{"report_id":"a5f94f9a-636a-4142-a02a-a333dbcd88b4","version":6,"status":"done","tags":[],"date":"2025-10-25T20:27:45Z","url":{"schema":"http","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":0,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"title":"Укрощение Ребекки (1982)"},"submit":{"url":{"schema":"http","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":0,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-29T20:27:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":17}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"4345b902be.9655b68ff3.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"storage.multstorage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7ea02e2ab2.e55a2001b9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ic-nss.flixcdn.com","ip":{"addr":"185.76.9.26","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-05-17","domain_rank":60032,"first_seen":"2024-04-26T14:40:12Z","last_seen":"2025-10-21T13:50:10.512973Z","alert_count":0,"request_count":4,"received_data":193553,"sent_data":2089,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smaxim.com.ru","ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-11-21","domain_rank":1321820,"first_seen":"2025-10-25T20:27:49.009629Z","last_seen":"2025-10-25T20:27:49.00963Z","alert_count":0,"request_count":31,"received_data":1682436,"sent_data":20914,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"js.wpushsdk.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-05-07","domain_rank":210235,"first_seen":"2021-05-07T12:03:12Z","last_seen":"2025-10-23T03:28:38.676884Z","alert_count":2,"request_count":2,"received_data":847767,"sent_data":850,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":169473,"first_seen":"2020-11-24T14:56:32Z","last_seen":"2025-10-20T18:31:36.47704Z","alert_count":0,"request_count":2,"received_data":2251,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-19T22:15:22.988011Z","alert_count":0,"request_count":7,"received_data":3476440,"sent_data":3350,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ntvpforever.com","ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2025-10-20T07:48:48.196063Z","alert_count":0,"request_count":4,"received_data":1440,"sent_data":2094,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtbbtr.com","ip":{"addr":"195.201.208.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-08-31T05:14:30.423939Z","last_seen":"2025-10-24T20:31:06.472551Z","alert_count":0,"request_count":2,"received_data":17423,"sent_data":11072,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nwret.site","ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-09","domain_rank":1381770,"first_seen":"2025-05-22T16:08:08.874664Z","last_seen":"2025-07-22T08:16:50.962796Z","alert_count":0,"request_count":1,"received_data":18693,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.60ah.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-01-18","domain_rank":285202,"first_seen":"2023-05-16T11:47:54Z","last_seen":"2025-10-22T03:07:08.05698Z","alert_count":0,"request_count":1,"received_data":2126,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"storage.multstorage.com","ip":{"addr":"13.248.148.254","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-09-22","domain_rank":101055,"first_seen":"2023-09-22T12:56:00Z","last_seen":"2025-10-20T06:56:19.372418Z","alert_count":1,"request_count":2,"received_data":288,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"pxl-eu.tsyndicate.com","ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":61788,"first_seen":"2025-07-17T15:56:50.105461Z","last_seen":"2025-10-20T06:30:49.996301Z","alert_count":0,"request_count":1,"received_data":197,"sent_data":1900,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-19T22:12:19.186805Z","alert_count":0,"request_count":1,"received_data":433711,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.wpshsdk.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-04","domain_rank":343711,"first_seen":"2021-06-04T13:50:00Z","last_seen":"2025-10-21T17:09:43.316095Z","alert_count":0,"request_count":1,"received_data":32018,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"trk-web.com","ip":{"addr":"173.233.145.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-05-28","domain_rank":655274,"first_seen":"2025-08-22T23:16:14.988409Z","last_seen":"2025-10-23T15:44:48.23594Z","alert_count":0,"request_count":1,"received_data":146,"sent_data":631,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"7ea02e2ab2.e55a2001b9.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2025-10-25T02:25:46.691687Z","last_seen":"2025-10-25T02:25:46.691687Z","alert_count":2,"request_count":2,"received_data":690,"sent_data":1690,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4345b902be.9655b68ff3.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2025-10-25T03:35:53.642743Z","last_seen":"2025-10-25T03:35:53.642743Z","alert_count":4,"request_count":4,"received_data":68414,"sent_data":10909,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pointcontinentrtb.com","ip":{"addr":"136.243.25.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-14","domain_rank":16265,"first_seen":"2025-04-20T21:33:16.477453Z","last_seen":"2025-10-25T15:25:34.271705Z","alert_count":0,"request_count":1,"received_data":16026,"sent_data":1662,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cleansasve.com","ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-01","domain_rank":875842,"first_seen":"2025-08-06T06:39:37.566685Z","last_seen":"2025-10-24T13:44:55.424793Z","alert_count":16,"request_count":4,"received_data":12522,"sent_data":2205,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flepquix.com","ip":{"addr":"195.201.208.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-10","domain_rank":17067,"first_seen":"2025-03-24T12:50:40.052973Z","last_seen":"2025-10-21T00:50:41.925965Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"notification.tubecup.net","ip":{"addr":"78.47.199.204","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2008-09-26","domain_rank":250980,"first_seen":"2018-07-09T16:06:19Z","last_seen":"2025-10-22T14:54:58.88267Z","alert_count":0,"request_count":1,"received_data":311,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"preroll.hostave3.net","ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-09-05","domain_rank":304993,"first_seen":"2018-02-22T21:32:02Z","last_seen":"2025-10-21T09:01:42.329013Z","alert_count":0,"request_count":1,"received_data":810,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"match.new-programmatic.com","ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":172258,"first_seen":"2020-02-18T20:50:06Z","last_seen":"2025-10-20T18:30:48.448999Z","alert_count":0,"request_count":1,"received_data":215,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":77954,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2025-10-20T14:26:10.050549Z","alert_count":2,"request_count":2,"received_data":299960,"sent_data":850,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2025-10-20T23:08:16.832652Z","alert_count":2,"request_count":2,"received_data":798,"sent_data":836,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-19T22:12:30.748133Z","alert_count":0,"request_count":4,"received_data":91212,"sent_data":2601,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.cabnnr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":185771,"first_seen":"2021-08-30T12:50:21Z","last_seen":"2025-10-21T17:17:47.616733Z","alert_count":0,"request_count":2,"received_data":81090,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-19T22:12:30.927599Z","alert_count":0,"request_count":1,"received_data":851,"sent_data":1127,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bid.onclckstr.com","ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-12-13","domain_rank":445643,"first_seen":"2024-03-15T17:46:34Z","last_seen":"2025-10-21T15:00:02.525496Z","alert_count":0,"request_count":1,"received_data":558,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tsyndicate.com","ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":1289,"first_seen":"2017-03-16T09:04:54Z","last_seen":"2025-10-20T16:38:49.866232Z","alert_count":0,"request_count":2,"received_data":14087,"sent_data":1060,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-10-20T06:56:18.770833Z","alert_count":2,"request_count":2,"received_data":825,"sent_data":1068,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-10-19T22:32:41.177271Z","alert_count":0,"request_count":3,"received_data":6891,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.production.gstcpx.site","ip":{"addr":"62.122.173.61","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-12-17","domain_rank":189802,"first_seen":"2025-01-26T07:35:50.987884Z","last_seen":"2025-10-19T16:59:04.484986Z","alert_count":0,"request_count":1,"received_data":655,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"riamiavid.com","ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-07-06","domain_rank":130666,"first_seen":"2022-07-06T16:46:26Z","last_seen":"2025-10-22T18:56:27.832161Z","alert_count":0,"request_count":3,"received_data":166216,"sent_data":1212,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.ahmybid.net","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-12-26","domain_rank":171628,"first_seen":"2024-12-28T14:10:32Z","last_seen":"2025-10-21T06:48:11.199685Z","alert_count":0,"request_count":1,"received_data":16128,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.uuidksinc.net","ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":47808,"first_seen":"2015-07-20T12:00:35Z","last_seen":"2025-10-20T14:02:31.757138Z","alert_count":0,"request_count":5,"received_data":2540,"sent_data":2550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn-fc.com","ip":{"addr":"172.67.174.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-07","domain_rank":18430,"first_seen":"2023-03-03T11:19:00Z","last_seen":"2025-10-21T13:50:10.511318Z","alert_count":2,"request_count":2,"received_data":12312,"sent_data":1430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-10-19T22:12:30.03288Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":934,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":1,"received_data":16179,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":175362,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2025-10-20T14:02:31.857538Z","alert_count":2,"request_count":2,"received_data":8966,"sent_data":973,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fh-wgt.com","ip":{"addr":"104.21.63.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-24","domain_rank":18569,"first_seen":"2025-03-17T09:59:57.505629Z","last_seen":"2025-10-21T13:50:10.938646Z","alert_count":2,"request_count":1,"received_data":4744,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nereserv.com","ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2025-10-20T07:03:26.913191Z","alert_count":2,"request_count":1,"received_data":322,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":40822,"first_seen":"2017-07-04T06:00:09Z","last_seen":"2025-10-20T06:30:49.819818Z","alert_count":0,"request_count":1,"received_data":6504,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtbadserv.com","ip":{"addr":"104.21.64.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-07","domain_rank":45515,"first_seen":"2024-10-07T03:42:13Z","last_seen":"2025-10-22T07:48:59.557403Z","alert_count":0,"request_count":1,"received_data":573,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XICBPjRhkxMGy0iDGGTJgWNG7MgNFCTBgzJ2fUKFPDBowcNmiagSHiYZg6YzLiEDMjzA0bNHC0GJNDjBmUN8iMaRGGRsoWOcbQYKpyhlUyYnpCJGOH4owZN2DIeAinTlgdMm7cyJGDhk84cBYexSEDx8M5cCbqoJFjRgwYNfyKGNMmL0MYNGTmgOGTjBmKD8W4cbMwMd2-dkW0cYOR4QwZMiiLgDO6dEcZNSqKqBMjIxo6dODM0fHiRUk3LcyMcTHmTRvfcgrSSWOnzJwXddwwRzgnDJsXbsIsb_7ix5w0esr0WAkDD2wYXOrAUGujDp02X8aEaRwmzRk3Peq7aIMnS_r1MrT3XnxvuEFHGQb2MEcdZ5zh3IFkfHFHGmQ4SMd_7K1RRh53vCEHGXP0gGGAcCRnRxpl3PFFG28c1AMabzQnx4g2zBFDD0ikQYUTZZhhAxVT5HGfHnY08UQVdejhBBZNHIHGDEjkcUMcONAhhBtlCFEDGlMEEUUYUcyABhU2iBFHHXE4cYUcLSDxhRw0sKFHDkLIcQcbTdxxRxJfUKFGHEvUAQUaTxB5xBFJkBEFGTcIYUOLUUxhQxttCEHFEkVYEUcaV2gRRxFlWJFEFXo0EcQXZ1SRBBFSVJGGWGQYl9EYbBTkRnVzNEecrA_JJ9gWhnWR2WU6wODCeg6JIIcdjtWgWh11vKoDRF7dgIMZM7VQwwzYamsGWljV9dRQB-VglEs24DCDWGk4JkIOMbgwmQs0yOBCQzSIJccX7WYEr7zG1ntvDfk-VEcYGTXxhh5psMFGGC_UcCwIKFyRhhux3jEHCE5QAcJhx-4AgsVuICUyHiaDsKxpNBybAghHlDHGGm-8kNphMBwWAwhGpJGcGW_g8UIMXh0r1hhBTevEE2J5GF_SIiwtFhtQF-EErGXY8WYZbFBUg1zqprveQ3LctxBsONzw0EFaiyHHQjgoxvaKLZ6Ngw2ykSHHGwvN8NAbCg3G1t545NEZ2V-UGLThOiT7s2246cabb7WGcWsYuZax63FizbFsRnvToZ2HLUSXBh0j2eACGTI07XlZOsyQQw2praSualJldNAXrIv1HkVHxVAvDZDZYFEbrTMU_PDF21BDsgZtDdgX2gGPN_M0GC9C1tTXKgcdgQNbkVfCQiSGYCIcBFMdbEzEFtULqTZGafKjsdAWIoil_0P758____4LYP_014U-KCAg\u0026s=e29d8993b13053ae6574a21d982440646950f5acf4af10b9ad52d4731e6e53361761424046\u0026w=t\u0026r=1\u0026d=223\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","size":24,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-04T02:11:24.840967Z","times_seen":6723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7332160811bcd2756d3f42dd62261424","sha1":"03f50bea0e7c94bd4de1255fe091a13f56d57a40","sha256":"430321c45d7ba068d0ec242e36ee17de4d9563372ad6fc02d368d1337d1ad2e9","sha512":"b5cd581d856036b0e950171b50bfab1aa1fe8d2eb8d7d7e30cfb6254a661658bd70fe588d20d950eccd32e2039436817a9c317c5b2042f16c03f021b471fafbf","ssdeep":"","tlshash":"11b012ead68dd304e7024485387474a0474eb0bc896bcdeff97840bc0dc813402f144c","size":115,"data":"","first_seen":"2025-10-25T20:28:00.680753Z","last_seen":"2025-10-25T20:28:00.680753Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"da6e11ac6f82a37c465d7701dbe7d248","sha1":"815f9b3430c9a909402c7bd217d194c1a28008b1","sha256":"492e0c77239c3f6db29fa8e0e4a5a90c8b5cb0adce817a59579b0f9dd41f3dab","sha512":"949f33d1d496ed7651a03b5776c059b7c2260c8b80284eda1d3d985a584db7d9f1ffceb4696179d1b09896791c05ee629244af2d7d11105999a69f0b2a0f72de","ssdeep":"","tlshash":"c8a00276a9bae4558922b5b72c0b1025c15150b13907782184bf949567313ce4847e77","size":62,"data":"","first_seen":"2025-10-21T07:01:45.389794Z","last_seen":"2025-10-26T07:00:10.889384Z","times_seen":3721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cleansasve.com/aba.php?id=4564","fqdn":"cleansasve.com","domain":"cleansasve.com","tld":"com"},"ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6039ac9c9469edfcc1508471aaced73f","sha1":"7562f189235ff071e602920068e5c646a28a5b44","sha256":"b1c098a4ff368165be3d5e12a18a873526c98a7de621a0c69e4c2455f3d5c3a9","sha512":"d85e87a165b9ca7b5b503a626c1f9869feb62b7f21c459c6089144da6c0f073089db775a5aade990c8ace25648ab8f85607412cef103505379d4da0ababaa17c","ssdeep":"","tlshash":"7ee0926f6cba20790a2690ba127f656c3156300b54e7c7fc3c1cd7825fe463e5049aec","size":389,"data":"","first_seen":"2025-10-13T14:06:18.685342Z","last_seen":"2026-03-31T01:30:42.485646Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7440d7dd606254595018cd43d0eea31","sha1":"bf2dd3f43543fcd16fe4d14924e13a01cbd883ad","sha256":"7b1d64c6531fe880b368720c4d3c4ae81dba5120a0bebbad4e23157f59bdc109","sha512":"c592cf5f544d14c50234bdbb2cfcd1ed6827fb71900ded6fb6ac22337b9bba5ebf583427212e468d5e3bc9e373d6b2550ac816bb4cf3c07530440f743020050a","ssdeep":"96:pop2aYdwqNDOX/k++OIWtJxtomlGDWtVA7mh6BjFY7cagT4iMwf:p4YuqNDOvkpOIWtlomlrhajKQvpXf","tlshash":"33c1e8bc7259e23940d91447526b971877f20065bf268810d06ecc49397cfabc92bcde","size":6090,"data":"","first_seen":"2025-06-01T08:15:20.826297Z","last_seen":"2025-12-10T15:42:12.100863Z","times_seen":1404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a458cd562caefd8f717d8683486de2b","sha1":"49b2482a0d62dcddf84543a9c7d95ca5b58d88aa","sha256":"dd5647fabd0e52e354d67c6c90747650e028a683d6fb2d5242b1f94a270b9326","sha512":"ed5f27b9f7f623264245acdea682f58f5279a4a357ab9b7f97075cb01daa9ad9bfde8f73131d33feda7d936e355cc5ff43bde6eb6974d333f922c0fa89ab85d3","ssdeep":"","tlshash":"b7315378378a6c7386c9f169fb1e9716b9f98ab72149e0124408dcdc3ca4e164747af8","size":1572,"data":"","first_seen":"2025-07-28T18:51:12.20738Z","last_seen":"2026-04-04T02:11:24.896128Z","times_seen":870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.0","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"172.67.174.