max-Age=86400; path=/\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":6,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"4350003303c00000cc300000300300000000000000000c00c000000000000000000303","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-03T12:19:59.158661Z","times_seen":10521,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":137,"dns":131,"connect":18,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-04-17","alert":"Sinkholed","trigger":"trionalpistler.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"bunkr.si/images/logo.svg","fqdn":"bunkr.si","domain":"bunkr.si","tld":"si"},"ip":{"addr":"172.67.198.103","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.341Z","timestamp":1713342356341,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: bunkr.si\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 17 Apr 2024 08:25:56 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 26 Mar 2023 04:20:31 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"641fc80f-1237\"\r\nX-Rate-Limit-Enabled: True\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: HIT\r\nAge: 6990\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TC1jDQqyb5MyrLyWQv21%2BxPdcfIz%2BU11rCAJLOWyNkqsV1sdwOB8yNmm39eteqlM85FUfah7EXojAKnpIdrVX3PjrKOd27x36%2FpGCHEG%2Bz02U9eBvEqJAtOSXw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 875b07002ef892a9-CPH\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1532,"size_decoded":4663,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ec9fa5716d3550f26e55e2d9d1d74bf","sha1":"ff2cc9efc4c657b8d89b879754dcbb35dbd66b32","sha256":"15c4db8dfc9e3b0625b08248c4f3bd711f0fcfc61ddfd91a0e53f340744bae84","sha512":"0f62a25eced7d1a04203b0574ebdfb484c0f2c52749b893f0476e9f0e724d7a3e338d57cce383bf71072abdd181a166c739eacb66bc39fa9e6c874bc994a32dc","ssdeep":"96:Z+fWf5j8Yix3VjLAQfUyC4s3kjLxIdXj3INI/WkQJqW6VmUjM//wjQJhb2zpK0:icZ8Y+vhXvXSj3ImqXOmUY/Yihp0","tlshash":"d0a1308691b2289240d44a7e537916926b3618bf7db3c2989f0759bb344b7333388cec","first_seen":"2023-05-07T22:22:04Z","last_seen":"2024-10-18T01:46:52.116492Z","times_seen":683,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnkrdlvr.b-cdn.net/jXHF2XSLah8luCnxAQ6lutHQl0QATKgP3L71lAwQaI1qF4onezFHRkiLvNewV-3sn0Ikl4GyXcYQfLbteUavHuOqpTYoPNM3LRcMuA.webp","fqdn":"bnkrdlvr.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.342Z","timestamp":1713342356342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Nov 2023 00:00:00 GMT","end":"Mon, 11 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4","sha256":"10:34:38:F7:B3:52:1C:62:D7:D4:B2:40:27:64:58:A2:F9:3F:63:56:24:B4:B4:E4:F2:1C:94:F7:B3:06:C5:F2"}}},"request":{"raw":"GET /jXHF2XSLah8luCnxAQ6lutHQl0QATKgP3L71lAwQaI1qF4onezFHRkiLvNewV-3sn0Ikl4GyXcYQfLbteUavHuOqpTYoPNM3LRcMuA.webp HTTP/1.1\r\nHost: bnkrdlvr.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 168588\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1140224\r\ncdn-uid: 371ad0f1-44d3-4f43-8cec-b0300cebb244\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 17 Aug 2023 22:06:55 GMT\r\ncdn-storageserver: SE-318\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.04\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 03/24/2024 18:53:19\r\ncdn-edgestorageid: 830\r\ncdn-status: 200\r\ncdn-requestid: 