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2275e08ae5ab3649e3b136de4a6b819","sha1":"7e6831edfe4931f8da7e66e282d67ad613fff5fd","sha256":"a0972735de39d79bda3fd8f3200ba460bb187855c288fc9360749a77f9ca093b","sha512":"13394cc4a2b20ea5d1ef03cda63ad27f97546971fc836e4b0e27a6cb99840f0b38c6d25b188580a481542f3f122286302793d701a6bbb8d1b247f08b33de7c0d","ssdeep":"","tlshash":"a2610cc4d2c85923067531ce4853b575f67c8e05bdb94c50e60b8fc98e15d465b17fe4","size":3213,"data":"","first_seen":"2025-09-12T13:55:50.987768Z","last_seen":"2025-11-07T11:53:30.52641Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/js/main.min.js?v=6.0","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1350eda917471dbb1c97c04f0918287","sha1":"2a512de74e77d5d4b27a74c6afc2f4914cf95f21","sha256":"42302ada288537f3c3f2b5269aa875b017bc5a5aae03a2670fa21cd3b365c274","sha512":"27119795a1ce629736421cb82884e4b13ddb3d3348ce53f819a3d5de5ef629098cbfbf3388aa4680d0cc254f0af938d5b526d79505b37508fb63f40513c7c533","ssdeep":"3072:pdkWgoBecZRQzmW42qRDhhQdGXrY+F5Q5OEiVRSXxPcHrAiaZobBjeKanYbsMD:fBdZGC/RDhhpXAiVgqrAcVhangZ","tlshash":"dc442ac87692b03242bb31b7506f500a73325a7aa90d8594f16cd8f46dbcd896237f7e","size":261115,"data":"","first_seen":"2023-05-10T08:08:24Z","last_seen":"2026-03-20T17:54:45.008698Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","size":825565,"data":"","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-03-21T15:49:57.335649Z","times_seen":18193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","size":825565,"data":"","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-03-21T15:49:57.335649Z","times_seen":18193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026bft=0dAFcWeA4nQNYwfm3EZ5b8ukZIczYCXIyOP7a5yRrIJOfNyUQ08Hg_zpG8zZMEZyC8NpzeuFJia99GI6pQ7J1VllYqaD9YZfUzFw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T06:43:15.287939Z","times_seen":388240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"466013c7f73c5bb37eadcae41effbeb5","sha1":"fa402077db95f977aade3392139c7634eafa8320","sha256":"aef8f7425588d8850756ea03138e1cd348f34b0480bf8d7ec856a07eb4adfdf3","sha512":"469ac922e5aa657877af78e23a3b8f146a2529c1612d74cf8d531e73f4eeca7931698c264a567606e4d55d60b544ab205135ca9dbaa09b7ddbfb53c721b69153","ssdeep":"","tlshash":"4441d65b3a97283826df1cef20fbf3993510247248c4a1024160f91acea9df7a537dd0","size":2315,"data":"","first_seen":"2025-10-25T20:28:00.684765Z","last_seen":"2025-10-25T20:28:00.684765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbbtr.com/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IiVEMCVBMyVEMCVCQSVEMSU4MCVEMCVCRSVEMSU4OSVEMCVCNSVEMCVCRCVEMCVCOCVEMCVCNSUyQyVEMCVBMCVEMCVCNSVEMCVCMSVEMCVCNSVEMCVCQSVEMCVCQSVEMCVCOCUyQygxOTgyKSUyQzIxJTJCJTJDJUQwJTkwJUQxJTgwJUQxJTgyLSVEMSU4NSVEMCVCMCVEMSU4MyVEMSU4MSUyQyVEMCU5MiVEMCVCOCVEMCVCNCVEMCVCNSVEMCVCRSUyQyVEMCVBNCVEMCVCOCVEMCVCQiVEMSU4QyVEMCVCQyUyQyVEMCU5QSVEMCVCQiVEMCVCMCVEMSU4MSVEMSU4MSVEMCVCOCVEMCVCQSVEMCVCMCUyQyVEMCVBMCVEMCVCNSVEMSU4MiVEMSU4MCVEMCVCRSUyQyVEMCVBMyVEMCVCNiVEMCVCMCVEMSU4MSVEMSU4QiUyQyVEMCVBMiVEMSU4MCVEMCVCOCVEMCVCQiVEMCVCQiVEMCVCNSVEMSU4MCUyQyVEMCVCNCVEMCVCRSVEMCVCQyVEMCVCMCUyQyVEMSU4MSVEMSU4MiVEMCVCMCVEMSU4MCVEMSU4QiVEMCVCNSUyQyVEMCVCNiVEMCVCNSVEMCVCRCVEMSU4MSVEMCVCQSVEMCVCMCVEMSU4RiUyQyVEMCVCRCVEMCVCMCVEMCVCMyVEMCVCRSVEMSU4MiVEMCVCMCUyQyVEMCVCRCVEMCVCNSVEMCVCNyVEMCVCMCVEMCVCMiVEMCVCOCVEMSU4MSVEMCVCOCVEMCVCQyVEMSU4QiVEMCVCOSUyQyVEMSU4NCVEMCVCOCVEMCVCQiVEMSU4QyVEMCVCQyUyQyVEMCVCNiVEMCVCNSVEMCVCRCVEMSU4MSVEMCVCQSVEMCVCMCVEMSU4RiUyQyVEMCVCQyVEMCVCMCVEMSU4MSVEMSU4MiVEMSU4MyVEMSU4MCVEMCVCMSVEMCVCMCVEMSU4NiVEMCVCOCVEMSU4RiUyQyVEMCVCMyVEMSU4MCVEMSU4MyVEMCVCRiVEMCVCRiVEMCVCRSVEMCVCMiVEMCVCRSVEMCVCOSUyQyVEMSU4MSVEMCVCNSVEMCVCQSVEMSU4MSUyQyVEMCVCQiVEMCVCRSVEMCVCMSVEMCVCQSVEMCVCRSVEMCVCMiVEMSU4QiVEMCVCNSUyQyVEMCVCMiVEMCVCRSVEMCVCQiVEMCVCRSVEMSU4MSVEMSU4QiUyQyVEMCVCRSVEMSU4MCVEMCVCMCVEMCVCQiVEMSU4QyVEMCVCRCVEMSU4QiVEMCVCOSUyQyVEMSU4MSVEMCVCNSVEMCVCQSVEMSU4MSUyQyVEMCVCNiVEMCVCNSVEMCVCRCVEMSU4MSVEMCVCQSVEMCVCOCVEMCVCNSUyQyVEMCVCMiVEMCVCRSVEMCVCQiVEMCVCRSVEMSU4MSVEMSU4QiUyQyVEMCVCRCVEMCVCMCUyQyVEMCVCQiVEMCVCRSVEMCVCMSVEMCVCQSVEMCVCNSUyQyVEMCVCMCVEMCVCMiVEMSU4MiVEMCVCRSVEMCVCMSVEMSU4MyVEMSU4MSVEMCVCRCVEMCVCMCVEMSU4RiwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIxNDEwNDcxMDgwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6MTQzNTE3OSwibXVsdGlwbGUiOmZhbHNlLCJpc19pZnJhbWUiOmZhbHNlLCJyZWZkb21haW4iOiIiLCJwbCI6MCwic3RyYXRhZ2VtIjoiIiwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU4LCJidHlwZSI6MCwidjIiOjAsInJjaGFuZ2UiOmZhbHNlLCJwb3MiOjAsImV2ZW50X2lkIjoiZGY1MmQwNjktMzE3NC00NGFjLWFjNmQtNzdjNTc3ZTZjYTBhIiwiYXBwcm92ZWRfbWFpbnN0cmVhbSI6MCwid2wiOjEsInRlc3RhYiI6MCwidmVyIjoiNi45MC4zIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjE0MzUxNzkiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vd3d3LnNtYXhpbS5jb20ucnUvdmlkZW9zLzUzMjA4L3Vrcm9zaGNoZW5pZS1yZWJla2tpLTE5ODIvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwiZnBfcGFyYW1zIjp7InBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImxhbmd1YWdlcyI6WyJlbi1VUyIsImVuIl0sImZvbnRzIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZm9udFByZWZlcmVuY2VzIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sInBsYXRmb3JtIjoiV2luMzIiLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijo0OCwiaW5kZXhlZERCIjp0cnVlLCJzZXNzaW9uU3RvcmFnZSI6dHJ1ZSwibG9jYWxTdG9yYWdlIjp0cnVlLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29sb3JHYW11dCI6InNyZ2IifSwidXNlciI6eyJpZCI6IjU5YWY5NjI4ODdmMzM3ZDcyOTliMTQyZmE2MzM3Njg0IiwiZnAiOjMwNjIyMTU0MTIzMjY3ODIwMDAsImZwX3N0ciI6IjMwNjIyMTU0MTIzMjY3ODIxMzkiLCJ1YV9kYXRhIjpudWxsLCJpc193ZWJ2aWV3IjpmYWxzZSwic29jaWFsX25ldHdvcmsiOiIifSwiZXh0Ijp7ImR0IjoxNzYxNDI0MDQ1Mjg3fX0=","fqdn":"rtbbtr.com","domain":"rtbbtr.com","tld":"com"},"ip":{"addr":"195.201.208.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"76c2522194f93dde78efebda0cf7b4fb","sha1":"4d013b4594f55f79edb8febc5200f3df56b2c99a","sha256":"ff44ce3a34170801eac3ac620109003a3d0d487a95fc1e9770cbbf4ee53fc919","sha512":"8fd182af4817f41d736c5fb60ac2813b457feb4f49fd8a32ffde451a769e2f93ff2eda842f93e1aebd1de84633bb0d892459e0bbddbffd602ef8a6c4d0905e30","ssdeep":"96:D8AEIK04jMxznfG/E10NGtcN1ipK04jMxznfG/E10NGtcN1iaK04jMxznfG/E10I:lK7ofzcQK7ofzcnK7ofzcmK7ofzcVu","tlshash":"ea42ede88791cc38cb433594a461f693e56b6f03ddb84be1796875209abc21f804bbcd","size":12597,"data":"","first_seen":"2025-10-25T20:28:00.686121Z","last_seen":"2025-10-25T20:28:00.686121Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/kt_player.js?v=3.0.13.1","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"45904382d1f33800fb3d84e1c87227ef","sha1":"c32086104f3a2e357efef80bc3f66a2b07a7d7d9","sha256":"8931e182f464d05ac41f612f4bccd0c15111a5cb120e2f9e9e908af7fe33e189","sha512":"a2f169e2913356ef56d10c5d62d3c5f90c9df78a30089088af50f18e1dd7c5b01de1d4ef687d7e4493540eab7895d86edd8777bb8c35d43d092a7ea0628c4882","ssdeep":"1536:R1hxd1GlUwI74w01zICfJ96iDHNKJ6ErUxbZiS5+6LTu88kzZf13F2kj9Hkgaxe:7hIlTR96i7wPylbuFkzp13F2SHC0","tlshash":"24f32a9a7240b8b243d724f4419f290b7037ad36e89ec9a0f1a6d9e47e79c58017ff19","size":170236,"data":"","first_seen":"2025-06-23T02:10:43.678358Z","last_seen":"2026-03-28T19:40:50.055106Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nwret.site/who/article.min.js?id=1751551964","fqdn":"nwret.site","domain":"nwret.site","tld":"site"},"ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"86a1931e85167a4ddb929f962c69c914","sha1":"d9e25e2a4dd6b096e1eca62bcbc749e86bf16d2f","sha256":"0e08d24eb8f193b9df78768be9427603f90850afda8cf904e36c089d050b6735","sha512":"4bdebbd8975f37cf3cd2ff393d342914000ce5583a2a3d9e5b6ecdf0ba07e4f044eef154220f906b60b726bdfd82bf749475e8e45a07062d548b714f0a9628ed","ssdeep":"384:bZNcG8VWly0xSpzhZDkgT5c5/hEAOL8GauRwyCnvZU73QlB4XntH8mcy22sP8eBz:lNtjxUpNZDkW6EAoTFRwLnvZU73QlWXq","tlshash":"aa82f7b93392357a82eb17c765ba4242f2315494780f5408b15c9d463726e93a3fffac","size":18315,"data":"","first_seen":"2024-06-14T09:56:26Z","last_seen":"2026-03-25T06:41:01.426103Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"52f002c0a85ebe682499be4bfe8547be","sha1":"541fdebdefc5205104979d718fb2ead515a6f0f2","sha256":"37b120778834b932d78a647c4546e194c2c5fe4223bc7614aea87f5b384e863f","sha512":"ff62e33e00e869af9ad169eb674410d9ffcbdea2402ec0d8b33b88c836c5e19aed1419eabc0806fc1e74183dd53cf9003ba0448ba66aaaec8a240228ad40f6ae","ssdeep":"192:9JQU06Rn+U9ggYOjF0cq9qISCc1qTNSNBN+NNROxJxJmjJFF8mQgThTMl5Qk:Mh6Dmgxoj9g","tlshash":"56f124f7839e85a50203b487bc106e5d3c67b1fcb7769762f82c687c3ade118416a29d","size":7839,"data":"","first_seen":"2025-10-25T20:28:00.687639Z","last_seen":"2025-10-25T20:28:00.687639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8f0613e5f501778905bd367a13defc80","sha1":"d4abfd90058838e3774ab394eccee833da3a58a3","sha256":"c1d6d1b0475e52e9d950c6de253a564f31395b7ed04bd680703f74e5494e7024","sha512":"b04afda45063c0ac5ad44ef2e8d4ad7dcd3351d1722a6fc1cfaba1b1c8bf7390beecb20dcd0bbd2dee28fc0bb0b50c882dba8c0672bd6d2c2ed2674f9094be3b","ssdeep":"384:KQnxUM1uuqOO5fuQ+gVxT1xA3YBtLkFnaea/QrXnEM/nQ4:jHqOIxzT1uoBtLYaejjlQ4","tlshash":"3cc2c5def251f06592b3b0b4067f0019e6bb6c61ec493449b215d5e83e70b8e906be7b","size":25854,"data":"","first_seen":"2025-10-25T20:28:00.68912Z","last_seen":"2025-10-25T20:28:00.68912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"3da6aa0dd0342adad5542cbf6cfa6c5a","sha1":"89b1872dcf7961acb3df75a1244dfaf00db247c7","sha256":"39d82ad8b79d9664656d037a508ba6d3fb5e9d94df553b941d7de34718f639e3","sha512":"42082c26068d3809a4e3b010dc4c1428ce983860fea5f959079d869f690d39c0885352d6c2ab86a9e31cccfab1dacc7b8de41cf4543269b032cfd7e469dec71f","ssdeep":"","tlshash":"9a600030f0000030000c000000333c000000c00333000000300000cc000303c00c0300","size":12,"data":"","first_seen":"2025-10-25T20:28:00.690484Z","last_seen":"2025-10-25T20:28:00.690484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-63S0F026EX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88d0aacd0c66c161c41aa2d30c3357e5","sha1":"10eaec7a96977c37c143b095ef9db3222aa42d27","sha256":"32c3ded686e91b5d4ad64e865f81d4cbcf8e69f1ff3bd9bdc556b10f996348a6","sha512":"2a43f3f6a4feacddb79d2c53b65d0b65e6bdcd8383fd14ee9344e2971be014ef8731830bcdf57bba1cfe477276961c700e7c27077ee5539ccc749090fc36e115","ssdeep":"6144:4BJyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjLc:WoJBl929Z8nP58DG/mYl5w","tlshash":"729419ce73d674269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4237f7c","size":433107,"data":"","first_seen":"2025-10-25T20:28:00.638822Z","last_seen":"2025-10-25T20:28:00.638822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/player_ads.html?advertising_id=0.05864330711993759\u0026adzone=0.5365775643084258","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"18674552f0c1f5a70bee27541a71f659","sha1":"b4e04eee9b5da9270cf665d0bc85bb1b9bc83de6","sha256":"e6707d4f5d405ddcd1ca350826868497e10e56c460360084cc4638bff7a7f073","sha512":"f4094edfc3395d5a723d5105d3ca4a8fe2b58ff9cb4424143cf7083c5e63470e913066a8610f4eec3c8155b0939207b0e680539a048112f378bb0d72d7813091","ssdeep":"","tlshash":"d88000a0e828ea20cbbf202cef02a30a03202aa22c0202800a8cb00a328aa0388000c0","size":33,"data":"","first_seen":"2025-04-17T10:15:27.534264Z","last_seen":"2026-03-28T16:05:44.195806Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","size":825565,"data":"","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-03-21T15:49:57.335649Z","times_seen":18193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f747184b1c1a38bc2f97def3e0dd4f54","sha1":"5d738b9692e233300925df1c79269c2e0925bd25","sha256":"01d88a8ec467432cb56f7e64d6d4cf1f97c262710cd9ac97b1a1ef7d210dc3ae","sha512":"14e32c0acb5271f8ae32a3361f0490d4c02aace215d6e218363aebb945af1cbaf665a0b8f1493aa66dea2c24ccf202d2327a6befb6adfe440bf4ae727b6c7e28","ssdeep":"1536:HCdY51va4tzaM6mXWEiWpIDDzAYiDOoMg30c/OB94pnz:HB794mlihAdD130349z","tlshash":"4e735d843250747581e7506fe03f4306f3392d06b80a9468f5aeedd6bb79d89a272f39","size":79940,"data":"","first_seen":"2025-10-17T12:58:26.949273Z","last_seen":"2025-10-31T10:34:15.689694Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cleansasve.com/adn2.php?id=1244\u0026sitea=bosmusas","fqdn":"cleansasve.com","domain":"cleansasve.com","tld":"com"},"ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfc397a318770c95f0b89d116300bdf0","sha1":"06e2e9266e305b8a5f093bbaef0b4ce6f3db757c","sha256":"74dbc2d3eb855f811ce23149e544f4f4a9f5251f94a035804c8cb4eeeaa8b7f4","sha512":"55b4cdfd07676143a92960256e7501f0fd82c8587ee2b8930ce1809cee8732faa9e5dde81fc963b0b93d3e3b05783cdf5f0951f61ed330d6a1c5b2277aea8c70","ssdeep":"192:lyqCNfzckjOcRw8jOAlhzLoWxiliM6iciVctL5Ai+AitAiF5:lBSbcyOcRw8jHoWxilijicibi5iaiF5","tlshash":"6bf1415512f71032ca77115e4fe7462172b4a40f3909ca4e3e6d82986fc4a7696f8ff8","size":7883,"data":"","first_seen":"2025-09-30T12:02:39.88482Z","last_seen":"2025-11-13T23:55:20.856112Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9726e3d8d861859803382d10322b4dc8","sha1":"f2a15c64ad34ec42ce86b56903ac2b85fd83516d","sha256":"22d6f8f0e15e798abc9313fbca862ced0832b1dbba7d36f0e897eb3db3911790","sha512":"48a12b31fa1c3cb15dcf5be5d4041d19cc8c95c50927ec7e6be1f6cab6f3fe37163f9d6f9847203dfb4ab2d2a352af19bf13cf136df2e89aea18cce8313fab32","ssdeep":"","tlshash":"2390041435d34445c071711d145143d117701f4c40403cc0f1ccd11d53345510000703","size":40,"data":"","first_seen":"2023-03-07T01:17:40Z","last_seen":"2026-04-04T06:55:58.4689Z","times_seen":1271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149592,"data":"","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riamiavid.com/river/5629?n=bmr632Xe\u0026ab=0\u0026ts=1761424042167\u0026\u0026\u0026rt=0\u0026id=1761424042166\u0026tz=0\u0026ps=1761424040437\u0026meta=undefined\u0026action=init","fqdn":"riamiavid.com","domain":"riamiavid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f996739b189deb5ec302a90ffc030324","sha1":"73f258d1fe91ce3b8e4d59263d4455b71633defa","sha256":"33be6ba165169cf4c5bb3098f92635fcb026df5a72242c37292fff87759cdc36","sha512":"7ef19740f5652b732716af733a0e7ecac72ad49beb34bb939ba1ea45bfcc4d183e72ba4d1f85aa425010d20b94fc1ad4f48ed077ba3e702c9cb6d3d0bdeb179b","ssdeep":"","tlshash":"079004f404714511dff314144f4357555c51f10f1f35751c71c54140d3fd5130540141","size":43,"data":"","first_seen":"2025-10-25T20:28:00.693609Z","last_seen":"2025-10-25T20:28:00.693609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nwret.site/tau?n=bmbo5NUs\u0026site=5639\u0026userAgent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026location=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026ab=0\u0026\u0026rt=0\u0026ts=1761424041389\u0026title=%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%20%281982%29\u0026hardwareLogical=48\u0026orientation=landscape\u0026\u0026resolution=1280x1024\u0026screenWidth=1280\u0026screenHeight=1024\u0026devicePixelRatio=1\u0026description=%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D0%B0%D1%8F%20%D0%B4%D0%B5%D0%B2%D1%83%D1%88%D0%BA%D0%B0%20%D0%BE%D1%82%D0%BF%D1%80%D0%B0%D0%B2%D0%BB%D1%8F%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%88%D0%BA%D0%BE%D0%BB%D1%83%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%B5%D0%BF%D0%BE%D1%81%D0%BB%D1%83%D1%88%D0%BD%D1%8B%D1%85%20%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%B5%D0%BA%2C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D1%81%D0%B1%D0%B5%D0%B6%D0%B0%D1%82%D1%8C%20%D0%BE%D1%82%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B3%D0%BE%20%D0%B6%D0%B5%D1%81%D1%82%D0%BE%D0%BA%D0%BE%D0%B3%D0%BE%20%D0%BE%D1%82%D1%86%D0%B0%2C%20%D0%B8%20%D1%83%D0%B7%D0%BD%D0%B0%D0%B5%D1%82%2C%20%D1%87%D1%82%D0%BE%20%D0%B5%D1%91%20%D0%BF%D1%80%D0%BE%D0%B1%D0%BB%D0%B5%D0%BC%D1%8B%20%D1%82%D0%BE%D0%BB%D1%8C%D0%BA%D0%BE%20%D0%BD%D0%B0%D1%87%D0%B8%D0%BD%D0%B0%D1%8E%D1%82%D1%81%D1%8F.%20%D0%9B%D1%8E%D0%B1%D0%BE%D0%BF%D1%8B%D1%82%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%BB%D0%BE%D1%87%D1%8C%3A%20%D0%92%201988%20%D0%B3%D0%BE%D0%B4%D1%83%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%D0%BA%D0%B0%D1%81%D1%81%D0%B5%D1%82%D0%B0%20%C2%AB%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%C2%BB%20%281982%29%20%D0%B1%D1%8B%D0%BB%D0%B0%20%D0%BE%D0%B1%D0%BD%D0%B0%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%B0%20%D0%BF%D0%BE%D0%BB%D0%B8%D1%86%D0%B8%D0%B5%D0%B9%20%D0%B2%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%D0%BC%D0%B0%D0%B3%D0%BD%D0%B8%D1%82%D0%BE%D1%84%D0%BE%D0%BD%D0%B5%20%D1%81%D0%B5%D1%80%D0%B8%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%83%D0%B1%D0%B8%D0%B9%D1%86%D1%8B%20%D0%A1%D1%82%D0%B8%D0%B2%D0%B5%D0%BD%D0%B0%20%D0%9F%D0%B5%D0%BD%D0%BD%D0%B5%D0%BB%D0%BB%D0%B0%20%28Steven%20Pennell%29%28%D1%82%D0%B0%D0%BA%D0%B6%D0%B5%20%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BA%D0%B0%D0%BA%20%C2%AB%D0%A3%D0%B1%D0%B8%D0%B9%D1%86%D0%B0%20%D0%B8%D0%B7%20%D0%BA%D0%BE%D1%80%D0%B8%D0%B4%D0%BE%D1%80%D0%B0%C2%BB%2C%20%D0%BE%D0%BD%20%D0%B6%D0%B5%20%C2%AB%D0%A3%D0%B1%D0%B8%D0%B9%D1%86%D0%B0%20%D1%81%20%D1%82%D1%80%D0%B0%D1%81%D1%81%D1%8B%2040%C2%BB%29%20%D0%BF%D1%80%D0%B8%20%D0%B5%D0%B3%D0%BE%20%D0%B0%D1%80%D0%B5%D1%81%D1%82%D0%B5.%20%D0%A1%D0%BE%D0%BE%D0%B1%D1%89%D0%B0%D0%B5%D1%82%D1%81%D1%8F%2C%20%D1%87%D1%82%D0%BE%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%20%D0%B1%D1%8B%D0%BB%20%D0%B2%D0%BA%D0%BB%D1%8E%D1%87%D1%91%D0%BD%20%D0%B2%20%D0%BF%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D1%83%20%D0%BD%D0%B0%20%D0%BF%D0%B5%D1%87%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%20%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%BD%D1%83%D1%8E%20%D1%81%D1%86%D0%B5%D0%BD%D1%83%20%C2%AB%D0%BF%D0%B8%D1%80%D1%81%D0%B8%D0%BD%D0%B3%D0%B0%20%D1%81%D0%BE%D1%81%D0%BA%D0%BE%D0%B2%C2%BB.%20%D0%AD%D1%82%D0%BE%D1%82%20%D0%B8%D0%BD%D1%86%D0%B8%D0%B4%D0%B5%D0%BD%D1%82%20%D1%87%D0%B0%D1%81%D1%82%D0%BE%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BE%D1%87%D0%BD%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BF%D0%B8%D1%81%D1%8B%D0%B2%D0%B0%D1%8E%D1%82%20%D1%81%D0%B5%D1%80%D0%B8%D0%B9%D0%BD%D0%BE%D0%BC%D1%83%20%D1%83%D0%B1%D0%B8%D0%B9%D1%86%D0%B5-%D0%BA%D0%B0%D0%BD%D0%BD%D0%B8%D0%B1%D0%B0%D0%BB%D1%83%20%D0%94%D0%B6%D0%B5%D1%84%D1%84%D1%80%D0%B8%20%D0%94%D0%B0%D0%BC%D0%B5%D1%80%D1%83%20%28Jeffrey%20Dahmer%29.%20%D0%9E%D1%80%D0%B8%D0%B3%D0%B8%D0%BD%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%3A%20The%20Taming%20of%20Rebecca%0A%D0%A2%D0%B0%D0%BA%D0%B6%D0%B5%20%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%B5%D0%BD%20%D0%BA%D0%B0%D0%BA%3A%20Rebecca%27n%C4%B1n%20Evcille%C5%9Ftirilmesi%2C%20Rebecca%2C%20Taming%20of%20Rebecca%0A%0A%D0%A0%D0%B5%D0%B6%D0%B8%D1%81%D1%81%D1%91%D1%80%3A%20Phil%20Prince%0A%D0%92%20%D1%80%D0%BE%D0%BB%D1%8F%D1%85%3A%20George%20Payne%2C%20Sharon%20Mitchell%2C%20Stella%20Stevens%2C%20Velvet%20Summers%2C%20Niko%2C%20David%20Christopher%2C%20Cheri%20Champagne%2C%20Ambrosia%20Fox%2C%20Ron%20Hudd%2C%20Tony%20Mansfield%2C%20Jamie%20St.%20James%0A%D0%A1%D1%82%D1%83%D0%B4%D0%B8%D1%8F%3A%20Avon%20Video%2C%20%D0%B1%D0%B5%D0%B7%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B2%D0%BE%D0%B4%D0%B0\u0026keywords=21%2B%2C%20%D0%90%D1%80%D1%82-%D1%85%D0%B0%D1%83%D1%81%2C%20%D0%92%D0%B8%D0%B4%D0%B5%D0%BE%2C%20%D0%A4%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%9A%D0%BB%D0%B0%D1%81%D1%81%D0%B8%D0%BA%D0%B0%2C%20%D0%A0%D0%B5%D1%82%D1%80%D0%BE%2C%20%D0%A3%D0%B6%D0%B0%D1%81%D1%8B%2C%20%D0%A2%D1%80%D0%B8%D0%BB%D0%BB%D0%B5%D1%80%2C%20%D0%B4%D0%BE%D0%BC%D0%B0%2C%20%D1%81%D1%82%D0%B0%D1%80%D1%8B%D0%B5%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%20%D0%BD%D0%B0%D0%B3%D0%BE%D1%82%D0%B0%2C%20%D0%BD%D0%B5%D0%B7%D0%B0%D0%B2%D0%B8%D1%81%D0%B8%D0%BC%D1%8B%D0%B9%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%20%D0%BC%D0%B0%D1%81%D1%82%D1%83%D1%80%D0%B1%D0%B0%D1%86%D0%B8%D1%8F%2C%20%D0%B3%D1%80%D1%83%D0%BF%D0%BF%D0%BE%D0%B2%D0%BE%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D0%BB%D0%BE%D0%B1%D0%BA%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%2C%20%D0%BE%D1%80%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%20%D0%BD%D0%B0%20%D0%BB%D0%BE%D0%B1%D0%BA%D0%B5%2C%20%D0%B0%D0%B2%D1%82%D0%BE%D0%B1%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%2C%20%D1%81%D0%B5%D0%BA%D1%81%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5%2C%20%D1%8D%D1%80%D0%BE%D1%82%D0%B8%D1%87%D0%B5%D1%81%D0%BA%D0%B8%D0%B9%20%D1%83%D0%B6%D0%B0%D1%81%2C%20%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D1%81%D0%B5%D0%BA%D1%81%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%B6%D0%B5%D1%81%D1%82%D0%BE%D0%BA%D0%BE%D1%81%D1%82%D1%8C%2C%20%D0%B4%D0%BE%D0%BC%D0%BE%D0%B3%D0%B0%D1%82%D0%B5%D0%BB%D1%8C%D1%81%D1%82%D0%B2%D0%BE%2C%20%D1%81%D0%B5%D0%BA%D1%81%20%D1%83%D0%B6%D0%B0%D1%81%2C%20%D0%B6%D0%B5%D0%BD%D1%89%D0%B8%D0%BD%D0%B0-%D1%81%D0%B0%D0%B4%D0%B8%D1%81%D1%82%D0%BA%D0%B0%2C%20%D1%85%D0%B0%D1%80%D0%B4%D0%BA%D0%BE%D1%80%20%D1%83%D0%B6%D0%B0%D1%81%2C%20%D1%8D%D1%80%D0%B5%D0%B3%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D0%BF%D0%B5%D0%BD%D0%B8%D1%81%2C%20%D1%81%D0%B5%D0%BA%D1%81%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B4%D0%B8%D1%81%D1%82%2C%20%D1%81%D0%B5%D0%BA%D1%81-%D1%88%D0%BE%D1%83%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D0%BA%D1%83%D0%BD%D0%BD%D0%B8%D0%BB%D0%B8%D0%BD%D0%B3%D1%83%D1%81%2C%20%D0%B6%D0%B5%D0%BD%D1%89%D0%B8%D0%BD%D0%B0%20%D0%BD%D0%B0%20%D0%BC%D1%83%D0%B6%D1%81%D0%BA%D0%BE%D0%BC%20%D0%B8%D0%B7%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B8%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D1%8F%D1%86%D0%B8%D1%8F%20%D1%81%D0%BE%D0%B2%D0%BE%D0%BA%D1%83%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%84%D0%B5%D0%BB%D0%BB%D1%8F%D1%86%D0%B8%D1%8F%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D1%82%D0%BE%D1%80%D1%87%D0%B0%D1%89%D0%B8%D0%B5%20%D1%81%D0%BE%D1%81%D0%BA%D0%B8%2C%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%20%D0%B2%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D0%B5%2C%20%D0%BF%D1%80%D0%B8%D0%BD%D1%83%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%201980-%D0%B5%2C%20%D0%BC%D0%BE%D0%BB%D0%BE%D0%B4%D0%B0%D1%8F%2C%20%D0%B6%D0%B5%D0%BD%D1%89%D0%B8%D0%BD%D0%B0%2C%20%D0%B4%D0%BB%D1%8F%2C%20%D0%BA%D0%B0%D0%BA%2C%20%D0%B8%D0%B7%2C%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%B4%D0%B5%D0%B2%D1%83%D1%88%D0%BA%D0%B0%2C%20%D1%88%D0%B0%D0%BC%D0%BF%D0%B0%D0%BD%D1%81%D0%BA%D0%BE%D0%B5%2C%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%2C%20%D0%BF%D0%BE%D0%BB%D0%BD%D0%BE%D0%BC%D0%B5%D1%82%D1%80%D0%B0%D0%B6%D0%BD%D1%8B%D0%B9%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D0%B7%D1%80%D0%BE%D1%81%D0%BB%D1%8B%D1%85%2C%20%D0%BA%D0%BB%D0%B0%D1%81%D1%81%D0%B8%D0%BA%D0%B0%2C%20%D0%B2%D0%B8%D0%BD%D1%82%D0%B0%D0%B6%2C%20%D1%80%D0%B5%D1%82%D1%80%D0%BE%2C%20%D1%81%D0%B0%D0%BC%D0%BA%D0%B0%2C%20%D0%B2%D0%B0%D0%B3%D0%B8%D0%BD%D0%B0%2C%20%D1%8F%D0%B9%D1%86%D0%B0%2C%20%D1%81%D0%BF%D0%B5%D1%80%D0%BC%D0%B0%2C%20%D1%87%D0%BB%D0%B5%D0%BD%2C%20%D0%BC%D0%B8%D0%BD%D0%B5%D1%82%2C%20%D0%BD%D0%B0%D0%B3%D0%BE%D1%82%D0%B0%2C%20%D1%81%D0%BE%D1%81%D0%BA%D0%B8%2C%20%D0%BF%D0%B0%D1%80%D0%B5%D0%BD%D1%8C%2C%20%D0%BF%D0%BE%D0%BB%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%B3%D1%83%D0%B1%D1%8B%2C%20%D1%8D%D1%80%D0%B5%D0%BA%D1%86%D0%B8%D1%8F%2C%20%D0%BA%D1%83%D0%BD%D0%BD%D0%B8%D0%BB%D0%B8%D0%BD%D0%B3%D1%83%D1%81%2C%20%D0%B3%D1%80%D1%83%D0%B4%D1%8C%2C%20%D1%83%D0%B6%D0%B0%D1%81%D1%8B%2C%20%D0%BE%D1%82%D0%B5%D1%86%2C%20%D1%84%D0%B8%D1%81%D1%82%D0%B8%D0%BD%D0%B3%2C%20%D0%BF%D0%B5%D1%89%D0%B5%D1%80%D0%B0%2C%20%D1%81%D0%B0%D0%B4%D0%B8%D0%B7%D0%BC%20%D0%B8%20%D0%BC%D0%B0%D0%B7%D0%BE%D1%85%D0%B8%D0%B7%D0%BC%2C%20%D1%8D%D1%80%D0%BE%D1%82%D0%B8%D0%BA%D0%B0%2C%20%D0%BF%D0%BE%D0%B1%D0%B5%D0%B3%2C%20%D1%88%D0%BA%D0%BE%D0%BB%D0%B0%2C%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D0%B4%D0%BE%D1%87%D1%8C%2C%20%D1%84%D0%B5%D0%BB%D0%BB%D1%8F%D1%86%D0%B8%D1%8F%2C%20%D0%B8%D0%B7%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%2C%20%D0%B2%D0%B7%D0%B3%D0%BB%D1%8F%D0%B4%20%D0%B2%20%D0%BF%D1%80%D0%BE%D1%88%D0%BB%D0%BE%D0%B5%2C%20%D0%B6%D0%B5%D1%81%D1%82%D0%BE%D0%BA%D0%BE%D1%81%D1%82%D1%8C%2C%20%D0%B3%D1%80%D1%83%D0%BF%D0%BF%D0%B0%2C%20%D0%BA%D1%80%D0%BE%D0%B2%D0%BE%D1%81%D0%BC%D0%B5%D1%88%D0%B5%D0%BD%D0%B8%D0%B5%2C%20%D0%BC%D0%B0%D1%81%D1%82%D1%83%D1%80%D0%B1%D0%B0%D1%86%D0%B8%D1%8F%2C%20%D1%82%D1%80%D0%B5%D0%BF%D0%BA%D0%B0%2C%20%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5%2C%20%D1%81%D0%B0%D0%B4%D0%BE%D0%BC%D0%B0%D0%B7%D0%BE%D1%85%D0%B8%D0%B7%D0%BC%2C%20%D1%81%D0%B0%D0%B4%D0%B8%D1%81%D1%82%2C%20%D0%BF%D1%81%D0%B8%D1%85%D0%BE%D0%BF%D0%B0%D1%82%2C%20%D0%BE%D1%80%D0%B3%D0%B8%D1%8F%2C%20%D1%83%D0%B1%D0%B8%D0%B9%D1%81%D1%82%D0%B2%D0%BE%2C%20%D0%B7%D0%BE%D0%BB%D0%BE%D1%82%D0%BE%D0%B9%2C%20%D0%B4%D1%83%D1%88%2C%20%D0%BA%D1%80%D0%BE%D0%B2%D1%8C%2C%20%D1%85%D0%B0%D1%80%D0%B4%D0%BA%D0%BE%D1%80%2C%20%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%BA%D0%B8%2C%20%D0%94%D0%B6%D0%BE%D1%80%D0%B4%D0%B6%20%D0%9F%D1%8D%D0%B9%D0%BD%2C%20%D0%A8%D1%8D%D1%80%D0%BE%D0%BD%20%D0%9C%D0%B8%D1%82%D1%87%D0%B5%D0%BB%D0%BB%2C%20%D0%92%D0%B5%D0%BB%D0%B2%D0%B5%D1%82%20%D0%A1%D0%B0%D0%BC%D0%BC%D0%B5%D1%80%D1%81%2C%20%D0%9D%D0%B8%D0%BA%D0%BE%2C%20%D0%94%D1%8D%D0%B2%D0%B8%D0%B4%20%D0%9A%D1%80%D0%B8%D1%81%D1%82%D0%BE%D1%84%D0%B5%D1%80%2C%20%D0%A8%D0%B5%D1%80%D0%B8%20%D0%A8%D0%B0%D0%BC%D0%BF%D0%B0%D0%BD%D1%8C%2C%20%D0%90%D0%BC%D0%B1%D1%80%D0%BE%D0%B7%D0%B8%D1%8F%20%D0%A4%D0%BE%D0%BA%D1%81%2C%20%D0%A0%D0%BE%D0%BD%20%D0%A5%D0%B0%D0%B4%D0%B4%2C%20%D0%A2%D0%BE%D0%BD%D0%B8%20%D0%9C%D1%8D%D0%BD%D1%81%D1%84%D0%B8%D0%BB%D0%B4%2C%20%D0%94%D0%B6%D0%B5%D0%B9%D0%BC%D0%B8%20%D0%A1%D0%B5%D0%BD%D1%82-%D0%94%D0%B6%D0%B5%D0%B9%D0%BC%D1%81%2C%20%D0%A1%D1%82%D0%B5%D0%BB%D0%BB%D0%B0%20%D0%A1%D1%82%D0%B8%D0%B2%D0%B5%D0%BD%D1%81\u0026meta%5Buseragent%5D=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026meta%5BapplePay%5D=0\u0026meta%5Barch%5D=255\u0026meta%5Bwidth%5D=1280\u0026meta%5Bheight%5D=1024\u0026meta%5Bratio%5D=1\u0026\u0026meta%5Bgpu%5D=llvmpipe\u0026meta%5BcolorDepth%5D=24\u0026meta%5Bgamut%5D=srgb\u0026meta%5Bcores%5D=48\u0026meta%5BhashG%5D=3452428935831314\u0026meta%5BhashC%5D=8042803751899180\u0026meta%5BhashM%5D=7636566414559532\u0026","fqdn":"nwret.site","domain":"nwret.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d5a55ae07ee57c2ff2bb56d772fcb36","sha1":"56c9ae23052bfa05947565d85d94c41f12dcea85","sha256":"414b087c639093682ae591544781a5ba8125086352ac1e91bfca24b07f9864b9","sha512":"f273e6aebfffe80f2338cd349e979663a7dfc998b1357c06f3fa1eee79167054266d40e783c898c571fb8a4f15f2f9acb507bfb9bc448991efe1d712898fd9da","ssdeep":"","tlshash":"f1d0a7c6fee1305dc56e22d59f6b2e93b3142a03b4492209f8429da534c68066913662","size":241,"data":"","first_seen":"2025-10-25T20:28:00.694784Z","last_seen":"2025-10-25T20:28:00.694784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-04T06:43:15.287939Z","times_seen":388240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f9c5333a6b0b24562f95a928bb1e8dc4","sha1":"fcd9b44e85d79e5cc9c9ecf2246242717c5e9faa","sha256":"bd5755338f5edda68835db5c37f801ab67502616dd4af373fffa51b837c45be7","sha512":"eee1f31c4ca443578e996f0e92767d4aa70f3418c064358df495e016689e5a039c29cc384e4aeec2b3681ee1c362401dcaeb4605af537a491b783a941b10cedf","ssdeep":"","tlshash":"0d700008bc88200a0022302202eb0008002202002a022020202088800c3200a2002e0a","size":22,"data":"","first_seen":"2025-10-21T07:01:45.371731Z","last_seen":"2025-10-26T07:00:10.898619Z","times_seen":3722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riamiavid.com/river/5629?n=bmz7IVGE\u0026ab=0\u0026ts=1761424043063\u0026\u0026\u0026rt=0\u0026id=1761424042166\u0026tz=0\u0026ps=1761424040437\u0026meta%5BapplePay%5D=0\u0026meta%5Barch%5D=255\u0026meta%5Bwidth%5D=1280\u0026meta%5Bheight%5D=1024\u0026meta%5Bratio%5D=1\u0026\u0026meta%5Bgpu%5D=llvmpipe\u0026meta%5BcolorDepth%5D=24\u0026meta%5Bgamut%5D=srgb\u0026meta%5Bcores%5D=48\u0026meta%5BhashG%5D=3452428935831314\u0026meta%5BhashC%5D=8042803751899180\u0026meta%5BhashM%5D=7636566414559532\u0026\u0026action=link\u0026userAgent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026location=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026title=%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%20%281982%29\u0026hardwareLogical=48\u0026orientation=landscape\u0026\u0026resolution=1280x1024\u0026screenWidth=1280\u0026screenHeight=1024\u0026devicePixelRatio=1\u0026description=%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D0%B0%D1%8F%20%D0%B4%D0%B5%D0%B2%D1%83%D1%88%D0%BA%D0%B0%20%D0%BE%D1%82%D0%BF%D1%80%D0%B0%D0%B2%D0%BB%D1%8F%D0%B5%D1%82%D1%81%D1%8F%20%D0%B2%20%D1%88%D0%BA%D0%BE%D0%BB%D1%83%20%D0%B4%D0%BB%D1%8F%20%D0%BD%D0%B5%D0%BF%D0%BE%D1%81%D0%BB%D1%83%D1%88%D0%BD%D1%8B%D1%85%20%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%B5%D0%BA%2C%20%D1%87%D1%82%D0%BE%D0%B1%D1%8B%20%D1%81%D0%B1%D0%B5%D0%B6%D0%B0%D1%82%D1%8C%20%D0%BE%D1%82%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B3%D0%BE%20%D0%B6%D0%B5%D1%81%D1%82%D0%BE%D0%BA%D0%BE%D0%B3%D0%BE%20%D0%BE%D1%82%D1%86%D0%B0%2C%20%D0%B8%20%D1%83%D0%B7%D0%BD%D0%B0%D0%B5%D1%82%2C%20%D1%87%D1%82%D0%BE%20%D0%B5%D1%91%20%D0%BF%D1%80%D0%BE%D0%B1%D0%BB%D0%B5%D0%BC%D1%8B%20%D1%82%D0%BE%D0%BB%D1%8C%D0%BA%D0%BE%20%D0%BD%D0%B0%D1%87%D0%B8%D0%BD%D0%B0%D1%8E%D1%82%D1%81%D1%8F.%20%D0%9B%D1%8E%D0%B1%D0%BE%D0%BF%D1%8B%D1%82%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%BB%D0%BE%D1%87%D1%8C%3A%20%D0%92%201988%20%D0%B3%D0%BE%D0%B4%D1%83%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%D0%BA%D0%B0%D1%81%D1%81%D0%B5%D1%82%D0%B0%20%C2%AB%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%C2%BB%20%281982%29%20%D0%B1%D1%8B%D0%BB%D0%B0%20%D0%BE%D0%B1%D0%BD%D0%B0%D1%80%D1%83%D0%B6%D0%B5%D0%BD%D0%B0%20%D0%BF%D0%BE%D0%BB%D0%B8%D1%86%D0%B8%D0%B5%D0%B9%20%D0%B2%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%D0%BC%D0%B0%D0%B3%D0%BD%D0%B8%D1%82%D0%BE%D1%84%D0%BE%D0%BD%D0%B5%20%D1%81%D0%B5%D1%80%D0%B8%D0%B9%D0%BD%D0%BE%D0%B3%D0%BE%20%D1%83%D0%B1%D0%B8%D0%B9%D1%86%D1%8B%20%D0%A1%D1%82%D0%B8%D0%B2%D0%B5%D0%BD%D0%B0%20%D0%9F%D0%B5%D0%BD%D0%BD%D0%B5%D0%BB%D0%BB%D0%B0%20%28Steven%20Pennell%29%28%D1%82%D0%B0%D0%BA%D0%B6%D0%B5%20%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%BA%D0%B0%D0%BA%20%C2%AB%D0%A3%D0%B1%D0%B8%D0%B9%D1%86%D0%B0%20%D0%B8%D0%B7%20%D0%BA%D0%BE%D1%80%D0%B8%D0%B4%D0%BE%D1%80%D0%B0%C2%BB%2C%20%D0%BE%D0%BD%20%D0%B6%D0%B5%20%C2%AB%D0%A3%D0%B1%D0%B8%D0%B9%D1%86%D0%B0%20%D1%81%20%D1%82%D1%80%D0%B0%D1%81%D1%81%D1%8B%2040%C2%BB%29%20%D0%BF%D1%80%D0%B8%20%D0%B5%D0%B3%D0%BE%20%D0%B0%D1%80%D0%B5%D1%81%D1%82%D0%B5.%20%D0%A1%D0%BE%D0%BE%D0%B1%D1%89%D0%B0%D0%B5%D1%82%D1%81%D1%8F%2C%20%D1%87%D1%82%D0%BE%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%20%D0%B1%D1%8B%D0%BB%20%D0%B2%D0%BA%D0%BB%D1%8E%D1%87%D1%91%D0%BD%20%D0%B2%20%D0%BF%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D1%83%20%D0%BD%D0%B0%20%D0%BF%D0%B5%D1%87%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%20%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%BD%D1%83%D1%8E%20%D1%81%D1%86%D0%B5%D0%BD%D1%83%20%C2%AB%D0%BF%D0%B8%D1%80%D1%81%D0%B8%D0%BD%D0%B3%D0%B0%20%D1%81%D0%BE%D1%81%D0%BA%D0%BE%D0%B2%C2%BB.%20%D0%AD%D1%82%D0%BE%D1%82%20%D0%B8%D0%BD%D1%86%D0%B8%D0%B4%D0%B5%D0%BD%D1%82%20%D1%87%D0%B0%D1%81%D1%82%D0%BE%20%D0%BE%D1%88%D0%B8%D0%B1%D0%BE%D1%87%D0%BD%D0%BE%20%D0%BF%D1%80%D0%B8%D0%BF%D0%B8%D1%81%D1%8B%D0%B2%D0%B0%D1%8E%D1%82%20%D1%81%D0%B5%D1%80%D0%B8%D0%B9%D0%BD%D0%BE%D0%BC%D1%83%20%D1%83%D0%B1%D0%B8%D0%B9%D1%86%D0%B5-%D0%BA%D0%B0%D0%BD%D0%BD%D0%B8%D0%B1%D0%B0%D0%BB%D1%83%20%D0%94%D0%B6%D0%B5%D1%84%D1%84%D1%80%D0%B8%20%D0%94%D0%B0%D0%BC%D0%B5%D1%80%D1%83%20%28Jeffrey%20Dahmer%29.%20%D0%9E%D1%80%D0%B8%D0%B3%D0%B8%D0%BD%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%3A%20The%20Taming%20of%20Rebecca%0A%D0%A2%D0%B0%D0%BA%D0%B6%D0%B5%20%D0%B8%D0%B7%D0%B2%D0%B5%D1%81%D1%82%D0%B5%D0%BD%20%D0%BA%D0%B0%D0%BA%3A%20Rebecca%27n%C4%B1n%20Evcille%C5%9Ftirilmesi%2C%20Rebecca%2C%20Taming%20of%20Rebecca%0A%0A%D0%A0%D0%B5%D0%B6%D0%B8%D1%81%D1%81%D1%91%D1%80%3A%20Phil%20Prince%0A%D0%92%20%D1%80%D0%BE%D0%BB%D1%8F%D1%85%3A%20George%20Payne%2C%20Sharon%20Mitchell%2C%20Stella%20Stevens%2C%20Velvet%20Summers%2C%20Niko%2C%20David%20Christopher%2C%20Cheri%20Champagne%2C%20Ambrosia%20Fox%2C%20Ron%20Hudd%2C%20Tony%20Mansfield%2C%20Jamie%20St.