0e7b39c8930ee02287b92a55744176a5\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":168588,"size_decoded":168588,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d048b88ffb5aa0399a154e6bad03f63b","sha1":"cfd0c357edd93657a98b902f6e2efc1db03adab4","sha256":"d2621abe7263e3256d629879db3f44ac1dc28396d35bf0961d489451bf9f8502","sha512":"b915b4cae71d3d8877702ddee7d68e3efb1331a80282104db0b496a080adeeb1846767a7afd96ee9fba451a19bf8de79de3bd3c645d72f80584f698077b5e6b0","ssdeep":"3072:6XRvLHRBtUOClfitYvPjtNt05VGuMrUw4L7LyYDgVQJnSHJK+G60D8BV4ykMS:6XR1BeOC5itOpH05lTTuwnSpK40DCVbQ","tlshash":"0af3120882630a74fa6e1476d39e1374f795bdfb38790b11e51ebe4b09d8d227211f8a","first_seen":"2023-08-18T18:48:52Z","last_seen":"2024-10-13T22:11:00.512442Z","times_seen":164,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":149,"dns":0,"connect":7,"send":0,"wait":3,"receive":15,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=rubik:400,700","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"146.70.80.218","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.339Z","timestamp":1713342356339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Apr 2024 10:09:28 GMT","end":"Mon, 08 Jul 2024 10:09:27 GMT"},"fingerprint":{"sha1":"CB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F","sha256":"46:E6:54:1C:39:59:86:98:8C:FB:B7:A0:09:C0:6E:22:DD:53:46:87:E9:32:A1:2F:A8:E6:65:AE:31:04:C0:BE"}}},"request":{"raw":"GET /css?family=rubik:400,700 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DK1-1176\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 05 Apr 2024 15:41:08 GMT\r\ncdn-proxyver: 1.04\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/05/2024 15:41:08\r\ncdn-edgestorageid: 1176\r\ncdn-status: 200\r\ncdn-requestid: fb0963cbedb3b9bc2a693d7ca751eaf8\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18922,"size_decoded":4214,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f7aa928435bc7e44a73049721426810c","sha1":"5c9e845a545addf1e63c7469574f080dc5cb7a3d","sha256":"eb7c7f00a30548036a7323921ee7ac4de4e8e0b244cd84c07ae7da6ea35bba07","sha512":"a67a0c45f981609c0203894d1c446f55c0599bc895bca56d9b00be2924fef31cbf5d2268a6a0b12da7b97a542738ac196d1344c64e8fffb8fd90cd069b34726a","ssdeep":"96:bQOEMR+i8QOEMLwQOEMXfQOEMWFQOEM/4fQOpM7+i8QOpM7wQOpM7fQOpMcFQOp7:h0iSLmVWfFCiX7bocai","tlshash":"b991bef280192040a7867ca373ea9d214e1e67063485a455af689cf4bcf593593e3bff","first_seen":"2023-09-08T22:39:11Z","last_seen":"2024-08-21T07:16:06.227672Z","times_seen":307,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":98,"connect":15,"send":0,"wait":21,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/rubik/files/rubik-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"146.70.80.218","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.555Z","timestamp":1713342356555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Apr 2024 10:09:28 GMT","end":"Mon, 08 Jul 2024 10:09:27 GMT"},"fingerprint":{"sha1":"CB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F","sha256":"46:E6:54:1C:39:59:86:98:8C:FB:B7:A0:09:C0:6E:22:DD:53:46:87:E9:32:A1:2F:A8:E6:65:AE:31:04:C0:BE"}}},"request":{"raw":"GET /rubik/files/rubik-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://bunkr.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18128\r\nserver: BunnyCDN-DK1-1176\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"64a6428a-46d0\"\r\nlast-modified: Thu, 06 Jul 2023 04:26:50 GMT\r\ncdn-storageserver: SE-318\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.04\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/29/2023 14:09:48\r\ncdn-edgestorageid: 1176\r\ncdn-status: 200\r\ncdn-requestid: 0fffa96305e252a5e5b0d314e86360b9\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18128,"size_decoded":18128,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18128, version 