%20James%0A%D0%A1%D1%82%D1%83%D0%B4%D0%B8%D1%8F%3A%20Avon%20Video%2C%20%D0%B1%D0%B5%D0%B7%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B2%D0%BE%D0%B4%D0%B0\u0026keywords=21%2B%2C%20%D0%90%D1%80%D1%82-%D1%85%D0%B0%D1%83%D1%81%2C%20%D0%92%D0%B8%D0%B4%D0%B5%D0%BE%2C%20%D0%A4%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%9A%D0%BB%D0%B0%D1%81%D1%81%D0%B8%D0%BA%D0%B0%2C%20%D0%A0%D0%B5%D1%82%D1%80%D0%BE%2C%20%D0%A3%D0%B6%D0%B0%D1%81%D1%8B%2C%20%D0%A2%D1%80%D0%B8%D0%BB%D0%BB%D0%B5%D1%80%2C%20%D0%B4%D0%BE%D0%BC%D0%B0%2C%20%D1%81%D1%82%D0%B0%D1%80%D1%8B%D0%B5%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%20%D0%BD%D0%B0%D0%B3%D0%BE%D1%82%D0%B0%2C%20%D0%BD%D0%B5%D0%B7%D0%B0%D0%B2%D0%B8%D1%81%D0%B8%D0%BC%D1%8B%D0%B9%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%20%D0%BC%D0%B0%D1%81%D1%82%D1%83%D1%80%D0%B1%D0%B0%D1%86%D0%B8%D1%8F%2C%20%D0%B3%D1%80%D1%83%D0%BF%D0%BF%D0%BE%D0%B2%D0%BE%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D0%BB%D0%BE%D0%B1%D0%BA%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%2C%20%D0%BE%D1%80%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%20%D0%BD%D0%B0%20%D0%BB%D0%BE%D0%B1%D0%BA%D0%B5%2C%20%D0%B0%D0%B2%D1%82%D0%BE%D0%B1%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BA%D0%B0%2C%20%D1%81%D0%B5%D0%BA%D1%81%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5%2C%20%D1%8D%D1%80%D0%BE%D1%82%D0%B8%D1%87%D0%B5%D1%81%D0%BA%D0%B8%D0%B9%20%D1%83%D0%B6%D0%B0%D1%81%2C%20%D0%B1%D0%B5%D0%B7%D0%BE%D0%BF%D0%B0%D1%81%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D1%81%D0%B5%D0%BA%D1%81%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%B6%D0%B5%D1%81%D1%82%D0%BE%D0%BA%D0%BE%D1%81%D1%82%D1%8C%2C%20%D0%B4%D0%BE%D0%BC%D0%BE%D0%B3%D0%B0%D1%82%D0%B5%D0%BB%D1%8C%D1%81%D1%82%D0%B2%D0%BE%2C%20%D1%81%D0%B5%D0%BA%D1%81%20%D1%83%D0%B6%D0%B0%D1%81%2C%20%D0%B6%D0%B5%D0%BD%D1%89%D0%B8%D0%BD%D0%B0-%D1%81%D0%B0%D0%B4%D0%B8%D1%81%D1%82%D0%BA%D0%B0%2C%20%D1%85%D0%B0%D1%80%D0%B4%D0%BA%D0%BE%D1%80%20%D1%83%D0%B6%D0%B0%D1%81%2C%20%D1%8D%D1%80%D0%B5%D0%B3%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D0%BF%D0%B5%D0%BD%D0%B8%D1%81%2C%20%D1%81%D0%B5%D0%BA%D1%81%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B4%D0%B8%D1%81%D1%82%2C%20%D1%81%D0%B5%D0%BA%D1%81-%D1%88%D0%BE%D1%83%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D0%BA%D1%83%D0%BD%D0%BD%D0%B8%D0%BB%D0%B8%D0%BD%D0%B3%D1%83%D1%81%2C%20%D0%B6%D0%B5%D0%BD%D1%89%D0%B8%D0%BD%D0%B0%20%D0%BD%D0%B0%20%D0%BC%D1%83%D0%B6%D1%81%D0%BA%D0%BE%D0%BC%20%D0%B8%D0%B7%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B8%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D1%8F%D1%86%D0%B8%D1%8F%20%D1%81%D0%BE%D0%B2%D0%BE%D0%BA%D1%83%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D0%B0%D1%8F%20%D1%84%D0%B5%D0%BB%D0%BB%D1%8F%D1%86%D0%B8%D1%8F%2C%20%D0%BD%D0%B5%D1%81%D0%B8%D0%BC%D1%83%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D1%82%D0%BE%D1%80%D1%87%D0%B0%D1%89%D0%B8%D0%B5%20%D1%81%D0%BE%D1%81%D0%BA%D0%B8%2C%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%20%D0%B2%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D0%B5%2C%20%D0%BF%D1%80%D0%B8%D0%BD%D1%83%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B5%D0%BA%D1%81%2C%201980-%D0%B5%2C%20%D0%BC%D0%BE%D0%BB%D0%BE%D0%B4%D0%B0%D1%8F%2C%20%D0%B6%D0%B5%D0%BD%D1%89%D0%B8%D0%BD%D0%B0%2C%20%D0%B4%D0%BB%D1%8F%2C%20%D0%BA%D0%B0%D0%BA%2C%20%D0%B8%D0%B7%2C%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%B4%D0%B5%D0%B2%D1%83%D1%88%D0%BA%D0%B0%2C%20%D1%88%D0%B0%D0%BC%D0%BF%D0%B0%D0%BD%D1%81%D0%BA%D0%BE%D0%B5%2C%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%2C%20%D0%BF%D0%BE%D0%BB%D0%BD%D0%BE%D0%BC%D0%B5%D1%82%D1%80%D0%B0%D0%B6%D0%BD%D1%8B%D0%B9%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%20%D0%B4%D0%BB%D1%8F%20%D0%B2%D0%B7%D1%80%D0%BE%D1%81%D0%BB%D1%8B%D1%85%2C%20%D0%BA%D0%BB%D0%B0%D1%81%D1%81%D0%B8%D0%BA%D0%B0%2C%20%D0%B2%D0%B8%D0%BD%D1%82%D0%B0%D0%B6%2C%20%D1%80%D0%B5%D1%82%D1%80%D0%BE%2C%20%D1%81%D0%B0%D0%BC%D0%BA%D0%B0%2C%20%D0%B2%D0%B0%D0%B3%D0%B8%D0%BD%D0%B0%2C%20%D1%8F%D0%B9%D1%86%D0%B0%2C%20%D1%81%D0%BF%D0%B5%D1%80%D0%BC%D0%B0%2C%20%D1%87%D0%BB%D0%B5%D0%BD%2C%20%D0%BC%D0%B8%D0%BD%D0%B5%D1%82%2C%20%D0%BD%D0%B0%D0%B3%D0%BE%D1%82%D0%B0%2C%20%D1%81%D0%BE%D1%81%D0%BA%D0%B8%2C%20%D0%BF%D0%B0%D1%80%D0%B5%D0%BD%D1%8C%2C%20%D0%BF%D0%BE%D0%BB%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%B3%D1%83%D0%B1%D1%8B%2C%20%D1%8D%D1%80%D0%B5%D0%BA%D1%86%D0%B8%D1%8F%2C%20%D0%BA%D1%83%D0%BD%D0%BD%D0%B8%D0%BB%D0%B8%D0%BD%D0%B3%D1%83%D1%81%2C%20%D0%B3%D1%80%D1%83%D0%B4%D1%8C%2C%20%D1%83%D0%B6%D0%B0%D1%81%D1%8B%2C%20%D0%BE%D1%82%D0%B5%D1%86%2C%20%D1%84%D0%B8%D1%81%D1%82%D0%B8%D0%BD%D0%B3%2C%20%D0%BF%D0%B5%D1%89%D0%B5%D1%80%D0%B0%2C%20%D1%81%D0%B0%D0%B4%D0%B8%D0%B7%D0%BC%20%D0%B8%20%D0%BC%D0%B0%D0%B7%D0%BE%D1%85%D0%B8%D0%B7%D0%BC%2C%20%D1%8D%D1%80%D0%BE%D1%82%D0%B8%D0%BA%D0%B0%2C%20%D0%BF%D0%BE%D0%B1%D0%B5%D0%B3%2C%20%D1%88%D0%BA%D0%BE%D0%BB%D0%B0%2C%20%D1%81%D0%B5%D0%BA%D1%81%2C%20%D0%B4%D0%BE%D1%87%D1%8C%2C%20%D1%84%D0%B5%D0%BB%D0%BB%D1%8F%D1%86%D0%B8%D1%8F%2C%20%D0%B8%D0%B7%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%2C%20%D0%B2%D0%B7%D0%B3%D0%BB%D1%8F%D0%B4%20%D0%B2%20%D0%BF%D1%80%D0%BE%D1%88%D0%BB%D0%BE%D0%B5%2C%20%D0%B6%D0%B5%D1%81%D1%82%D0%BE%D0%BA%D0%BE%D1%81%D1%82%D1%8C%2C%20%D0%B3%D1%80%D1%83%D0%BF%D0%BF%D0%B0%2C%20%D0%BA%D1%80%D0%BE%D0%B2%D0%BE%D1%81%D0%BC%D0%B5%D1%88%D0%B5%D0%BD%D0%B8%D0%B5%2C%20%D0%BC%D0%B0%D1%81%D1%82%D1%83%D1%80%D0%B1%D0%B0%D1%86%D0%B8%D1%8F%2C%20%D1%82%D1%80%D0%B5%D0%BF%D0%BA%D0%B0%2C%20%D0%BD%D0%B0%D1%81%D0%B8%D0%BB%D0%B8%D0%B5%2C%20%D1%81%D0%B0%D0%B4%D0%BE%D0%BC%D0%B0%D0%B7%D0%BE%D1%85%D0%B8%D0%B7%D0%BC%2C%20%D1%81%D0%B0%D0%B4%D0%B8%D1%81%D1%82%2C%20%D0%BF%D1%81%D0%B8%D1%85%D0%BE%D0%BF%D0%B0%D1%82%2C%20%D0%BE%D1%80%D0%B3%D0%B8%D1%8F%2C%20%D1%83%D0%B1%D0%B8%D0%B9%D1%81%D1%82%D0%B2%D0%BE%2C%20%D0%B7%D0%BE%D0%BB%D0%BE%D1%82%D0%BE%D0%B9%2C%20%D0%B4%D1%83%D1%88%2C%20%D0%BA%D1%80%D0%BE%D0%B2%D1%8C%2C%20%D1%85%D0%B0%D1%80%D0%B4%D0%BA%D0%BE%D1%80%2C%20%D0%B4%D0%B5%D0%B2%D0%BE%D1%87%D0%BA%D0%B8%2C%20%D0%94%D0%B6%D0%BE%D1%80%D0%B4%D0%B6%20%D0%9F%D1%8D%D0%B9%D0%BD%2C%20%D0%A8%D1%8D%D1%80%D0%BE%D0%BD%20%D0%9C%D0%B8%D1%82%D1%87%D0%B5%D0%BB%D0%BB%2C%20%D0%92%D0%B5%D0%BB%D0%B2%D0%B5%D1%82%20%D0%A1%D0%B0%D0%BC%D0%BC%D0%B5%D1%80%D1%81%2C%20%D0%9D%D0%B8%D0%BA%D0%BE%2C%20%D0%94%D1%8D%D0%B2%D0%B8%D0%B4%20%D0%9A%D1%80%D0%B8%D1%81%D1%82%D0%BE%D1%84%D0%B5%D1%80%2C%20%D0%A8%D0%B5%D1%80%D0%B8%20%D0%A8%D0%B0%D0%BC%D0%BF%D0%B0%D0%BD%D1%8C%2C%20%D0%90%D0%BC%D0%B1%D1%80%D0%BE%D0%B7%D0%B8%D1%8F%20%D0%A4%D0%BE%D0%BA%D1%81%2C%20%D0%A0%D0%BE%D0%BD%20%D0%A5%D0%B0%D0%B4%D0%B4%2C%20%D0%A2%D0%BE%D0%BD%D0%B8%20%D0%9C%D1%8D%D0%BD%D1%81%D1%84%D0%B8%D0%BB%D0%B4%2C%20%D0%94%D0%B6%D0%B5%D0%B9%D0%BC%D0%B8%20%D0%A1%D0%B5%D0%BD%D1%82-%D0%94%D0%B6%D0%B5%D0%B9%D0%BC%D1%81%2C%20%D0%A1%D1%82%D0%B5%D0%BB%D0%BB%D0%B0%20%D0%A1%D1%82%D0%B8%D0%B2%D0%B5%D0%BD%D1%81","fqdn":"riamiavid.com","domain":"riamiavid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"27fba6cb2bc27ed9d683e89321ceb7d2","sha1":"db4038bb1a2c1e3eb290eb54cbfd698b3244dfbc","sha256":"0853d03ac1a4bc95e7fdc5b104090b72856127c0f62008b478455bda3e92ca56","sha512":"463dc8ba1a0fb3f92deb70f3bc5ca5ceba4775924358e0d0493db26097e27aad7f4b8cd1323b65510bed806bd4940e4b9671225271c8c6b27c14c4da6fd706f0","ssdeep":"","tlshash":"ce8004fc14f0045d55150114571113c4311005473573134030414c301d4400350010c4","size":33,"data":"","first_seen":"2025-10-25T20:28:00.700128Z","last_seen":"2025-10-25T20:28:00.700128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebecaa2b7b8750ed2e733793434ad43c","sha1":"75cb4bd8b56fa72b7516b8d0c3edf73847b8047b","sha256":"d9126abee059d08e45cb40d55cee351d5bce6fb2fe9a63de695212baf2fbb06e","sha512":"fdbcea6606637cbda93ccea2f8525f60acb395157630d36764c3d18679d26125760fb961182361ead441a31b3cefe5e392c7e98f91f8c4ecc612be1f72605d2d","ssdeep":"1536:Hk8AqorreWwM81dF93bDbMxXIOxfEeCuB/UDFt+bypqNwC9:HBAh61dF9TMxphHCuiFtBu","tlshash":"4f63c03be79334dbcffeae0156e5a5a9627e6686118305cc32ab11c64829dc3d22d1dc","size":69828,"data":"","first_seen":"2025-10-25T20:28:00.701605Z","last_seen":"2025-10-25T20:28:00.701605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bce7a196769f6fd4bced817bedb0bae6","sha1":"b32abb65ab5f47679f291bf55070db344ae64067","sha256":"3cde6522a96ac3f3aa0c44a36c10526db3e1d1e4372f61fcf5f74d8e9685b4b2","sha512":"8f8b72e0f397ea84b58216a9a10767e3a106e104d8beb524709992448300daabe4b6d0b9eb1128c7bce3f7335076e620d4e63d7f99856b982d32aa6bc9fd5361","ssdeep":"384:9Qn9UM1uuqOO5fuQ+gVxT1xA3YBtLkFnaea/QrXnEM/nQY:QzqOIxzT1uoBtLYaejjlQY","tlshash":"6e82d7deb651f06582b3b0b5067f1019e2bb6c61ac493409f315d5e83e70b8e906be7b","size":18930,"data":"","first_seen":"2025-10-21T07:01:45.386054Z","last_seen":"2025-10-26T07:00:10.913032Z","times_seen":3724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"113bfe2a8ecedd783f7a9a11b2e18953","sha1":"bad3ce8aeb0993ec6a76b93e97e966f789ebc2f1","sha256":"d4394ac31aabd911ecd5be13dee12e4955fa1ebb25402fbd36f16dcec3da7726","sha512":"085be559b208abedc1a99d427b599dcf6da066d338ce82776a4c6eb1e007f292452c49cf302e413547eeda30a201ad152fa7942b7376ebeaeda96df39eea69b4","ssdeep":"","tlshash":"7c700008ac88200200223822020f0008002202002a022c0008208ac00c3a00a2002e0b","size":22,"data":"","first_seen":"2025-10-21T07:01:45.377788Z","last_seen":"2025-10-26T07:00:10.907052Z","times_seen":3727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026bft=0dAFcWeA4nQNYwfm3EZ5b8ukZIczYCXIyOP7a5yRrIJOfNyUQ08Hg_zpG8zZMEZyC8NpzeuFJia99GI6pQ7J1VllYqaD9YZfUzFw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57bfb58dcc5cd66ac81c360d2ffb8cf0","sha1":"84897d024f594df943965d2068534ff5bf837220","sha256":"14178c27eeba69848f18917c4e00f54c54b3b74927cd0eff36e44b218dc17c84","sha512":"356f859bcc49099cab93d3948951653c4f4ba13e5edb0659d6c7baabd6f2eaaea12c43e8dd4c27f802250f8eaa0e74e4d1c791b86ed55375a76d060ed9011d09","ssdeep":"","tlshash":"6ed0a75322015ef34c15ac714556005f5c890527e11283f47bcd3cd1bfa0d017d049a9","size":221,"data":"","first_seen":"2025-10-25T20:28:00.704786Z","last_seen":"2025-10-25T20:28:00.704786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cleansasve.com/abal.php?id=324","fqdn":"cleansasve.com","domain":"cleansasve.com","tld":"com"},"ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6089aa8e576cf6a0d1fafbbaa743c3f","sha1":"9bf745596cd1b7d42b005807466ea4feab4cffa0","sha256":"f1ea0678125770619c0093d3d220f54142ff49ca1624f82ca600196185da50da","sha512":"951d2c86d2087211205187743e295476dc791420f7c7c72f6e23695deed0b5c2e2e9f03b03114aeecb283467ca1fae2700a3249a180aa330992558ec0aec9552","ssdeep":"","tlshash":"9e0125db44bf011c0552b15e32cf001afdda9107346aee627b4d93463f4462d55a37dd","size":813,"data":"","first_seen":"2025-10-13T14:06:18.665584Z","last_seen":"2026-03-31T01:30:42.554131Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"172.67.174.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b3aa57c9c04b6cc9602a6915def7afc","sha1":"5b564663244744d02b4585cc71033e393b6ad100","sha256":"599b52e3c007b78bd8e249ee2218abd979e6e2f93fc27ac379f2fa9241c4661c","sha512":"09a9ad6f5d5bdbc02563fe0f63a4c78983d7ca40c1c3486c7380ba0043d3241ad6a2aa91d00824061630b5731eea8263ab36a8a89917928d412392a99e006eb2","ssdeep":"96:9quVJFgMb/k1EFT47IwnUukpzFNqEsOu5U+FNdMKKO1Fo2JgkLXWFDRFaFOtxG1:9quVZZwL5U+FYOQhkqLYIW1","tlshash":"e5c1426893b72472919321ddaf8b9224753c9507b606da84bfae81c00f9ac19c1f3bdd","size":6132,"data":"","first_seen":"2025-09-26T19:53:07.664481Z","last_seen":"2025-11-07T11:00:16.647643Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=recaptchaOnLoad\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ebaf7df8369c73055900641f2a37e72","sha1":"d65fa46d8e505da7484775808e9a7a179d82f0da","sha256":"09d4aa58ab522eb1fdb945cf7a4c5fbe0a77f2d2c68ab72069ce3ff03fbc71c9","sha512":"4b883f714e003dd4b3accf09ef0b31841d5a569c90d7416ea980f8cee9e05c62d4f4be99b736e16354ff19ffffc30e70a7155594c471deea59444e460d49e988","ssdeep":"","tlshash":"ec11f0731a14e0390b720ad1e2ffdab1e491742df11885d8a616dad82e79cc7ce14449","size":1077,"data":"","first_seen":"2025-10-25T20:28:00.61535Z","last_seen":"2025-10-28T01:12:25.446249Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c62a0b3cc540e87f347aa88725641d1d","sha1":"06686a480554fdd28ef53b749124d432c53fc960","sha256":"6730145cc54264b3c710a70e81406234f20e4a4639136b3dcdafcb401d263279","sha512":"23a0299f9132fd6178fddbec7a93acf50a4ecca93c374562b7a9363fe641a6e4933c862ae3eda252a7a72bcce30c79b352911ed81a660c9e0ba42a2489eaffb0","ssdeep":"","tlshash":"4da02431d774c4514c3d5114113301cd40054353700340d5d74453445ff04d4c310c1c","size":84,"data":"","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-03-30T01:46:29.052477Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"830105b76b7c59a0cb3a166d5515ea0e","sha1":"5d8fb2a3a41ad81ad56b06b6e6c2487593b9b728","sha256":"124a3ef9207187dfe609d1de18efa33b2e74460d3bd84b16579ef23937359702","sha512":"d034334fa538dbbc6811053953d8ff5d59212969c324bea5e4854681e3545a2047f0fab45b0de633afbe92f7ca014de79c48d68b22169e27aaa0001d07c89fd3","ssdeep":"3072:n4Z6mTX7Q5Q7Q7Xsvr8LDkpiBG3n5Sa+MFmswVYVC2SQpBUL:4Ym45Q7ykdV+AWEpBK","tlshash":"7b346dd1369078b00593c0afd4770201b2382609b52eb56cb6bddee66586dce237bf79","size":247532,"data":"","first_seen":"2025-10-23T10:57:14.860136Z","last_seen":"2025-10-27T08:33:06.793903Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad95b65ecbcf789a8ccd2d54f165587a","sha1":"c8b4b9ba2510a3bcf5b7882ef299362b73526498","sha256":"c56828cfcd5217721a7c360d3c3e675da4a8fbcfaab123d4c1a7c1f1af830b40","sha512":"265ebb6e804700700b53ec25d37b2f88290b951f1a79b5547715cba26a58c78d030deaa217346178a517fc1f9a5d542c9507dceee2b629d589c5b6d16d313946","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPW0hMs4hs:JONux6EHOJcFnagwxdRwl","tlshash":"d8d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","size":599459,"data":"","first_seen":"2025-10-23T10:57:14.90805Z","last_seen":"2025-10-27T08:33:06.75464Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","size":376,"data":"","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-04T05:33:10.432135Z","times_seen":1510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4f2d24268c4d1728b6cd4c8a21f61fb","sha1":"5801ea22fc4de906ae93fc472d745d4607a4a62b","sha256":"7581a2f4a6fb137f6e63560de1fa25f6cdf4daf1fa843108238cc6dfe04b9896","sha512":"455fd31ba686acff2751100fd72307d78ea887b19c3b4ab21e51388a40ecfaab0c3b85fd57c42b722384495d98af068da6625add9f2936d6b38d35449e3ce0f5","ssdeep":"","tlshash":"e7c02b9c210a0c7145f727108b7fb600b4023214a4d47932480d23444d30e17d744c24","size":153,"data":"","first_seen":"2025-10-25T20:28:00.70861Z","last_seen":"2025-10-25T20:28:00.70861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riamiavid.com/sweetie/hello.min.js?id=1741555614","fqdn":"riamiavid.com","domain":"riamiavid.com","tld":"com"},"ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6e9d0a8d2e00a3feed00afca2c8b28","sha1":"436538f4846d5ea735bb30a7e1f0a10bdec3017f","sha256":"c05934c5b5ccdb6ec08eeb8aef37562cd49211671292492575123c78ed447c15","sha512":"964b53bf937410f114ac9dd6ad38fa07c8f5dd61f0a6343e902ab03dd40c93467f5a554e64d1e6cc87bdba3dc8234882a9e555c134202fa406ac5d3d45c01525","ssdeep":"1536:oxKna2vaxQEXJpvJSntYbmDful8zinp5SqrZI9CPnnwQIdRNWGLI/VINu:oEa/bJSnFui5WAu","tlshash":"20933ae433e3683952e783c97aa50340b2354446e917449cf97c98d7bb6590a70fabfc","size":92769,"data":"","first_seen":"2024-12-29T14:40:13.371959Z","last_seen":"2026-04-02T15:59:05.982612Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149592,"data":"","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpshsdk.com/npc/sdk/push.m.js?v=1","fqdn":"js.wpshsdk.com","domain":"wpshsdk.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8575fbbf73a8ff30ff1938a43e664d0","sha1":"d2785dd9892fdadb8703f655b056b02dd1cb5b8d","sha256":"50c8fdcb3cc08967158d65ade7da8ac61718b8a1babc00e13b930367e571aedc","sha512":"8c16a650ae6509952a46206931e89d7ab016ce4f534770e2b9e5d2a4b7fc1c2394a2ed5c454f9fb6d6a99f6b423e2775956ce8ec9c88f686b940a450dfc72078","ssdeep":"768:CuKhVWPsJiRx8Useb6uvOdtkp6O4AQet1/:CuKHesJiXWpuvOdtkQLAf","tlshash":"2be21a88b381b2b4479720b2587f6742b336651a7403c540f367ebc0b869e9fd336b69","size":31631,"data":"","first_seen":"2025-09-01T17:49:28.814065Z","last_seen":"2026-02-06T10:34:46.272483Z","times_seen":1059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1e2f3badb983110588c4014facfe2ee","sha1":"0770f142bd4ff005f0c23c0045a5c8cc14144517","sha256":"d1346d8f8288afbf55c5198f611a48af67f540714143269c18f7649ccf24be82","sha512":"f4916a9f84e947a49b06be55771144eb1f4d11b906141d54e6e9ef8f336608f6c6312bd57e4993bd0fd4a7646a3d79bc6abfea44d3301618ef8269d2584739e2","ssdeep":"","tlshash":"5a51da6bfbb92868460866ed507eb125758e31614af5b98fd32061098ed7db70033c39","size":2768,"data":"","first_seen":"2025-10-25T20:28:00.710303Z","last_seen":"2025-10-25T20:28:00.710303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Sat, 25 Oct 2025 20:32:21 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":100,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","date":"2025-10-25T20:27:23.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 12:58:05 GMT\r\nexpires: Tue, 20 Oct 2026 12:58:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 458958\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:28.940317Z","times_seen":536042,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":51,"dns":1,"connect":15,"send":0,"wait":16,"receive":3,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","date":"2025-10-25T20:27:23.