1.0","md5":"717055430c80fee2dadb646e2b9800fe","sha1":"9118698612991a83bfda0dfafdd1b9aba2c9adcb","sha256":"67a6e7a3b413d838d3c53b06f53a567671f9477bd703ecdebbc5dcffb587b963","sha512":"5bf97b9db95f2826f62ef35724523e21755c6176dce4093aabe28cc54e8bc7a863cd07c0654716dd7896f7211112c641b972db27654ae896eb95faad47459e9d","ssdeep":"384:fwcKcYMnjM/18cagWlvTH5/CFENTRL85M2L1IL4Ijllnw:eJMjejWlvRCFq2M2LqL4gllnw","tlshash":"a482e1a5e235247a51c89034cce1987e1706afa88af13b9dc9d6359dd0c3eeb5983325","first_seen":"2023-04-11T15:25:57Z","last_seen":"2026-04-03T08:56:24.181239Z","times_seen":1605,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":59,"dns":20,"connect":15,"send":0,"wait":35,"receive":3,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylufhuxqwi.com/solid.gif?z=2021505\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1","fqdn":"lylufhuxqwi.com","domain":"lylufhuxqwi.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.536Z","timestamp":1713342356536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Tue, 09 Jan 2024 12:44:49 GMT","end":"Sat, 06 Jul 2024 21:59:00 GMT"},"fingerprint":{"sha1":"59:69:20:70:FA:E5:D9:16:78:DB:51:76:3B:0A:AD:0A:32:12:73:D1","sha256":"95:80:2C:C7:5F:63:55:FF:A5:93:50:55:32:05:29:93:C8:54:F8:B2:7F:AA:98:7A:E7:CE:21:FF:73:58:ED:99"}}},"request":{"raw":"POST /solid.gif?z=2021505\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1 HTTP/1.1\r\nHost: lylufhuxqwi.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nOrigin: http://bunkr.si\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 21 May 2025 08:25:56 GMT; Secure; SameSite=None\nUID=24041703251407de52735441d4b173f865bf; Path=/; Expires=Wed, 21 May 2025 08:25:56 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":43,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-04T00:12:49.674Z","times_seen":20423,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":265,"dns":3,"connect":20,"send":0,"wait":19,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-apps.b-cdn.net/api/event","fqdn":"core-apps.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.707Z","timestamp":1713342356707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Nov 2023 00:00:00 GMT","end":"Mon, 11 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4","sha256":"10:34:38:F7:B3:52:1C:62:D7:D4:B2:40:27:64:58:A2:F9:3F:63:56:24:B4:B4:E4:F2:1C:94:F7:B3:06:C5:F2"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: core-apps.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nContent-Type: text/plain\r\nContent-Length: 103\r\nOrigin: http://bunkr.si\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 2007452\r\ncdn-uid: 371ad0f1-44d3-4f43-8cec-b0300cebb244\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nx-request-id: F8cDy7ybM5h3-1CEwDSI\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-proxyver: 1.04\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 04/17/2024 08:25:56\r\ncdn-edgestorageid: 1047\r\ncdn-requestid: 67baedc30b241cfec809a7f3d507cb8b\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-04T00:28:03.369063Z","times_seen":390673,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":79,"dns":24,"connect":23,"send":0,"wait":62,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bunkr.ru/img/logo_bunkr-9Kl5M1Y.svg","fqdn":"static.bunkr.ru","domain":"bunkr.ru","tld":"ru"},"ip":{"addr":"146.70.80.218","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.905Z","timestamp":1713342356905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bunkr.ru","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Mar 2024 08:11:19 GMT","end":"Wed, 05 Jun 2024 08:11:18 GMT"},"fingerprint":{"sha1":"16:05:37:3B:5E:89:31:57:38:B0:55:65:F3:DE:A3:86:77:8B:02:8D","sha256":"04:0E:69:6F:AC:D3:B0:60:A3:63:12:76:7F:0D:22:11:BB:81:AC:8C:A9:D9:90:D1:0F:91:81:2E:5C:51:B6:E8"}}},"request":{"raw":"GET /img/logo_bunkr-9Kl5M1Y.svg HTTP/1.1\r\nHost: static.bunkr.