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 25 Oct 2025 20:27:23 GMT\r\ndate: Sat, 25 Oct 2025 20:27:23 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f6b4dda4acb6970e791ad617fbe48de2","sha1":"7f3beb1219fb78c007d580bd5b5ca62f1c5e6c3e","sha256":"e16b940344e1a8e645ae7654d65c4f29700bd25b3d7e8804a1479706e984a07d","sha512":"61c227ea93f075bf6c6fb9cc82fb5f6eeadac1a4a45ba3c48c011364fd1c734802832d1234df17d6ef689d9bd2a0cc4d26fc7248fe7c885049d7f937d41c8513","ssdeep":"","tlshash":"b2b0122709a0c8181c004913d42fd3e8e0215674e79180f082746fd902640a38834804","first_seen":"2025-10-21T01:58:59.789483Z","last_seen":"2026-03-21T15:49:57.339208Z","times_seen":15408,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbadserv.com/adda42.php","fqdn":"rtbadserv.com","domain":"rtbadserv.com","tld":"com"},"ip":{"addr":"104.21.64.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbbtr.com/get/?go=1\u0026data=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","date":"2025-10-25T20:27:25.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbadserv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:54:20 GMT","end":"Thu, 25 Dec 2025 11:51:44 GMT"},"fingerprint":{"sha1":"43:7E:71:D7:59:E7:D6:3D:CD:A4:E8:00:3F:A0:A5:A9:4D:49:0E:54","sha256":"A0:86:7F:4F:E0:46:46:B0:C4:B5:C4:27:63:2B:C6:FC:9C:37:E9:53:D7:91:D5:09:8C:B8:35:EC:A5:D6:2C:5A"}}},"request":{"raw":"GET /adda42.php HTTP/1.1\r\nHost: rtbadserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-powered-by: PHP/7.4.33, PleskLin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9944745d181649c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":302,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"e9e9af2bb3f9625e411341c350c53aab","sha1":"d627fc6013b2b5bd2ba3322e743cb8d925aea003","sha256":"5091a6ff6550f61ccb495a0e902ea0a8440b7cfbc724b32e44670121020999fa","sha512":"84395a40f4deb5f4ae7e4876e5f1e0607c95b0a7f502c90b981f23318733d573ad1f03633be66c7f5e157f4b51cb97b34678573a75e52ff9d9f7a76b5715cf9f","ssdeep":"","tlshash":"63e08cab524c0f0d81aa91956aa0218c26e2b94da672d8e0a1a13493a5d0f4b8c5337c","first_seen":"2025-08-01T15:34:24.157972Z","last_seen":"2025-11-13T23:55:20.819398Z","times_seen":97,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":18,"dns":2,"connect":1,"send":0,"wait":55,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cleansasve.com/abastandart2.php?id=3","date":"2025-10-25T20:27:26.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid} HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cleansasve.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Oct 2025 20:27:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Sat, 25 Apr 2026 20:27:26 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YaOHLkkIGDRhcWIsYU3BLjoYgyE2PcsBGjRgwYNGjY6NJH; expires=Sun, 26 Oct 2025 20:27:26 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}],"data":{"size":11976,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7152)","md5":"1390825b821050da9107ab1ae5d7a8d9","sha1":"64a6bff4c30a25eaa813665d6fdca4f177387117","sha256":"f5573bcddde9799bfa8fb5beb97978f22056bb281d783a96b3e5bb3f0c21183c","sha512":"217db0fc049f594af37aa6739ce9c4d6453f8883572b79b594a1152b962edf6efa24623fb230bd36319d7318cfad867f8335aad7fa19f0bab597548fbbace893","ssdeep":"192:QRSKXILOKCtHf5/keTv0FP1tJgdQpvJgMwJKnJi4Q9h1G:kXbKCtHVLTsFPKQFePG","tlshash":"7a324b73ba821834914a34def0bef35d325a616395c1c56b92a0b418cdd7ef70233ea8","first_seen":"2025-10-25T20:28:00.597686Z","last_seen":"2025-10-25T20:28:00.597686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":59,"dns":0,"connect":24,"send":0,"wait":81,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MjE2YTQ4ODkxNTBhZjM5MzdmNzJkZTgwZTE4ZDlhZGU/jpeg,s(w:480,h:300)/xc/g6/g67831/frame/original/13.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.26","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","date":"2025-10-25T20:27:27.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/MjE2YTQ4ODkxNTBhZjM5MzdmNzJkZTgwZTE4ZDlhZGU/jpeg,s(w:480,h:300)/xc/g6/g67831/frame/original/13.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44680\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1762169523\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJFAH3v0QIAAwBw7WqBAH3vSEAAA\r\nx-77-nzt-ray: af585630b5bfe0ffaf32fd6854120d14\r\nx-77-cache: HIT\r\nx-77-age: 541887\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":44680,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"1ab52ed3417f1b141ba58708c605fbef","sha1":"d4ba90e1bf1651b77c446ab3e1fab638d4a95be3","sha256":"0bd1613bc013c200ad9f132058aba27c03bd9bbecd5bf70ab630644baa6138c3","sha512":"d8ad127b6c288a882ac873215f99f956f3f44c3c9883325378398eaaf645b6593ee8611927653ddc11a186719702d1038f295427b51540b3f1a5c17566a83a4c","ssdeep":"768:61Qh6kVE7Yuygw51Mh0TdzsWIywZt9juedAB1zblt60bTaZhGm6DBVJxpkSgw:66h6kVE7Y/51MhEmWBwZPjuaElltlTac","tlshash":"591301d9371f2ac5c0b25db51bf5bb421bcebf49b70959574cea031c38462204e55a8e","first_seen":"2025-10-22T03:07:29.410829Z","last_seen":"2025-10-28T11:04:51.698262Z","times_seen":57,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":93,"dns":45,"connect":12,"send":0,"wait":17,"receive":10,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 03:33:00 GMT","end":"Fri, 09 Jan 2026 03:32:59 GMT"},"fingerprint":{"sha1":"85:63:AE:48:6B:AD:8D:E9:E4:CD:7F:E2:D7:5B:64:4D:77:5B:E4:C3","sha256":"9A:63:5D:CA:8D:4E:67:CF:06:6E:57:73:69:15:F1:FD:98:61:8F:E4:00:90:48:4D:6B:F3:D6:73:32:4F:D3:38"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 17 Oct 2025 08:20:57 GMT\r\netag: W/\"68f1fc69-13844\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 20:32:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79940,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f747184b1c1a38bc2f97def3e0dd4f54","sha1":"5d738b9692e233300925df1c79269c2e0925bd25","sha256":"01d88a8ec467432cb56f7e64d6d4cf1f97c262710cd9ac97b1a1ef7d210dc3ae","sha512":"14e32c0acb5271f8ae32a3361f0490d4c02aace215d6e218363aebb945af1cbaf665a0b8f1493aa66dea2c24ccf202d2327a6befb6adfe440bf4ae727b6c7e28","ssdeep":"1536:HCdY51va4tzaM6mXWEiWpIDDzAYiDOoMg30c/OB94pnz:HB794mlihAdD130349z","tlshash":"4e735d843250747581e7506fe03f4306f3392d06b80a9468f5aeedd6bb79d89a272f39","first_seen":"2025-10-17T12:58:26.949273Z","last_seen":"2025-10-31T10:34:15.689694Z","times_seen":170,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":65,"dns":20,"connect":21,"send":0,"wait":41,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/ZDcwYTE1ZGRmZGVlNDIwODI4ZGMyOGI5N2VlMzUyMGM/jpeg,s(w:480,h:300)/xc/hf/hf1288/frame/original/13.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.26","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","date":"2025-10-25T20:27:27.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/ZDcwYTE1ZGRmZGVlNDIwODI4ZGMyOGI5N2VlMzUyMGM/jpeg,s(w:480,h:300)/xc/hf/hf1288/frame/original/13.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53808\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1762117124\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJFAH3un8HAAwBJRPCHgH3cbMBAA\r\nx-77-nzt-ray: af585630b5bfe0ffaf32fd682a949313\r\nx-77-cache: HIT\r\nx-77-age: 491450\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":53808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"df937afc8aaaba4c809498a0ff5d8a02","sha1":"e05068360ac1ad680d41d41c70c8d1a7fce86a1e","sha256":"a435b5c3bfbf23d6813d54efd2f2b3b6c3f095818769e5eb972fcc883f2ed12a","sha512":"72a68ad7bf1ec32000c29c8734bace9fdba9848e0c476a15ae90127c5c5128f9b7fa492fbde26bb427778dd86adef1c9f51fcb589c03f4a3c1e90bb6827bc83e","ssdeep":"1536:6L8/NpbGOSz/leKmQlzaUDFBcowhveWU3RZt:6Qn1STzaUDFQ7K","tlshash":"ae33015eb264b7c4fa7ac6383d035a7a71c7ead456ee5033b5d4351cc4d01eea8e0251","first_seen":"2025-10-25T06:39:59.774851Z","last_seen":"2025-10-25T20:28:00.602067Z","times_seen":11,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":93,"dns":53,"connect":7,"send":0,"wait":8,"receive":16,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4345b902be.9655b68ff3.com/in/multy","fqdn":"4345b902be.9655b68ff3.com","domain":"9655b68ff3.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9655b68ff3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 14:04:09 GMT","end":"Mon, 19 Jan 2026 14:04:08 GMT"},"fingerprint":{"sha1":"F1:03:21:BB:7E:7C:A4:0D:A9:0D:1E:CC:90:32:C7:30:1D:4B:76:33","sha256":"4B:B0:63:1F:19:1C:AF:FD:BD:09:CC:02:A2:30:43:0C:09:85:85:95:C2:6A:95:22:6C:6F:1A:73:F0:58:00:28"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: 4345b902be.9655b68ff3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 12827\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 20:27:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 7253\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67078,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"37a14509a6ff6097ba89f901a4e5021f","sha1":"3107dd38d5fec102fa2802e976f90f368d3de42b","sha256":"7e78b583cdfcbb141a48a6d04e8d3cc28a9de582ec8dbe6b9fd3c81a22d5836e","sha512":"692c2001f091a22200898db70e4fec337e9d99edb98b125637c8698f25bfe4dca4f909a6890703eabd33c6af7acd05f4b8f8013b67d7baae73ef3d7922b835ed","ssdeep":"1536:95c+fc+k5c+N5c+P5c+2M5L5c+Z5c+ksgtCYS17gm:95Jq5n5x5cM5L5/5D5","tlshash":"e2634b91081b4f2a4ce7621f7217f5843588de2babc08df8ebb2c56bd94536f119b94c","first_seen":"2025-10-25T20:28:00.603073Z","last_seen":"2025-10-25T20:28:00.603073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"4345b902be.9655b68ff3.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pointcontinentrtb.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.GDMd2Kc96n6QXoxJvNG_WN19g1nEb3lDR21XcfRfuwI\u0026sp=2.6999999999999996e-05","fqdn":"pointcontinentrtb.com","domain":"pointcontinentrtb.com","tld":"com"},"ip":{"addr":"136.243.25.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:31.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pointcontinentrtb.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 02:36:56 GMT","end":"Tue, 13 Jan 2026 02:36:55 GMT"},"fingerprint":{"sha1":"10:3C:6C:45:89:88:DF:E7:81:55:79:A9:7C:DC:2F:83:4A:46:54:F3","sha256":"40:9B:6D:FB:42:41:0E:7F:8E:6C:AD:17:0E:A1:BD:A6:42:50:01:8C:9B:DA:8A:6E:7E:D6:3F:B0:21:97:20:0C"}}},"request":{"raw":"GET /v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.GDMd2Kc96n6QXoxJvNG_WN19g1nEb3lDR21XcfRfuwI\u0026sp=2.6999999999999996e-05 HTTP/1.1\r\nHost: pointcontinentrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0\r\nDate: Sat, 25 Oct 2025 20:27:31 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nLocation: https://assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":65,"dns":9,"connect":24,"send":0,"wait":25,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/favicon.ico","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1053\r\nConnection: keep-alive\r\nLast-Modified: Thu, 25 Feb 2016 23:06:28 GMT\r\nETag: \"41d-52ca03b7d2500\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1053,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"GIF image data, version 89a, 16 x 16","md5":"bf6aefc5636969342f16f6fa943e7bb7","sha1":"1f673fed30d7a3491d1cb12a8d7fddc3c93ee103","sha256":"2d3a866cbcf010e1be5ec65e827da83a43fd4e373307ebad3b60b997556e3aa7","sha512":"b3c31c9903c9b708daecf9f4eff02c3c2b947fc4e434909581d77b0b73f6776bbd55fcda1b550379468634da737d66aa053b9c828109a27d0708a91366c77317","ssdeep":"","tlshash":"dd11920b9202f566ca380fb2019b49487bf700f873624774306d020b072b3fc1db6a8d","first_seen":"2025-10-25T20:28:00.605259Z","last_seen":"2025-10-25T20:28:00.605259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"13.248.148.254","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:23.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.multstorage.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 02:54:50 GMT","end":"Mon, 22 Dec 2025 02:54:49 GMT"},"fingerprint":{"sha1":"A7:F0:92:B0:60:17:0F:89:16:0D:51:27:DB:FE:C6:A0:D9:39:15:0F","sha256":"D8:BB:7C:8D:91:E4:6A:95:F9:86:5F:70:CE:DE:E9:AA:14:7C:0B:84:56:FC:96:09:E6:62:FD:5E:68:8E:E2:11"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 410 Gone\r\nalt-svc: h3=\":50944\"; ma=2592000\r\nserver: Caddy\r\ncontent-length: 0\r\ndate: Sat, 25 Oct 2025 20:27:24 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"410","status_text":"Gone","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":65,"dns":3,"connect":1,"send":0,"wait":21,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"storage.multstorage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 08:32:39 GMT","end":"Tue, 02 Dec 2025 08:32:38 GMT"},"fingerprint":{"sha1":"60:0F:5E:BC:74:09:D9:0B:43:F4:67:D4:E5:3C:8D:6B:66:34:81:96","sha256":"91:ED:2F:10:60:88:EF:A8:60:89:46:1D:A0:EE:FE:F2:2B:45:01:4E:99:DB:7E:CD:D5:3E:A9:E4:08:26:B6:40"}}},"request":{"raw":"GET /npc/sdk/wpu/npush.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 23 Oct 2025 08:52:32 GMT\r\netag: W/\"68f9ecd0-3c6ec\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 20:32:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247532,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"830105b76b7c59a0cb3a166d5515ea0e","sha1":"5d8fb2a3a41ad81ad56b06b6e6c2487593b9b728","sha256":"124a3ef9207187dfe609d1de18efa33b2e74460d3bd84b16579ef23937359702","sha512":"d034334fa538dbbc6811053953d8ff5d59212969c324bea5e4854681e3545a2047f0fab45b0de633afbe92f7ca014de79c48d68b22169e27aaa0001d07c89fd3","ssdeep":"3072:n4Z6mTX7Q5Q7Q7Xsvr8LDkpiBG3n5Sa+MFmswVYVC2SQpBUL:4Ym45Q7ykdV+AWEpBK","tlshash":"7b346dd1369078b00593c0afd4770201b2382609b52eb56cb6bddee66586dce237bf79","first_seen":"2025-10-23T10:57:14.860136Z","last_seen":"2025-10-27T08:33:06.793903Z","times_seen":82,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":61,"dns":14,"connect":21,"send":0,"wait":41,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/retro/250-13.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/retro/250-13.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 88050\r\nLast-Modified: Sun, 13 Oct 2024 09:25:24 GMT\r\nConnection: keep-alive\r\nETag: \"670b9204-157f2\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88050,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, components 3","md5":"383f20ba7d297d725603a2c32b32e640","sha1":"878874605b3d43ef4d285fccaa2ec4338fc3e5d5","sha256":"cfbc612d5bfcbc7130d4e93d7db40791527e4b7e33a5ec86310ec629590174ab","sha512":"35b3cacd1ddee18481c286bcb46b6583c2dac648e0e73a81f88deffb2a6757c87f9496c5635b902bfeab4eddd6b27949e6486835134102be08b649cccae6ede5","ssdeep":"1536:ML53nAtqE3lX9SVIXAH65fTDOJ82dZJ1lLMbbTMdQfSUzQ37I/3:MF3n4FNB+0fmm4/eHm8L8rI/3","tlshash":"ca8302e16c71efe0769170b5ac301f99805afee650cdea1111a21c2d7ac7e89d9f270b","first_seen":"2025-10-25T20:28:00.608169Z","last_seen":"2025-10-25T20:28:00.608169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/728x90.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/728x90.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 64896\r\nLast-Modified: Fri, 19 Sep 2025 17:19:17 GMT\r\nConnection: keep-alive\r\nETag: \"68cd9095-fd80\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64896,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 728x90, components 3","md5":"dd104a229902545e150e0a9e30e02304","sha1":"e5f61d687b62cf6958db8ab4621c83448a592f30","sha256":"5850f9e6fd9024d0b186b5f1458d9840f49adb6094509763c85d1ca58fda6704","sha512":"e4282e969770aeee64b28f7f2e5097fa465f86d5fe98447b8a567c974ca008e45f10e0c5ed0291d98626e63a28433142619421b1fc9534338667108877c54372","ssdeep":"1536:zL9w5VjO7Ba5t3ph0OivIrKvvWOU2kQPCjMQDOW0faqpF2CHPuXH0br:Fw5Vph0OTOU2kQqjPDAaqfTvk8r","tlshash":"b5530160a5b21d17e8bc2ad08196ad7e031b97341203144d77a675eec9fac277bfc326","first_seen":"2025-10-25T20:28:00.610317Z","last_seen":"2025-10-25T20:28:00.610317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":87,"dns":1,"connect":26,"send":0,"wait":55,"receive":26,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/contents/other/player/13.png","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /contents/other/player/13.png HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 2289\r\nLast-Modified: Sat, 19 Sep 2020 19:36:02 GMT\r\nConnection: keep-alive\r\nETag: \"5f665da2-8f1\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 20, 8-bit/color RGBA, non-interlaced","md5":"70d3e1dac98dff114d95d07df354d433","sha1":"b3273dfd114f7badcb66d8fd6cd40b819c9ad0ca","sha256":"d14b352635df6c51a783776be825a041d3bfa203afdc559fd179383f00164fc1","sha512":"56197da5efefe6684e285d01d5f7c72410d08051a9bc71dc70c42ec9f5e473c9771a293f8c28fb389708f01d4a87d39efbbea277338d0d2612b37928d7e72716","ssdeep":"","tlshash":"6f414b7783e9ff3cb3e2124c3c7425004102b885b3022b6b0cb24a2ea382f1949f4ac6","first_seen":"2025-10-25T20:28:00.612604Z","last_seen":"2025-10-25T20:28:00.612604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","date":"2025-10-25T20:27:26.