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Apr 2024 08:25:57 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DK1-1176\r\ncdn-pullzone: 709401\r\ncdn-uid: 371ad0f1-44d3-4f43-8cec-b0300cebb244\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Thu, 17 Feb 2022 21:35:05 GMT\r\ncdn-cachedat: 10/29/2023 14:09:48\r\ncdn-storageserver: DE-169\r\ncdn-fileserver: 249\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1176\r\ncdn-status: 200\r\ncdn-requestid: 16b9784f862416d4950bccffb5d5e073\r\ncdn-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11674,"size_decoded":11674,"mime_type":"image/svg+xml","magic":"gzip compressed data, from Unix","md5":"540fca17e417868e27464f822dfbaf66","sha1":"e80fda648845d491e618bbe580117e723055c9fd","sha256":"7d2915046fd39a5db8a122af6e6fecc3b46e4c058b381478d3cf30a9dc669bd0","sha512":"d84dc381b518a31097019ac67709b4dc19f501f7c8fed6d8a12fa0a1ff355b4b2030bc806541cd38b1178ddcf62e59cce04987d75246705e4965c54328e16a5e","ssdeep":"192:Ss5oARcDbiMizvnEn2vx7GtzKC0SaOPQPN7U42eHGAZ4NGpRoj2qb7dcvfcQqeZL:3h8bi7fEn2vURKEn42eHGA9oiM5cceV","tlshash":"fe32c06db52d9619c33eaf780fef67ea8929f868db14428720872f41c40695e9f0dc51","first_seen":"2024-08-20T04:11:27.730054Z","last_seen":"2024-08-20T04:11:27.730054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":93,"connect":13,"send":0,"wait":14,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5i68sbhin.com/ssp/req/2021505/?pb=18ca0bc57ecba4a482d18ca4fad5b0051713349556\u0026psp=Z9IjRHp23zu0eGC-Vul2hVWhQ-Qnh4vCWe0mhSbeuUmlEnI8YDYUnRNDbgaNmxVKMcXSGSzWiWUilmFIHOZvGGju823JBTMq79oXXvk_znh5zlbWCKxXbHU8AsKTTa4lUAEDwzSWflmpbjPUs7cBKhLGJRAwVYj6r5OuDDrXkp8HpbodlTe4DR703-M58iafHGlndqeHjYAfcG3txXb6xx8PfNdxn9UCU3LI3pwbNhzLY5xrJopGmcGzHcjLjHibF2DoYVTENIZnlu6uj16E4g4Q0-8LV7uYCP1ILsiwV8PaN8_SqLPZtsU1Nr6awYsCV44QFUO2V_Vn0QH-T7RqtJAqDoao_GnEq_r8IdRCnmi0sjUnHQxoGYfrHNEzHx_SOhNIUlJGynYF86UTc1l35krILssamJhV3wO0ApXo8p_V7McEd13euQtRkoae8xHwoXFInj-RmgflZQDSH1kNEcP4LB8d8b_sNIHb6YZFTuv9zQMEf6s7tNdFigZvzYzkmrFDEUjn-miKB1M6mVIinq4i3EqSIwhfUhnItpTiltTKpqMgY-j_wFdVJ0clFwg5E2sB3qLCjKwMz_Ov0zwcdgsYbnyKMXonMjRJaa9jhMeisN-PNr4x8v7BjPqABT86Xs__Siw9ioSpivXWNMrf0bNnVl1-ze_cTy8-Kk3GRzO-PQajPyemlrsWuI_sbHdwpCRgXnkx8RQDiaOVRoQJuPy_MYBmbA0yMhXzEvuhmLpzHBE=\u0026cb=_cldeppd7x9a83a54s20m2u\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1","fqdn":"5i68sbhin.com","domain":"5i68sbhin.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:57.037Z","timestamp":1713342357037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Tue, 09 Jan 2024 12:52:32 GMT","end":"Sat, 06 Jul 2024 21:59:00 GMT"},"fingerprint":{"sha1":"E5:FF:02:9F:1D:83:A3:9E:4A:16:5C:E7:10:94:74:8B:21:B7:64:F6","sha256":"0A:BF:7A:25:EA:B6:B2:C3:C5:97:D9:A7:5D:26:94:1A:35:25:EB:8E:3E:B0:A7:5A:AB:BC:74:73:77:09:74:90"}}},"request":{"raw":"GET /ssp/req/2021505/?pb=18ca0bc57ecba4a482d18ca4fad5b0051713349556\u0026psp=Z9IjRHp23zu0eGC-Vul2hVWhQ-Qnh4vCWe0mhSbeuUmlEnI8YDYUnRNDbgaNmxVKMcXSGSzWiWUilmFIHOZvGGju823JBTMq79oXXvk_znh5zlbWCKxXbHU8AsKTTa4lUAEDwzSWflmpbjPUs7cBKhLGJRAwVYj6r5OuDDrXkp8HpbodlTe4DR703-M58iafHGlndqeHjYAfcG3txXb6xx8PfNdxn9UCU3LI3pwbNhzLY5xrJopGmcGzHcjLjHibF2DoYVTENIZnlu6uj16E4g4Q0-8LV7uYCP1ILsiwV8PaN8_SqLPZtsU1Nr6awYsCV44QFUO2V_Vn0QH-T7RqtJAqDoao_GnEq_r8IdRCnmi0sjUnHQxoGYfrHNEzHx_SOhNIUlJGynYF86UTc1l35krILssamJhV3wO0ApXo8p_V7McEd13euQtRkoae8xHwoXFInj-RmgflZQDSH1kNEcP4LB8d8b_sNIHb6YZFTuv9zQMEf6s7tNdFigZvzYzkmrFDEUjn-miKB1M6mVIinq4i3EqSIwhfUhnItpTiltTKpqMgY-j_wFdVJ0clFwg5E2sB3qLCjKwMz_Ov0zwcdgsYbnyKMXonMjRJaa9jhMeisN-PNr4x8v7BjPqABT86Xs__Siw9ioSpivXWNMrf0bNnVl1-ze_cTy8-Kk3GRzO-PQajPyemlrsWuI_sbHdwpCRgXnkx8RQDiaOVRoQJuPy_MYBmbA0yMhXzEvuhmLpzHBE=\u0026cb=_cldeppd7x9a83a54s20m2u\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1 HTTP/1.1\r\nHost: 5i68sbhin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 17 Apr 2024 08:25:57 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nx-route-id: ssp.bet\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 21 May 2025 08:25:57 GMT; Secure; SameSite=None\nUID=240417032504294baea2964c24aeea136790; Path=/; Expires=Wed, 21 May 2025 08:25:57 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37,"size_decoded":37,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"21ec8e2618a084072f88abcf843e4ebc","sha1":"a4d009044f59137a8decefe989558856d505381d","sha256":"51f177ca75f52c4a2483745e0f3089d3b742d6df7f406a431ec1f9a51d21ceb5","sha512":"b18f20a8888cc495b5a348835b2fd77b9d5e87cb3fecc341cbcc95c3a745364cca0eb62bf8ae74486b57dcf52187ab2aff7bd18f1607887d79dfd3b59265d95e","ssdeep":"","tlshash":"d29004d504d75050f1f54140d1d7314470141005d1035d3175c1405cd4445d37050175","first_seen":"2024-04-16T15:27:12Z","last_seen":"2025-02-04T01:24:30.932501Z","times_seen":82,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lylufhuxqwi.com/get/2021505?zoneid=2021505\u0026jp=_clocpa56pauvkbdn1qtpdv\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1\u0026uf=0","fqdn":"lylufhuxqwi.com","domain":"lylufhuxqwi.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.544Z","timestamp":1713342356544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Tue, 09 Jan 2024 12:44:49 GMT","end":"Sat, 06 Jul 2024 21:59:00 GMT"},"fingerprint":{"sha1":"59:69:20:70:FA:E5:D9:16:78:DB:51:76:3B:0A:AD:0A:32:12:73:D1","sha256":"95:80:2C:C7:5F:63:55:FF:A5:93:50:55:32:05:29:93:C8:54:F8:B2:7F:AA:98:7A:E7:CE:21:FF:73:58:ED:99"}}},"request":{"raw":"GET /get/2021505?zoneid=2021505\u0026jp=_clocpa56pauvkbdn1qtpdv\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1\u0026uf=0 HTTP/1.1\r\nHost: lylufhuxqwi.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 21 May 2025 08:25:56 GMT; Secure; SameSite=None\nUID=24041703250c39f5a3a00c4435b65a6d5f32; Path=/; Expires=Wed, 21 May 2025 08:25:56 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3764,"size_decoded":3764,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4102), with no line terminators","md5":"310113a4506f942b5e01d0c8ff0bf3f1","sha1":"67e33c0ec292bda0d76f8c174dcf4bb75fd5554a","sha256":"b5065ec35a1386b21287e9eb0cb7f9b64d2d996eceae33d37f83a5fb57180f3a","sha512":"2abd1325a69bd29cd32e4f934182a59b622be0a85bc8d775e38b5dfc6f24d4654cac3d775a4a0ed1bca2f9692c1892961b7da670d92536d410f262d0d97e54d3","ssdeep":"96:+dDOwVAqrceBcDOwVAqrceBZLSdj1grlYgea:AD1VnrcqcD1VnrcqZWdurwa","tlshash":"328182db829225c68a97c42f21c37c391cd83ac9668aa07ee098ff491d0fde3455dd97","first_seen":"2024-08-20T04:11:27.731621Z","last_seen":"2024-08-20T04:11:27.731621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5i68sbhin.com/ssp/req/2021505/?pb=18ca0bc57ecba4a482d18ca4fad5b0051713349556\u0026psp=Z9IjRHp23zu0eGC-Vul2hVWhQ-Qnh4vCWe0mhSbeuUmlEnI8YDYUnRNDbgaNmxVKMcXSGSzWiWUilmFIHOZvGGju823JBTMq79oXXvk_znh5zlbWCKxXbHU8AsKTTa4lUAEDwzSWflmpbjPUs7cBKhLGJRAwVYj6r5OuDDrXkp8HpbodlTe4DR703-M58iafHGlndqeHjYAfcG3txXb6xx8PfNdxn9UCU3LI3pwbNhzLY5xrJopGmcGzHcjLjHibF2DoYVTENIZnlu6uj16E4g4Q0-8LV7uYCP1ILsiwV8PaN8_SqLPZtsU1Nr6awYsCV44QFUO2V_Vn0QH-T7RqtJAqDoao_GnEq_r8IdRCnmi0sjUnHQxoGYfrHNEzHx_SOhNIUlJGynYF86UTc1l35krILssamJhV3wO0ApXo8p_V7McEd13euQtRkoae8xHwoXFInj-RmgflZQDSH1kNEcP4LB8d8b_sNIHb6YZFTuv9zQMEf6s7tNdFigZvzYzkmrFDEUjn-miKB1M6mVIinq4i3EqSIwhfUhnItpTiltTKpqMgY-j_wFdVJ0clFwg5E2sB3qLCjKwMz_Ov0zwcdgsYbnyKMXonMjRJaa9jhMeisN-PNr4x8v7BjPqABT86Xs__Siw9ioSpivXWNMrf0bNnVl1-ze_cTy8-Kk3GRzO-PQajPyemlrsWuI_sbHdwpCRgXnkx8RQDiaOVRoQJuPy_MYBmbA0yMhXzEvuhmLpzHBE=\u0026cb=_cldeppd7x9a83a54s20m2u\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1","fqdn":"5i68sbhin.com","domain":"5i68sbhin.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.916Z","timestamp":1713342356916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Tue, 09 Jan 2024 12:52:32 GMT","end":"Sat, 06 Jul 2024 21:59:00 GMT"},"fingerprint":{"sha1":"E5:FF:02:9F:1D:83:A3:9E:4A:16:5C:E7:10:94:74:8B:21:B7:64:F6","sha256":"0A:BF:7A:25:EA:B6:B2:C3:C5:97:D9:A7:5D:26:94:1A:35:25:EB:8E:3E:B0:A7:5A:AB:BC:74:73:77:09:74:90"}}},"request":{"raw":"GET /ssp/req/2021505/?pb=18ca0bc57ecba4a482d18ca4fad5b0051713349556\u0026psp=Z9IjRHp23zu0eGC-Vul2hVWhQ-Qnh4vCWe0mhSbeuUmlEnI8YDYUnRNDbgaNmxVKMcXSGSzWiWUilmFIHOZvGGju823JBTMq79oXXvk_znh5zlbWCKxXbHU8AsKTTa4lUAEDwzSWflmpbjPUs7cBKhLGJRAwVYj6r5OuDDrXkp8HpbodlTe4DR703-M58iafHGlndqeHjYAfcG3txXb6xx8PfNdxn9UCU3LI3pwbNhzLY5xrJopGmcGzHcjLjHibF2DoYVTENIZnlu6uj16E4g4Q0-8LV7uYCP1ILsiwV8PaN8_SqLPZtsU1Nr6awYsCV44QFUO2V_Vn0QH-T7RqtJAqDoao_GnEq_r8IdRCnmi0sjUnHQxoGYfrHNEzHx_SOhNIUlJGynYF86UTc1l35krILssamJhV3wO0ApXo8p_V7McEd13euQtRkoae8xHwoXFInj-RmgflZQDSH1kNEcP4LB8d8b_sNIHb6YZFTuv9zQMEf6s7tNdFigZvzYzkmrFDEUjn-miKB1M6mVIinq4i3EqSIwhfUhnItpTiltTKpqMgY-j_wFdVJ0clFwg5E2sB3qLCjKwMz_Ov0zwcdgsYbnyKMXonMjRJaa9jhMeisN-PNr4x8v7BjPqABT86Xs__Siw9ioSpivXWNMrf0bNnVl1-ze_cTy8-Kk3GRzO-PQajPyemlrsWuI_sbHdwpCRgXnkx8RQDiaOVRoQJuPy_MYBmbA0yMhXzEvuhmLpzHBE=\u0026cb=_cldeppd7x9a83a54s20m2u\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1 HTTP/1.1\r\nHost: 5i68sbhin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 17 Apr 2024 08:25:57 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nx-route-id: ssp.bet\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 21 May 2025 08:25:57 GMT; Secure; SameSite=None\nUID=2404170325c50cf3c02b4b438ebc1061a08e; Path=/; Expires=Wed, 21 May 2025 08:25:57 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37,"size_decoded":37,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"21ec8e2618a084072f88abcf843e4ebc","sha1":"a4d009044f59137a8decefe989558856d505381d","sha256":"51f177ca75f52c4a2483745e0f3089d3b742d6df7f406a431ec1f9a51d21ceb5","sha512":"b18f20a8888cc495b5a348835b2fd77b9d5e87cb3fecc341cbcc95c3a745364cca0eb62bf8ae74486b57dcf52187ab2aff7bd18f1607887d79dfd3b59265d95e","ssdeep":"","tlshash":"d29004d504d75050f1f54140d1d7314470141005d1035d3175c1405cd4445d37050175","first_seen":"2024-04-16T15:27:12Z","last_seen":"2025-02-04T01:24:30.932501Z","times_seen":82,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":25,"send":0,"wait":19,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5i68sbhin.com/ssp/req/2021505/?pb=18ca0bc57ecba4a482d18ca4fad5b0051713349556\u0026psp=Z9IjRHp23zu0eGC-Vul2hVWhQ-Qnh4vCWe0mhSbeuUmlEnI8YDYUnRNDbgaNmxVKMcXSGSzWiWUilmFIHOZvGGju823JBTMq79oXXvk_znh5zlbWCKxXbHU8AsKTTa4lUAEDwzSWflmpbjPUs7cBKhLGJRAwVYj6r5OuDDrXkp8HpbodlTe4DR703-M58iafHGlndqeHjYAfcG3txXb6xx8PfNdxn9UCU3LI3pwbNhzLY5xrJopGmcGzHcjLjHibF2DoYVTENIZnlu6uj16E4g4Q0-8LV7uYCP1ILsiwV8PaN8_SqLPZtsU1Nr6awYsCV44QFUO2V_Vn0QH-T7RqtJAqDoao_GnEq_r8IdRCnmi0sjUnHQxoGYfrHNEzHx_SOhNIUlJGynYF86UTc1l35krILssamJhV3wO0ApXo8p_V7McEd13euQtRkoae8xHwoXFInj-RmgflZQDSH1kNEcP4LB8d8b_sNIHb6YZFTuv9zQMEf6s7tNdFigZvzYzkmrFDEUjn-miKB1M6mVIinq4i3EqSIwhfUhnItpTiltTKpqMgY-j_wFdVJ0clFwg5E2sB3qLCjKwMz_Ov0zwcdgsYbnyKMXonMjRJaa9jhMeisN-PNr4x8v7BjPqABT86Xs__Siw9ioSpivXWNMrf0bNnVl1-ze_cTy8-Kk3GRzO-PQajPyemlrsWuI_sbHdwpCRgXnkx8RQDiaOVRoQJuPy_MYBmbA0yMhXzEvuhmLpzHBE=\u0026cb=_cldeppd7x9a83a54s20m2u\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1","fqdn":"5i68sbhin.com","domain":"5i68sbhin.com","tld":"com"},"ip":{"addr":"212.117.190.201","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.970Z","timestamp":1713342356970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Tue, 09 Jan 2024 12:52:32 GMT","end":"Sat, 06 Jul 2024 21:59:00 GMT"},"fingerprint":{"sha1":"E5:FF:02:9F:1D:83:A3:9E:4A:16:5C:E7:10:94:74:8B:21:B7:64:F6","sha256":"0A:BF:7A:25:EA:B6:B2:C3:C5:97:D9:A7:5D:26:94:1A:35:25:EB:8E:3E:B0:A7:5A:AB:BC:74:73:77:09:74:90"}}},"request":{"raw":"GET /ssp/req/2021505/?pb=18ca0bc57ecba4a482d18ca4fad5b0051713349556\u0026psp=Z9IjRHp23zu0eGC-Vul2hVWhQ-Qnh4vCWe0mhSbeuUmlEnI8YDYUnRNDbgaNmxVKMcXSGSzWiWUilmFIHOZvGGju823JBTMq79oXXvk_znh5zlbWCKxXbHU8AsKTTa4lUAEDwzSWflmpbjPUs7cBKhLGJRAwVYj6r5OuDDrXkp8HpbodlTe4DR703-M58iafHGlndqeHjYAfcG3txXb6xx8PfNdxn9UCU3LI3pwbNhzLY5xrJopGmcGzHcjLjHibF2DoYVTENIZnlu6uj16E4g4Q0-8LV7uYCP1ILsiwV8PaN8_SqLPZtsU1Nr6awYsCV44QFUO2V_Vn0QH-T7RqtJAqDoao_GnEq_r8IdRCnmi0sjUnHQxoGYfrHNEzHx_SOhNIUlJGynYF86UTc1l35krILssamJhV3wO0ApXo8p_V7McEd13euQtRkoae8xHwoXFInj-RmgflZQDSH1kNEcP4LB8d8b_sNIHb6YZFTuv9zQMEf6s7tNdFigZvzYzkmrFDEUjn-miKB1M6mVIinq4i3EqSIwhfUhnItpTiltTKpqMgY-j_wFdVJ0clFwg5E2sB3qLCjKwMz_Ov0zwcdgsYbnyKMXonMjRJaa9jhMeisN-PNr4x8v7BjPqABT86Xs__Siw9ioSpivXWNMrf0bNnVl1-ze_cTy8-Kk3GRzO-PQajPyemlrsWuI_sbHdwpCRgXnkx8RQDiaOVRoQJuPy_MYBmbA0yMhXzEvuhmLpzHBE=\u0026cb=_cldeppd7x9a83a54s20m2u\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.221\u0026t=0\u0026wcks=1\u0026wgl=0\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026afid=8275059929273344\u0026eclog=0\u0026im=1 HTTP/1.1\r\nHost: 5i68sbhin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 17 Apr 2024 08:25:57 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nx-route-id: ssp.bet\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 21 May 2025 08:25:57 GMT; Secure; SameSite=None\nUID=24041703251744460e871e4c979227cfde7c; Path=/; Expires=Wed, 21 May 2025 08:25:57 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37,"size_decoded":37,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"21ec8e2618a084072f88abcf843e4ebc","sha1":"a4d009044f59137a8decefe989558856d505381d","sha256":"51f177ca75f52c4a2483745e0f3089d3b742d6df7f406a431ec1f9a51d21ceb5","sha512":"b18f20a8888cc495b5a348835b2fd77b9d5e87cb3fecc341cbcc95c3a745364cca0eb62bf8ae74486b57dcf52187ab2aff7bd18f1607887d79dfd3b59265d95e","ssdeep":"","tlshash":"d29004d504d75050f1f54140d1d7314470141005d1035d3175c1405cd4445d37050175","first_seen":"2024-04-16T15:27:12Z","last_seen":"2025-02-04T01:24:30.932501Z","times_seen":82,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":76,"dns":30,"connect":19,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/rubik/files/rubik-latin-700-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"146.70.80.218","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.551Z","timestamp":1713342356551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Apr 2024 10:09:28 GMT","end":"Mon, 08 Jul 2024 10:09:27 GMT"},"fingerprint":{"sha1":"CB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F","sha256":"46:E6:54:1C:39:59:86:98:8C:FB:B7:A0:09:C0:6E:22:DD:53:46:87:E9:32:A1:2F:A8:E6:65:AE:31:04:C0:BE"}}},"request":{"raw":"GET /rubik/files/rubik-latin-700-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://bunkr.