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /sdk/v1/b.b.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tsyndicate.com/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOHLkkIGDRhcWIsYU3BLjoYgyE2PcsBGjRgwYNGjY6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 21 May 2025 11:15:02 GMT\r\netag: W/\"682db5b6-17ca\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 27 Oct 2025 20:27:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9893\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6090,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6010)","md5":"f7440d7dd606254595018cd43d0eea31","sha1":"bf2dd3f43543fcd16fe4d14924e13a01cbd883ad","sha256":"7b1d64c6531fe880b368720c4d3c4ae81dba5120a0bebbad4e23157f59bdc109","sha512":"c592cf5f544d14c50234bdbb2cfcd1ed6827fb71900ded6fb6ac22337b9bba5ebf583427212e468d5e3bc9e373d6b2550ac816bb4cf3c07530440f743020050a","ssdeep":"96:pop2aYdwqNDOX/k++OIWtJxtomlGDWtVA7mh6BjFY7cagT4iMwf:p4YuqNDOvkpOIWtlomlrhajKQvpXf","tlshash":"33c1e8bc7259e23940d91447526b971877f20065bf268810d06ecc49397cfabc92bcde","first_seen":"2025-06-01T08:15:20.826297Z","last_seen":"2025-12-10T15:42:12.100863Z","times_seen":1404,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":76,"dns":27,"connect":19,"send":0,"wait":19,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=recaptchaOnLoad\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:29 GMT","end":"Wed, 24 Dec 2025 14:35:28 GMT"},"fingerprint":{"sha1":"3A:25:85:17:1F:EC:DB:36:25:21:AC:60:1E:FE:19:41:06:4D:BB:61","sha256":"12:E2:B9:FD:0A:C2:10:A5:CD:15:ED:F1:44:A2:48:77:21:A6:08:E1:BE:65:2A:06:2D:F3:8C:D3:95:D8:82:A5"}}},"request":{"raw":"GET /recaptcha/api.js?onload=recaptchaOnLoad\u0026render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 25 Oct 2025 20:27:21 GMT\r\ndate: Sat, 25 Oct 2025 20:27:21 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1077,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1077), with no line terminators","md5":"4ebaf7df8369c73055900641f2a37e72","sha1":"d65fa46d8e505da7484775808e9a7a179d82f0da","sha256":"09d4aa58ab522eb1fdb945cf7a4c5fbe0a77f2d2c68ab72069ce3ff03fbc71c9","sha512":"4b883f714e003dd4b3accf09ef0b31841d5a569c90d7416ea980f8cee9e05c62d4f4be99b736e16354ff19ffffc30e70a7155594c471deea59444e460d49e988","ssdeep":"","tlshash":"ec11f0731a14e0390b720ad1e2ffdab1e491742df11885d8a616dad82e79cc7ce14449","first_seen":"2025-10-25T20:28:00.61535Z","last_seen":"2025-10-28T01:12:25.446249Z","times_seen":5,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":18,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/cccc923a1b774905a7497d3eb0e95f9d/vast?extid={extid}","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cleansasve.com/adn2.php?id=1244\u0026sitea=bosmusas","date":"2025-10-25T20:27:26.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /do2/cccc923a1b774905a7497d3eb0e95f9d/vast?extid={extid} HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cleansasve.com/\r\nOrigin: https://cleansasve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 25 Oct 2025 20:27:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 28\r\naccess-control-allow-origin: https://cleansasve.com\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store, no-transform, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: *\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"128dd87abbc8911743f1f48ef29affe0","sha1":"829973d3debabd9888cc28bc871c40a0c59ad900","sha256":"d88852c362edb5f82582a5e94a052c81524c2f3fe7cb31fca9b125e2c54b8466","sha512":"3aa4c7239adcfe1ed775e52839c6349b24ffafcf57c70bcb23966faa5506f77e2cd6fbcb6341877b54efda0727dbdff0d36a8f299861c1547b4519746aa86268","ssdeep":"","tlshash":"ca8000080a20a222022a8008220a02820028a8b3830032f0e082088c0a08a8888e282a","first_seen":"2023-04-05T23:31:32Z","last_seen":"2026-03-17T16:29:48.418543Z","times_seen":366,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":108,"dns":4,"connect":39,"send":0,"wait":26,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1256/?remote_uid=3062215412326782000","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:10 GMT","end":"Fri, 28 Nov 2025 23:22:09 GMT"},"fingerprint":{"sha1":"DF:8A:AE:8B:ED:44:80:4D:3B:EB:26:59:E2:5F:93:03:BC:7D:31:F4","sha256":"D9:6C:DC:4A:1E:9E:64:3A:2B:71:51:9B:CD:A8:75:44:2E:9A:DC:B5:A7:C8:35:79:8A:0E:0C:05:6E:D6:AD:FB"}}},"request":{"raw":"GET /match/1256/?remote_uid=3062215412326782000 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: jcsuuid=ZBXNkcyWgz6qFPWseOMK\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nset-cookie: jcsuuid=ZBXNkcyWgz6qFPWseOMK; expires=Sun, 25 Oct 2026 20:27:25 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-04T06:47:40.21562Z","times_seen":6194,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/foot/123.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/foot/123.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 89608\r\nLast-Modified: Sat, 06 Sep 2025 09:51:05 GMT\r\nConnection: keep-alive\r\nETag: \"68bc0409-15e08\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 300x250, components 3","md5":"6b039444107f35d027245ef3187e4b4f","sha1":"b62ce2147cf48e43b158e150ff7b7b7c50375280","sha256":"9f55e1ed94583399021bf59bbf003aac7e72cbea8c11aee300bfe35cb0a57755","sha512":"2e69f47282bd3b6589f5a00fd4a00f1b3867b434a38f4287f841a0f7731302230729384c169251ec23385dfcd31186789c3460a838c69d349a3dc6c90cc3f3c5","ssdeep":"1536:IHcD1AMaB6jdlbQxdpepLdgxLkl1EPRerwQ7TED9/gyPNNsWyOkOOP2qns0Fdue9:IO7a4nbQxdtLT4rW94y1NsWpjqsiuedb","tlshash":"239302bab830e1d1e6fa4f71441f1675ab2be2353182619331de8e78fd484e95844bec","first_seen":"2025-10-25T20:28:00.619015Z","last_seen":"2025-10-25T20:28:00.619015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/js/main.min.js?v=6.0","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /js/main.min.js?v=6.0 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Tue, 20 Nov 2018 14:53:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5bf42002-3fbfb\"\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261115,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32089), with CRLF line terminators","md5":"f1350eda917471dbb1c97c04f0918287","sha1":"2a512de74e77d5d4b27a74c6afc2f4914cf95f21","sha256":"42302ada288537f3c3f2b5269aa875b017bc5a5aae03a2670fa21cd3b365c274","sha512":"27119795a1ce629736421cb82884e4b13ddb3d3348ce53f819a3d5de5ef629098cbfbf3388aa4680d0cc254f0af938d5b526d79505b37508fb63f40513c7c533","ssdeep":"3072:pdkWgoBecZRQzmW42qRDhhQdGXrY+F5Q5OEiVRSXxPcHrAiaZobBjeKanYbsMD:fBdZGC/RDhhpXAiVgqrAcVhangZ","tlshash":"dc442ac87692b03242bb31b7506f500a73325a7aa90d8594f16cd8f46dbcd896237f7e","first_seen":"2023-05-10T08:08:24Z","last_seen":"2026-03-20T17:54:45.008698Z","times_seen":19,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":67,"dns":1,"connect":23,"send":0,"wait":59,"receive":27,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/search.svg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/search.svg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/styles/all-responsive-metal.css?v=6.0\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3139\r\nLast-Modified: Tue, 20 Nov 2018 14:53:05 GMT\r\nConnection: keep-alive\r\nETag: \"5bf41fd1-c43\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3139,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c62651bf2decf3a3382df574746a9ffc","sha1":"800ec9e07fad5adc7b880479cace8af702f59c18","sha256":"69d77c01823b80be5ef5e5ac9a74cf0fcd2ebfe33f70be009e3ed22393c39899","sha512":"95a459e70b2b7bc5954443917ab2b43f323173a652a194a34f4f4959e6fd862ae37673d24d64deb186e7b711213391662ad974e331226887d3df2f9c8d87ed44","ssdeep":"","tlshash":"805172bb0a65219ba284a330c6ec16826775d11370900c58f34c5ef98f007b31cfee78","first_seen":"2023-04-21T02:01:12Z","last_seen":"2026-04-03T18:20:02.211673Z","times_seen":1888,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/13075?version_name=c\u0026domain=www.smaxim.com.ru","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 02:32:20 GMT","end":"Thu, 18 Dec 2025 02:32:19 GMT"},"fingerprint":{"sha1":"38:85:B2:05:59:7D:15:16:9D:87:1B:83:46:10:68:2E:DC:7C:7A:D1","sha256":"FE:22:4E:C6:6F:85:46:CA:64:38:8F:48:77:17:E8:29:0E:7C:14:27:20:EA:A9:7B:CB:5E:49:87:A6:B0:60:2F"}}},"request":{"raw":"GET /tags/13075?version_name=c\u0026domain=www.smaxim.com.ru HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:23 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7063,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0cfad4a22606f24f6a9bbc78eafc6a4a","sha1":"b39b660468f8837078d9ca2452675dfa819cbffd","sha256":"9350abbc8ce6f2645f67ab67813ab710c4995117a1231d91f81ee84a3508502f","sha512":"9a55c1fb216caaa6f77d7c244c343742d4e5ae86ce9464a188cc3f1004beb01ecf664a111d4ad11f5632c957b821ff78615f8225bd746e40b46e35df928c0aae","ssdeep":"192:ShztmYbxksAbKiD0mR/TMBWKHT5+KWHU3L6vWzU3L6+/1dkjUU+CHYMjUUIyL:Sz7bxksAbKiDv/4BWKHT5+zHU3L6+zUM","tlshash":"a5e1a8b89e6888f7c1e406cae8853f49516e2167b0c8785ef4bc8d7c02df5a51b6721f","first_seen":"2025-10-25T20:28:00.622811Z","last_seen":"2025-10-25T20:28:00.622811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4516,"timings":{"blocked":1942,"dns":23,"connect":19,"send":0,"wait":624,"receive":0,"ssl":1903},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak","date":"2025-10-25T20:27:23.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 351872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 17:53:58 GMT\r\nexpires: Tue, 20 Oct 2026 17:53:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 441205\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825565,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-03-21T15:49:57.335649Z","times_seen":18193,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":29,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=186079","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:24.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"POST /fp?tag_id=186079 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sat, 25 Oct 2025 20:27:24 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://www.smaxim.com.ru\r\nSet-Cookie: id=17554220920890739368; Expires=Sun, 25 Oct 2026 20:27:24 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-04T06:30:59.652122Z","times_seen":5979,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":2,"connect":24,"send":0,"wait":25,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1411/?remote_uid=3062215412326782139","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:10 GMT","end":"Fri, 28 Nov 2025 23:22:09 GMT"},"fingerprint":{"sha1":"DF:8A:AE:8B:ED:44:80:4D:3B:EB:26:59:E2:5F:93:03:BC:7D:31:F4","sha256":"D9:6C:DC:4A:1E:9E:64:3A:2B:71:51:9B:CD:A8:75:44:2E:9A:DC:B5:A7:C8:35:79:8A:0E:0C:05:6E:D6:AD:FB"}}},"request":{"raw":"GET /match/1411/?remote_uid=3062215412326782139 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nset-cookie: jcsuuid=ZBXNkcyWgz6qFPWseOMK; expires=Sun, 25 Oct 2026 20:27:25 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-04T06:47:40.21562Z","times_seen":6194,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":46,"dns":3,"connect":20,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.smaxim.com.ru/\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbbtr.com/get/?go=1\u0026data=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","fqdn":"rtbbtr.com","domain":"rtbbtr.com","tld":"com"},"ip":{"addr":"195.201.208.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 11:40:25 GMT","end":"Wed, 07 Jan 2026 11:40:24 GMT"},"fingerprint":{"sha1":"4C:2F:3B:EF:F4:3B:F0:06:66:A4:CC:D0:2F:52:5E:96:B4:DA:FD:DF","sha256":"6F:15:D0:A4:DD:A4:6F:A6:5F:28:DB:5F:E9:A1:C0:15:5D:53:34:91:A8:84:99:BA:14:33:3D:36:3B:0C:BD:CA"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: rtbbtr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 2268\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16616,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2974)","md5":"99cad862f40ebd720901af6643fece0f","sha1":"db87896a7d8ad40a1d0a30a91023b1a468c081d1","sha256":"c8a3ba69789e583988ebd6c327adc0d4c19b22359157a0bed2007c9430cb8e44","sha512":"6db54796fcee9c7940f0d9bd37378d4cd7e13d9c7f3e85e43007fd6f2984d36e0e7ea7e798b1530ee22e058e89631ce07e1d68bdd05ed330ff4580b04054e63c","ssdeep":"192:ZNEt7ZvK7ofGqcLcJzK7ofzcQK7ofzcnK7ofzcmK7ofzcVW:Zk7ZHeq+Ardr+rJrR","tlshash":"8e72ece88795cc28cb437594a460f693e56b6f03ddb84be175a875209abc31f804b7cd","first_seen":"2025-10-25T20:28:00.62626Z","last_seen":"2025-10-25T20:28:00.62626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":67,"dns":4,"connect":25,"send":0,"wait":143,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cleansasve.com/abal.php?id=324","fqdn":"cleansasve.com","domain":"cleansasve.com","tld":"com"},"ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cleansasve.com/aba.php?id=4564","date":"2025-10-25T20:27:26.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cleansasve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 14:32:14 GMT","end":"Sun, 28 Dec 2025 15:30:57 GMT"},"fingerprint":{"sha1":"71:C0:F3:F2:3A:D0:DF:61:16:E0:BE:6C:9F:E8:57:0D:B6:CD:36:5F","sha256":"34:A0:F0:88:17:B6:D4:4F:FB:2B:73:31:24:2B:D2:F1:C0:53:0B:23:26:5A:E1:D1:CB:66:98:B0:F7:2A:9F:D1"}}},"request":{"raw":"GET /abal.php?id=324 HTTP/1.1\r\nHost: cleansasve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cleansasve.com/aba.php?id=4564\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZBzWP457l8k1neoJJxMwqjP5cb0vNyOu8BCmtNQkWVVMtq2gaVxVde8IH2lvdXbCMdsv%2F28gy%2FuM2C39yl9%2FjKKPBSTC%2FnF8efvv%2B%2Fi\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 99447461dab635a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":925,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9a10846fb15ebdf57f3f89e751b2500d","sha1":"6d874e8f8f205229fbe21784433e6888ccf299f8","sha256":"bf0b7d68847fc80b7945292c77c734ea8a01202d0cfb15d54c0cb8ac88d1e0fb","sha512":"3ea538290373d27054e7ac593e3bc98a0430c5881f34a64c85ada7564c07d7f921b16cbbdfe8164b0e22ac62f25074c5f923b50ca8ee91254586182c249446d9","ssdeep":"","tlshash":"f21163eb487f122c0252a01e32da001dfdda80073426ef627b8da3413f4432d58a3bdd","first_seen":"2025-10-13T14:06:18.493217Z","last_seen":"2026-03-31T01:30:42.378869Z","times_seen":85,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=df52d069-3174-44ac-ac6d-77c577e6ca0a","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"195.201.208.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 11:40:25 GMT","end":"Wed, 07 Jan 2026 11:40:24 GMT"},"fingerprint":{"sha1":"4C:2F:3B:EF:F4:3B:F0:06:66:A4:CC:D0:2F:52:5E:96:B4:DA:FD:DF","sha256":"6F:15:D0:A4:DD:A4:6F:A6:5F:28:DB:5F:E9:A1:C0:15:5D:53:34:91:A8:84:99:BA:14:33:3D:36:3B:0C:BD:CA"}}},"request":{"raw":"GET /in/dip?event_id=df52d069-3174-44ac-ac6d-77c577e6ca0a HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":67,"dns":4,"connect":26,"send":0,"wait":28,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S270863799:1761424050470633\u0026ifkv=ARESoU32N0aX2cZjMpNvGu-azoT9Pbn58VqMOOe-4NrHbAX9NuQogWIext9B2-T-Hl_EZ-ZHCIYA7A","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:25 GMT","end":"Wed, 24 Dec 2025 14:32:24 GMT"},"fingerprint":{"sha1":"3A:78:B2:96:D0:CD:A5:D3:08:6F:80:16:15:5C:10:CC:41:FE:1B:12","sha256":"D2:92:7D:D4:5D:78:BC:69:FC:32:73:D8:16:EF:3A:37:3A:0E:0C:2D:50:4F:FE:51:7E:F7:EA:93:56:B9:8C:1D"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S270863799:1761424050470633\u0026ifkv=ARESoU32N0aX2cZjMpNvGu-azoT9Pbn58VqMOOe-4NrHbAX9NuQogWIext9B2-T-Hl_EZ-ZHCIYA7A HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:CLRMz2PIkiPoN4EeCS_-P64BmTZ2SQ:bVTu-0aSGDQaaMCH;Path=/;Expires=Mon, 25-Oct-2027 20:27:30 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 20:27:30 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S270863799%3A1761424050470633\u0026hl=en\u0026ifkv=ARESoU20ZHVOetTpDQupWQSVxHbUM6JH1L424R9I3xoOk1IJNQQ1oLdfqvUpAyJDusTTrvc2Cl-Dhw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-aAhIuVje4bTN_-dA_ASY6Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 414\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh-wgt.com/api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026utmCampaign=ai.mxY","fqdn":"fh-wgt.com","domain":"fh-wgt.com","tld":"com"},"ip":{"addr":"104.21.63.