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18324\r\nserver: BunnyCDN-DK1-1176\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"64a68e68-4794\"\r\nlast-modified: Thu, 06 Jul 2023 09:50:32 GMT\r\ncdn-storageserver: DE-383\r\ncdn-fileserver: 658\r\ncdn-proxyver: 1.04\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/06/2024 19:26:04\r\ncdn-edgestorageid: 1176\r\ncdn-status: 200\r\ncdn-requestid: 4e5bec56c417ce44e9bd8acde242b84a\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18324,"size_decoded":18324,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18324, version 1.0","md5":"286d2a8ef294d191f39b9c8cfaa1d2fd","sha1":"5ce722761250fbccd6f3dedbdee4f7556cefc576","sha256":"68b1a58930568f827748c48162e8c1a9d3305f6e3567286604151820f21dd010","sha512":"7944d9716c23a482874ed96b44e88d80dcfa2b288d6aa2655974a6652018f24f3f4c10932d01a008f06d88f1d7d77fcd8a80f19041b33590c6318fa66e9f4c09","ssdeep":"384:aTbE2hcm+QiNPGjBilBFYZOA7sxLNjqPriMtIHjOXaDg7mldCB/Osy4+GYuGWqYo:gugBi/aZOA7KLNmeMtID+aDHdd/4lYLl","tlshash":"1282d11ff3db7cc084a570b194b109a2d63848c028febb2e694f1e46d756add389d269","first_seen":"2023-05-07T21:36:47Z","last_seen":"2026-04-02T09:00:44.275944Z","times_seen":1521,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":61,"dns":23,"connect":15,"send":0,"wait":31,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-apps.b-cdn.net/js/script.js","fqdn":"core-apps.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://bunkr.si/d/mernis-Turkey-2016-50kk-gC0F7iWd.7z","date":"2024-04-17T08:25:56.332Z","timestamp":1713342356332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sun, 05 Nov 2023 00:00:00 GMT","end":"Mon, 11 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4","sha256":"10:34:38:F7:B3:52:1C:62:D7:D4:B2:40:27:64:58:A2:F9:3F:63:56:24:B4:B4:E4:F2:1C:94:F7:B3:06:C5:F2"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: core-apps.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://bunkr.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Apr 2024 08:25:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 2007452\r\ncdn-uid: 371ad0f1-44d3-4f43-8cec-b0300cebb244\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-proxyver: 1.04\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/16/2024 18:21:21\r\ncdn-edgestorageid: 863\r\ncdn-status: 200\r\ncdn-requestid: ae332e1326e92ed987e7a4aa07120090\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1346,"size_decoded":1346,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1384), with no line terminators","md5":"16cfd1982a40489c41a52add24d36b85","sha1":"344f1896d895c5d0a7c4caecafcf1942603cd026","sha256":"72073aacecd145e525b16c4c845c07bff5798e813eeed702dff748a18b6186ce","sha512":"18cf93b1c83d168c61f440716599efc2949561235ddb8bb9c1230c38829c01d8e2539fda9c196d0b64835c39267e5ce36f6bec7eecb735681ca2382e32e96607","ssdeep":"","tlshash":"0a2189deb841353249b0e5a7aa2f370330277169280950279201d9577414d5f8379fce","first_seen":"2023-05-22T17:22:24Z","last_seen":"2025-04-05T18:42:16.38307Z","times_seen":2688,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":343,"dns":62,"connect":25,"send":0,"wait":24,"receive":0,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