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","date":"2025-10-25T20:27:27.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh-wgt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:34:46 GMT","end":"Mon, 12 Jan 2026 08:31:45 GMT"},"fingerprint":{"sha1":"1F:39:26:5D:89:FD:89:58:E9:FE:18:68:D6:A0:DC:A5:5E:BE:2B:21","sha256":"FA:B4:8E:E6:FC:1A:A4:6C:F7:C4:C9:E7:32:A9:4C:73:00:BB:31:5E:5A:68:EF:BC:5A:34:37:34:79:B4:0E:B3"}}},"request":{"raw":"GET /api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026utmCampaign=ai.mxY HTTP/1.1\r\nHost: fh-wgt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn-fc.com/\r\nOrigin: https://cdn-fc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:27 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://cdn-fc.com\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-headers: Cache-Control,Content-Language,Content-Type,Expires,Last-Modified,Pragma,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,X-Referrer,X-URL,x-stats-uid,x-guid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\nx-robots-tag: googlebot:noindex, indexifembedded\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G363LlmD2iqfs4zBmCoPLp9C%2FulUPKKOO3CIhgRQPyS9VcAVjShjmnUoifLgeQevZPo24PoDJppeCrTLzOAkfgul4Hpo3o%2BU\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 994474669b285694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3787,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e5c49cafb98f560e4d766f4bccf875db","sha1":"e90507f13a64670850ca8ae137849ceb26fd1dd0","sha256":"fd57687cc5d63ff55625a7e1bd727a6ba0f03ddaefbc0e1975b54dc774b4d827","sha512":"c3e8af537379ad39245a9697389c7ff9229e935fb7ab1cc6218aae51525fb8a2a6d661fe86a359e216e99256abe19b88039a7d1ce553a5ff01a24d30f4e97f97","ssdeep":"","tlshash":"967133e71f8c5b170b5523da854bf80ca962184d69d0ffc2d971cecd0238da3b129299","first_seen":"2025-10-25T20:28:00.628847Z","last_seen":"2025-10-25T20:28:00.628847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":27,"dns":4,"connect":1,"send":0,"wait":55,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MjUwYWJjNWY5NmUyZmI1MzZlOTMzY2U5Y2MzYjM2OTE/jpeg,s(w:480,h:300)/video/xf/xfWehH/screen/1-7w5.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.26","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","date":"2025-10-25T20:27:27.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/MjUwYWJjNWY5NmUyZmI1MzZlOTMzY2U5Y2MzYjM2OTE/jpeg,s(w:480,h:300)/video/xf/xfWehH/screen/1-7w5.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45761\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1762325745\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJFAH3NjgDAAwBJRPCDQH3CMwCAA\r\nx-77-nzt-ray: af585630b5bfe0ffaf32fd68bebcfb13\r\nx-77-cache: HIT\r\nx-77-age: 210998\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45761,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"b7132f359c78f8aa01963041eb176490","sha1":"0d807b1d0ef66c938b01e0d9676eba336c9cb30a","sha256":"0a93fb11a89562d8df5bfb5f12a9201e4922c48e8755c6831ddb351884521096","sha512":"4b4cd749f2ced4c00d48406601b27c3e69a9e7bc9cbdbf1c4324daad285d7e3ad332761a4c01ac70a60094a6481327f9ea3f0c53a32846afa083c23073109214","ssdeep":"768:WJqgx3evOFE658KZn9jMbK1QcpgJ8fwf+0NhpdkBMNYo+7KgBM7C6zQiag8E0cO3:W5ZuOKIVt9jW8fpgJ0wmQSxYj7u1E0t3","tlshash":"af23f1f097468589f7fa1a768345ae974f8ce970b20e63352bd5b9c8899c94f8c9840c","first_seen":"2025-10-25T06:39:59.597274Z","last_seen":"2025-10-28T01:35:53.185396Z","times_seen":17,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":96,"dns":51,"connect":7,"send":0,"wait":19,"receive":9,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=775cd7ad-63b8-4de7-b3bf-66e097991057\u0026subid=2025691240\u0026sid=626324297\u0026spot_id=11186\u0026created_at=2025-10-25\u0026timezone=0\u0026ver=8.242.10\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=775cd7ad-63b8-4de7-b3bf-66e097991057\u0026subid=2025691240\u0026sid=626324297\u0026spot_id=11186\u0026created_at=2025-10-25\u0026timezone=0\u0026ver=8.242.10\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 20:27:30 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=186079","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:23.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"OPTIONS /fp?tag_id=186079 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.smaxim.com.ru/\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 25 Oct 2025 20:27:24 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://www.smaxim.com.ru\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":79,"dns":0,"connect":26,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7ea02e2ab2.e55a2001b9.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDcxNTc0MDg2NzcxMjc2NDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjEzMDc1LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjMuODUsImlzX3YyIjoxLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"7ea02e2ab2.e55a2001b9.com","domain":"e55a2001b9.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7ea02e2ab2.e55a2001b9.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:47:59 GMT","end":"Tue, 20 Jan 2026 02:47:58 GMT"},"fingerprint":{"sha1":"EF:D6:D4:8A:FB:5C:1A:6C:F8:E1:33:0B:D0:3C:7C:93:9B:C1:96:A8","sha256":"35:B1:DE:D4:49:9D:85:82:66:DE:FF:49:59:1F:B0:9C:12:01:9A:2F:59:DB:77:C7:87:0D:88:C0:75:87:C8:D2"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDcxNTc0MDg2NzcxMjc2NDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjEzMDc1LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjMuODUsImlzX3YyIjoxLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: 7ea02e2ab2.e55a2001b9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7ea02e2ab2.e55a2001b9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/2205/?remote_uid=3062215412326782139","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:10 GMT","end":"Fri, 28 Nov 2025 23:22:09 GMT"},"fingerprint":{"sha1":"DF:8A:AE:8B:ED:44:80:4D:3B:EB:26:59:E2:5F:93:03:BC:7D:31:F4","sha256":"D9:6C:DC:4A:1E:9E:64:3A:2B:71:51:9B:CD:A8:75:44:2E:9A:DC:B5:A7:C8:35:79:8A:0E:0C:05:6E:D6:AD:FB"}}},"request":{"raw":"GET /match/2205/?remote_uid=3062215412326782139 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: jcsuuid=ZBXNkcyWgz6qFPWseOMK\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nset-cookie: jcsuuid=ZBXNkcyWgz6qFPWseOMK; expires=Sun, 25 Oct 2026 20:27:25 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-04T06:47:40.21562Z","times_seen":6194,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XICBPjRhkxMGy0iDGGTJgWNG7MgNFCTBgzJ2fUKFPDBowcNmiagSHiYZg6YzLiEDMjzA0bNHC0GJNDjBmUN8iMaRGGRsoWOcbQYKpyhlUyYnpCJGOH4owZN2DIeAinTlgdMm7cyJGDhk84cBYexSEDx8M5cCbqoJFjRgwYNfyKGNMmL0MYNGTmgOGTjBmKD8W4cbMwMd2-dkW0cYOR4QwZMiiLgDO6dEcZNSqKqBMjIxo6dODM0fHiRUk3LcyMcTHmTRvfcgrSSWOnzJwXddwwRzgnDJsXbsIsb_7ix5w0esr0WAkDD2wYXOrAUGujDp02X8aEaRwmzRk3Peq7aIMnS_r1MrT3XnxvuEFHGQb2MEcdZ5zh3IFkfHFHGmQ4SMd_7K1RRh53vCEHGXP0gGGAcCRnRxpl3PFFG28c1AMabzQnx4g2zBFDD0ikQYUTZZhhAxVT5HGfHnY08UQVdejhBBZNHIHGDEjkcUMcONAhhBtlCFEDGlMEEUUYUcyABhU2iBFHHXE4cYUcLSDxhRw0sKFHDkLIcQcbTdxxRxJfUKFGHEvUAQUaTxB5xBFJkBEFGTcIYUOLUUxhQxttCEHFEkVYEUcaV2gRRxFlWJFEFXo0EcQXZ1SRBBFSVJGGWGQYl9EYbBTkRnVzNEecrA_JJ9gWhnWR2WU6wODCeg6JIIcdjtWgWh11vKoDRF7dgIMZM7VQwwzYamsGWljV9dRQB-VglEs24DCDWGk4JkIOMbgwmQs0yOBCQzSIJccX7WYEr7zG1ntvDfk-VEcYGTXxhh5psMFGGC_UcCwIKFyRhhux3jEHCE5QAcJhx-4AgsVuICUyHiaDsKxpNBybAghHlDHGGm-8kNphMBwWAwhGpJGcGW_g8UIMXh0r1hhBTevEE2J5GF_SIiwtFhtQF-EErGXY8WYZbFBUg1zqprveQ3LctxBsONzw0EFaiyHHQjgoxvaKLZ6Ngw2ykSHHGwvN8NAbCg3G1t545NEZ2V-UGLThOiT7s2246cabb7WGcWsYuZax63FizbFsRnvToZ2HLUSXBh0j2eACGTI07XlZOsyQQw2praSualJldNAXrIv1HkVHxVAvDZDZYFEbrTMU_PDF21BDsgZtDdgX2gGPN_M0GC9C1tTXKgcdgQNbkVfCQiSGYCIcBFMdbEzEFtULqTZGafKjsdAWIoil_0P758____4LYP_014U-KCAg\u0026s=e29d8993b13053ae6574a21d982440646950f5acf4af10b9ad52d4731e6e53361761424046\u0026w=t\u0026r=1\u0026d=223\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.101.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","date":"2025-10-25T20:27:27.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XICBPjRhkxMGy0iDGGTJgWNG7MgNFCTBgzJ2fUKFPDBowcNmiagSHiYZg6YzLiEDMjzA0bNHC0GJNDjBmUN8iMaRGGRsoWOcbQYKpyhlUyYnpCJGOH4owZN2DIeAinTlgdMm7cyJGDhk84cBYexSEDx8M5cCbqoJFjRgwYNfyKGNMmL0MYNGTmgOGTjBmKD8W4cbMwMd2-dkW0cYOR4QwZMiiLgDO6dEcZNSqKqBMjIxo6dODM0fHiRUk3LcyMcTHmTRvfcgrSSWOnzJwXddwwRzgnDJsXbsIsb_7ix5w0esr0WAkDD2wYXOrAUGujDp02X8aEaRwmzRk3Peq7aIMnS_r1MrT3XnxvuEFHGQb2MEcdZ5zh3IFkfHFHGmQ4SMd_7K1RRh53vCEHGXP0gGGAcCRnRxpl3PFFG28c1AMabzQnx4g2zBFDD0ikQYUTZZhhAxVT5HGfHnY08UQVdejhBBZNHIHGDEjkcUMcONAhhBtlCFEDGlMEEUUYUcyABhU2iBFHHXE4cYUcLSDxhRw0sKFHDkLIcQcbTdxxRxJfUKFGHEvUAQUaTxB5xBFJkBEFGTcIYUOLUUxhQxttCEHFEkVYEUcaV2gRRxFlWJFEFXo0EcQXZ1SRBBFSVJGGWGQYl9EYbBTkRnVzNEecrA_JJ9gWhnWR2WU6wODCeg6JIIcdjtWgWh11vKoDRF7dgIMZM7VQwwzYamsGWljV9dRQB-VglEs24DCDWGk4JkIOMbgwmQs0yOBCQzSIJccX7WYEr7zG1ntvDfk-VEcYGTXxhh5psMFGGC_UcCwIKFyRhhux3jEHCE5QAcJhx-4AgsVuICUyHiaDsKxpNBybAghHlDHGGm-8kNphMBwWAwhGpJGcGW_g8UIMXh0r1hhBTevEE2J5GF_SIiwtFhtQF-EErGXY8WYZbFBUg1zqprveQ3LctxBsONzw0EFaiyHHQjgoxvaKLZ6Ngw2ykSHHGwvN8NAbCg3G1t545NEZ2V-UGLThOiT7s2246cabb7WGcWsYuZax63FizbFsRnvToZ2HLUSXBh0j2eACGTI07XlZOsyQQw2praSualJldNAXrIv1HkVHxVAvDZDZYFEbrTMU_PDF21BDsgZtDdgX2gGPN_M0GC9C1tTXKgcdgQNbkVfCQiSGYCIcBFMdbEzEFtULqTZGafKjsdAWIoil_0P758____4LYP_014U-KCAg\u0026s=e29d8993b13053ae6574a21d982440646950f5acf4af10b9ad52d4731e6e53361761424046\u0026w=t\u0026r=1\u0026d=223\u0026priv=true HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tsyndicate.com/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOHLkkIGDRhcWIsYU3BLjoYgyE2PcsBGjRgwYNGjY6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Oct 2025 20:27:27 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-04T02:11:24.840967Z","times_seen":6723,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/fonts/icomoon.ttf?nddhpi","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/fonts/icomoon.ttf?nddhpi HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/styles/all-responsive-metal.css?v=6.0\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: application/font-sfnt\r\nContent-Length: 9568\r\nConnection: keep-alive\r\nLast-Modified: Tue, 20 Nov 2018 14:53:42 GMT\r\nETag: \"2560-57b19ccbb7180\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9568,"size_decoded":0,"mime_type":"application/font-sfnt","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"21263355cf739547055f2da9fd6759bd","sha1":"762384d3af0de2d2bd630855b3f388326038ba92","sha256":"2674595ece6d29bba3197719873b35d8e2893e9eb3a0271bad0ea717e9b3d405","sha512":"4866f02e65742a717fdd9e154d6993be6bdce535383a48007da843edb03d31ab17e15b9383f8a2c82c07a058e3778d49aff6430868f8e951852b33ce4ee580e1","ssdeep":"192:2v65PU01LYPoAQkLUJ8yLoGQlDudvV51IBkOfdhNlNvhKezV3pz3H3lPV2K:f5IPoAfIyCQOvvWPFhN/sezV3pz3H3d5","tlshash":"1f122c02db9ecfe9d992cab49952c120dee0dc06d63ed79aa0415c86f4198ec8d3cb19","first_seen":"2023-04-07T07:56:54Z","last_seen":"2026-04-04T06:55:58.39776Z","times_seen":2937,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 03:32:10 GMT","end":"Mon, 01 Dec 2025 03:32:09 GMT"},"fingerprint":{"sha1":"A8:B8:5C:A8:67:08:FB:6F:5B:FE:20:D6:BB:7A:04:B0:B2:1A:BE:F7","sha256":"03:91:48:19:1B:C5:3E:CF:59:DE:C7:39:A3:C0:C3:E0:BC:41:15:48:FB:42:AB:77:8C:5B:FF:37:FE:1F:3C:54"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 10:58:05 GMT\r\netag: W/\"68f615bd-24858\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 20:32:21 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149592,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/?video_id=53208\u0026mode=async\u0026action=js_stats\u0026rand=1761424041306","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /videos/53208/ukroshchenie-rebekki-1982/?video_id=53208\u0026mode=async\u0026action=js_stats\u0026rand=1761424041306 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Powered-By: PHP/7.2.34\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: kt_is_visited=1; expires=Sun, 26-Oct-2025 20:27:21 GMT; Max-Age=86400; path=/; samesite=Lax; domain=.smaxim.com.ru\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-04T06:40:06.346535Z","times_seen":55998,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 351872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 17:53:58 GMT\r\nexpires: Tue, 20 Oct 2026 17:53:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 441203\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825565,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-03-21T15:49:57.335649Z","times_seen":18193,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":105,"dns":3,"connect":15,"send":0,"wait":16,"receive":70,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/contents/videos_screenshots/53000/53208/preview_hq.mp4.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /contents/videos_screenshots/53000/53208/preview_hq.mp4.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12344\r\nLast-Modified: Sun, 12 Oct 2025 15:13:04 GMT\r\nConnection: keep-alive\r\nETag: \"68ebc580-3038\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12344,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38c37d75fb48dbf3709d09c8a2872cdd","sha1":"aa67f9a281056ac0224bef22f38c918e95137318","sha256":"27606aefd57c7efc28440e8d09c12b3d94418b2f0b38e3733ff64e213d90a6a6","sha512":"ac79fdaebe8a5cc94028a2fe09461c687dd37245f9ea36dfa1f26ea898ef1e897ecfa5eae61a1fb3bfd1bb15363c8d40226953beeb8a00ca4ef5e0e6b3419df1","ssdeep":"384:Fte/dZDVYvhH2dXKLPuV/TS9fnA6A3Vhgq3:FgZgtjeS9fjAluK","tlshash":"9a42c156f27ea0992b14fca36ea419f736204b0303cd2c5790e541a1f9b5fb63b26c5d","first_seen":"2025-10-25T20:28:00.634113Z","last_seen":"2025-10-25T20:28:00.634113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026bft=0dAFcWeA4nQNYwfm3EZ5b8ukZIczYCXIyOP7a5yRrIJOfNyUQ08Hg_zpG8zZMEZyC8NpzeuFJia99GI6pQ7J1VllYqaD9YZfUzFw","date":"2025-10-25T20:27:24.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 351872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 17:53:58 GMT\r\nexpires: Tue, 20 Oct 2026 17:53:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 441206\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825565,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-03-21T15:49:57.335649Z","times_seen":18193,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.production.gstcpx.site/audience/f/MzA2MjIxNTQxMjMyNjc4MjEzOQ==","fqdn":"api.production.gstcpx.site","domain":"gstcpx.site","tld":"site"},"ip":{"addr":"62.122.173.61","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.production.gstcpx.site","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 02:38:29 GMT","end":"Sat, 17 Jan 2026 02:38:28 GMT"},"fingerprint":{"sha1":"1F:D4:D9:22:58:02:F4:C1:03:0E:F7:45:90:E1:9A:29:B9:60:27:02","sha256":"38:E1:56:4C:D0:60:EF:A1:3B:F4:A4:6B:19:93:8E:02:36:44:E9:34:1A:BF:7D:17:F8:F3:1E:31:28:CA:5E:CF"}}},"request":{"raw":"GET /audience/f/MzA2MjIxNTQxMjMyNjc4MjEzOQ== HTTP/1.1\r\nHost: api.production.gstcpx.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.smaxim.com.ru/\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 25 Oct 2025 20:27:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nX-Request-Id: 89ea40e4ff2eb35a7483e5c76ff12b79, 89ea40e4ff2eb35a7483e5c76ff12b79\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f541e80b2c8e033c6a15775d354be1b6","sha1":"0968477dad0b4354b1551a4d58e18eabe0e77503","sha256":"fe3e3eac0deede082515153626ebefea43e16eb6c0ccb61d053d632020025fb6","sha512":"6a43ced9e680bdee3c956b64d98ce099bf61cd036a9bb19a5ce25da96407e7bb8aa04c4d2246262b31efadf7914012d3765e2f69d8723474724611078a6dd4c5","ssdeep":"","tlshash":"18a02220a8c20faa0f0282bbb800a80303c03ae0c22c0002080aca0c82c00320e83822","first_seen":"2025-06-24T12:51:53.559039Z","last_seen":"2026-04-02T15:59:05.986393Z","times_seen":128,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":74,"dns":4,"connect":21,"send":0,"wait":23,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/stats.php?embed=0\u0026device_type=1\u0026event=PlayerLoad,\u0026rnd=1761424043134","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:23.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/stats.php?embed=0\u0026device_type=1\u0026event=PlayerLoad,\u0026rnd=1761424043134 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:23 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Powered-By: PHP/7.2.34\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-04T06:40:06.346535Z","times_seen":55998,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/retro/250-1.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/retro/250-1.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 94558\r\nLast-Modified: Sun, 13 Oct 2024 08:43:09 GMT\r\nConnection: keep-alive\r\nETag: \"670b881d-1715e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94558,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 300x250, components 3","md5":"e64fc84589378aaf1851cee8fa4e5ee3","sha1":"29f5317f702adc24a8770b7313394bfab72260e9","sha256":"749d841fb10a67345e4825450a82630f3a0250da60181c7ad4752f90bbb982e6","sha512":"1f32354cfc58fc0089b7ffacef4679b6aa3d81cfbcb5db923913fdd10bfccfcc7661684f367fe3a893617aa0350eba614651e1ed64583b3954f91d5286ccc6a0","ssdeep":"1536:4yp0d3NqekZXVHyxzwH7ntnoASFAH4jO+Q/otAY1mKCc1iIAbDK9I+:4ygOV1bH7npOg+eotAmDCc1iQI+","tlshash":"db9302f31df958605f45e9d023cbc2bd660be9144b31260fdab52738fa621359b62b2c","first_seen":"2025-10-25T20:28:00.636529Z","last_seen":"2025-10-25T20:28:00.636529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nwret.site/who/article.min.js?id=1751551964","fqdn":"nwret.site","domain":"nwret.site","tld":"site"},"ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nwret.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 19:00:44 GMT","end":"Wed, 14 Jan 2026 19:00:43 GMT"},"fingerprint":{"sha1":"6E:17:6D:2D:7E:A3:4D:BB:29:6C:46:31:38:5A:B1:82:82:4E:E3:61","sha256":"FA:B5:E5:0C:2C:28:79:62:83:9F:27:FE:08:D8:54:54:F7:93:8F:49:77:3D:65:A9:C6:B6:23:C2:98:4A:70:69"}}},"request":{"raw":"GET /who/article.min.js?id=1751551964 HTTP/1.1\r\nHost: nwret.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.29.0\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 10 Jun 2024 06:55:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6666a368-478b\"\r\nExpires: Tue, 04 Nov 2025 20:27:20 GMT\r\nCache-Control: max-age=864000\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18315,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8941)","md5":"86a1931e85167a4ddb929f962c69c914","sha1":"d9e25e2a4dd6b096e1eca62bcbc749e86bf16d2f","sha256":"0e08d24eb8f193b9df78768be9427603f90850afda8cf904e36c089d050b6735","sha512":"4bdebbd8975f37cf3cd2ff393d342914000ce5583a2a3d9e5b6ecdf0ba07e4f044eef154220f906b60b726bdfd82bf749475e8e45a07062d548b714f0a9628ed","ssdeep":"384:bZNcG8VWly0xSpzhZDkgT5c5/hEAOL8GauRwyCnvZU73QlB4XntH8mcy22sP8eBz:lNtjxUpNZDkW6EAoTFRwLnvZU73QlWXq","tlshash":"aa82f7b93392357a82eb17c765ba4242f2315494780f5408b15c9d463726e93a3fffac","first_seen":"2024-06-14T09:56:26Z","last_seen":"2026-03-25T06:41:01.426103Z","times_seen":28,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":30,"connect":29,"send":0,"wait":18,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-63S0F026EX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:12 GMT","end":"Wed, 24 Dec 2025 14:32:11 GMT"},"fingerprint":{"sha1":"C1:75:0D:E5:E8:4D:AC:7F:C9:7A:40:D5:6C:2B:22:CE:ED:8F:6D:BB","sha256":"63:AB:E3:89:62:5A:B4:D8:9D:D3:5C:77:AE:75:C5:DE:49:CE:BA:43:6B:22:49:EF:48:59:47:A7:0E:75:FF:C2"}}},"request":{"raw":"GET /gtag/js?id=G-63S0F026EX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 25 Oct 2025 20:27:21 GMT\r\nexpires: Sat, 25 Oct 2025 20:27:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143283\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433107,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"88d0aacd0c66c161c41aa2d30c3357e5","sha1":"10eaec7a96977c37c143b095ef9db3222aa42d27","sha256":"32c3ded686e91b5d4ad64e865f81d4cbcf8e69f1ff3bd9bdc556b10f996348a6","sha512":"2a43f3f6a4feacddb79d2c53b65d0b65e6bdcd8383fd14ee9344e2971be014ef8731830bcdf57bba1cfe477276961c700e7c27077ee5539ccc749090fc36e115","ssdeep":"6144:4BJyJBX178429Z8nP57wr/s0s/+Kxxc20hYllAk6KlhDjLc:WoJBl929Z8nP58DG/mYl5w","tlshash":"729419ce73d674269396f078503f018ba57b29a2b45cc896f189cce42d74a9a4237f7c","first_seen":"2025-10-25T20:28:00.638822Z","last_seen":"2025-10-25T20:28:00.638822Z","times_seen":1,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":52,"receive":79,"ssl":282},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Sat, 25 Oct 2025 20:32:21 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-63S0F026EX\u0026gtm=45je5am0v9179764099za200zd9179764099\u0026_p=1761424041244\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1139633046.1761424043\u0026ecid=1261906665\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115938466~115938469~116217636~116217638\u0026sid=1761424042\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026dt=%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%20(1982)\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=2077","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-63S0F026EX\u0026gtm=45je5am0v9179764099za200zd9179764099\u0026_p=1761424041244\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1139633046.1761424043\u0026ecid=1261906665\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115938466~115938469~116217636~116217638\u0026sid=1761424042\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026dt=%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%20(1982)\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=2077 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.smaxim.com.ru/\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://www.smaxim.com.ru\r\ndate: Sat, 25 Oct 2025 20:27:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:161:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:161:0\r\nreport-to: {\"group\":\"ascnsrsggc:161:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:161:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":94,"dns":0,"connect":20,"send":0,"wait":31,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notification.tubecup.net/tags?tag_id=13075\u0026timezone_olson=UTC\u0026version_name=c\u0026med_script_id=60\u0026page=https%3A//www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"notification.tubecup.net","domain":"tubecup.net","tld":"net"},"ip":{"addr":"78.47.199.204","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:23.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"GET /tags?tag_id=13075\u0026timezone_olson=UTC\u0026version_name=c\u0026med_script_id=60\u0026page=https%3A//www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/ HTTP/1.1\r\nHost: notification.tubecup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":1198,"timings":{"blocked":85,"dns":2,"connect":25,"send":0,"wait":1026,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rtbbtr.com/get/?go=1\u0026data=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","date":"2025-10-25T20:27:25.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 03:33:00 GMT","end":"Fri, 09 Jan 2026 03:32:59 GMT"},"fingerprint":{"sha1":"85:63:AE:48:6B:AD:8D:E9:E4:CD:7F:E2:D7:5B:64:4D:77:5B:E4:C3","sha256":"9A:63:5D:CA:8D:4E:67:CF:06:6E:57:73:69:15:F1:FD:98:61:8F:E4:00:90:48:4D:6B:F3:D6:73:32:4F:D3:38"}}},"request":{"raw":"GET /banner-admanager/iframe-scripts.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbbtr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 17 Oct 2025 08:20:57 GMT\r\netag: W/\"68f1fc69-178\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 20:32:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (376), with no line terminators","md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-04T05:33:10.432135Z","times_seen":1510,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riamiavid.com/sweetie/check.min.js","fqdn":"riamiavid.com","domain":"riamiavid.com","tld":"com"},"ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riamiavid.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 18:26:46 GMT","end":"Sun, 18 Jan 2026 18:26:45 GMT"},"fingerprint":{"sha1":"82:6B:71:4B:D8:F7:59:87:22:DB:AE:3D:BC:FA:F1:06:1F:62:1A:2B","sha256":"63:2A:11:1F:59:AF:D9:66:1A:7B:9B:C7:76:A2:70:CE:FF:3D:74:B8:63:B9:5F:D3:1E:28:65:4E:D9:D6:BB:3C"}}},"request":{"raw":"GET /sweetie/check.min.js HTTP/1.1\r\nHost: riamiavid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.29.0\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 14 Sep 2023 14:24:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6503179b-8d3c\"\r\nExpires: Tue, 04 Nov 2025 20:27:21 GMT\r\nCache-Control: max-age=864000\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36156,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36155)","md5":"7047f38f1e0df7670021c6e775d1e73c","sha1":"5694642b7de28cb700602411297693756beb094a","sha256":"c85183390b23326532649a0091ba89aa4d9d1422e85535d6c00b36ec1db5ed4f","sha512":"0eaf70d0b13f327d513210fe8548d671bbda954b8288e7c6128e33e4e202a5c5c2670db50dcc6c40d3276197e28fe690f4b4bff0f5245cb6077153bb73fdb37d","ssdeep":"768:OjUBflOTQpzu2egaDGpNIB0RC/Ac4m9ab:OjUBflTu2eJDkNIB0Q/Acw","tlshash":"02f22b1e61cb28374392216833bfa409747b5ad8510e4044ff7686cafba1c6e913bfb1","first_seen":"2023-05-07T15:42:11Z","last_seen":"2026-04-02T15:59:06.005206Z","times_seen":302,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026bft=0dAFcWeA4nQNYwfm3EZ5b8ukZIczYCXIyOP7a5yRrIJOfNyUQ08Hg_zpG8zZMEZyC8NpzeuFJia99GI6pQ7J1VllYqaD9YZfUzFw","date":"2025-10-25T20:27:24.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42513\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 17:54:00 GMT\r\nexpires: Tue, 20 Oct 2026 17:54:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 441204\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f09ebe2f56c1de1e6fa6635668a56bd","sha1":"099f9335f89b3cdcb61c973b8c62999b4c3e1d9c","sha256":"6c41781e0078a96caba219a93989a48bce162a6ca255d372bfd63e90b67799a9","sha512":"f2bb0ca57743279132caa0694a01512f6b4cee7f19d9066ccd2fafcb59578cf5d9ca72077cddd6bf3241cd55f853b5fb9067c8860f100bf757bedd4112d8a226","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIXCdthXwW5l1Dx7:1GRFauOxLA/+IcTO7LX1","tlshash":"ed838e7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-10-21T01:58:59.665109Z","last_seen":"2026-03-21T15:49:57.333419Z","times_seen":16052,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/styles/all-responsive-metal.css?v=6.0","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /styles/all-responsive-metal.css?v=6.0 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 20 Nov 2018 14:54:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5bf42018-27a43\"\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162371,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15274), with CRLF line terminators","md5":"9f85746680d41cd427ba6fdb8d24788c","sha1":"73565a817108ba858a9b4bc806cf09c71261429c","sha256":"cc11311f342ea0eea958e847e979526896d882bbb4d7796745a206a4524bce2d","sha512":"935f7bd1954afdc532dea98e131e1b687714375bf25d80a66a6875f5faa3d3120d9ca4ddb19879c8620567a8bfa5dd3a2ac7b385cb846dbd7a8b54fd5153816a","ssdeep":"1536:ooS28M2F2g2oH2dw2dYIpH2l2Xfw28ND2Fx2FL2VG2O2Yl4OjacOWOwO1:ytMOjo","tlshash":"2af3727cd6181104a1379e797fe907297b7cc023ca0207f9fee79145938aa9841a6fde","first_seen":"2025-10-25T20:28:00.642383Z","last_seen":"2025-10-25T20:28:00.642383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 20:27:22 GMT\r\ncontent-security-policy: script-src 'nonce-TPvFwfUwxmgUEHMfSNClIQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78741,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"778d437aa82285946b5544ba6a1f3cc4","sha1":"f084a6eb92b94e518c14ebac3c9313e74b2ee3f5","sha256":"7fbd24038c5712b6149da8ee8ca720590eb355dcec9e55854965679e09ff0539","sha512":"600568eb2b515d9a483218139be3f11191ae58e50abaac9a8b73dcc33f5d5d62ed2f98df9d3bd7bb6cd68b1a42fd48444f1dc6736aba443d6f2d0b315225d4b9","ssdeep":"1536:XD52Kk8AqorreWwM81dF93bDbMxXIOxfEeCuB/UDFt+bypqNwCE:XDxBAh61dF9TMxphHCuiFtBF","tlshash":"9673ae26d6533499dfff5d4166da7a79a2af2242218344dc77ff10c99ca6c83d22838c","first_seen":"2025-10-25T20:28:00.643935Z","last_seen":"2025-10-25T20:28:00.643935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/stats.php?event=Init,","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/stats.php?event=Init, HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Powered-By: PHP/7.2.34\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-04T06:40:06.346535Z","times_seen":55998,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckstr.com/vast?spot_id=6092460","fqdn":"bid.onclckstr.com","domain":"onclckstr.com","tld":"com"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cleansasve.com/adn2.php?id=1244\u0026sitea=bosmusas","date":"2025-10-25T20:27:25.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bid.onclckstr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 03:06:18 GMT","end":"Sat, 06 Dec 2025 03:06:17 GMT"},"fingerprint":{"sha1":"48:9A:2A:38:7F:08:7F:BD:E1:89:07:AD:41:7C:18:6A:D7:C1:AC:23","sha256":"C9:0E:12:C2:39:41:AC:5B:82:45:37:49:E5:20:19:FC:C3:49:56:E3:33:72:71:F1:72:B2:C2:73:FE:AB:70:1C"}}},"request":{"raw":"GET /vast?spot_id=6092460 HTTP/1.1\r\nHost: bid.onclckstr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cleansasve.com/\r\nOrigin: https://cleansasve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: text/xml;charset=UTF-8\r\ncontent-length: 7\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cleansasve.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"3f2600013bdbcf98ed96740e89a1a234","sha1":"9edbad613a8a3ec3f72509ad6aa1770978178c44","sha256":"093777a16300e4bfada4768dee58e25a3d45de477682d97ea21d728210853801","sha512":"2c7434df6f813e122f714e674e4cc8447b73c87e2be775085ec65ce0cf44ae7783990fc1cd43a111eb042c05f220b6b2475c93ff4a30b6967530ec95b5118704","ssdeep":"","tlshash":"964000000300000000c030000000000300c03000000300000000000000000000003000","first_seen":"2023-05-07T17:42:53Z","last_seen":"2026-03-28T06:57:50.404855Z","times_seen":252,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":81,"dns":5,"connect":22,"send":0,"wait":23,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:37 GMT","end":"Wed, 24 Dec 2025 14:35:36 GMT"},"fingerprint":{"sha1":"45:9C:C5:B0:D8:76:3F:BA:4B:3A:7A:47:93:65:30:95:DD:92:AF:CB","sha256":"31:5E:7E:B1:E0:22:CE:95:3B:A8:33:71:E6:32:80:DE:88:EB:4F:25:93:F9:66:CE:01:A0:31:61:3F:B3:A9:52"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:Wc0w6B7miB63zjGXgthaRNBi3AhXZw:ehh1JZdOHRQhaK-t; Expires=Mon, 25-Oct-2027 20:27:30 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 20:27:30 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S270863799:1761424050470633\u0026ifkv=ARESoU32N0aX2cZjMpNvGu-azoT9Pbn58VqMOOe-4NrHbAX9NuQogWIext9B2-T-Hl_EZ-ZHCIYA7A\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-ygGZ8bE2A4iSuhcu20EiMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":104,"dns":1,"connect":28,"send":0,"wait":39,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/retro/250-4.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/retro/250-4.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 90470\r\nLast-Modified: Sun, 13 Oct 2024 08:43:04 GMT\r\nConnection: keep-alive\r\nETag: \"670b8818-16166\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90470,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 300x250, components 3","md5":"5cfa35c0fbc658007e781424e1a8fca6","sha1":"8c1d7bfdc930a0f1b3a1bedb9bb9f11b5b0e7942","sha256":"6581ff1bfc92074d1c533d4d8a1050ab033218ea48adb87fd954e36001454702","sha512":"dab030d70972c4b5cec57feb70409bc26c1a4c225b33385f782778805ea682667a8656627add05d02671939101fea9e11f6169c830138ed74c0523f17a0ce69f","ssdeep":"1536:uNetAMCWv2Z0cYUMhuqvsVrF1c5pkhmlBxJO/B6k1e6dcpvhs1QOUr1QCBe:uEt7f2Z0DstF+k+g/X1J2ppAQOUh/e","tlshash":"6c9312335d9a8ecaa565750dc00ceae0e74f5e5cdd62e5a0b6f409ace34b248f5b0c6c","first_seen":"2025-10-25T20:28:00.646182Z","last_seen":"2025-10-25T20:28:00.646182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":19,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/foot/121.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/foot/121.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 73102\r\nLast-Modified: Sat, 06 Sep 2025 09:51:05 GMT\r\nConnection: keep-alive\r\nETag: \"68bc0409-11d8e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x250, components 3","md5":"d8b1437c170f48cdb115d0cb792ac32d","sha1":"8e37716c7eada8c4b15df666f3969fb7cb1ed350","sha256":"d9bcb0de8a5bcec4e3416f9f76be5189e464f7568c25b10474198f86e0c118ad","sha512":"c06136c489bf97b5c4ccca8c16a0194ae338e9bf9504caadc9593d3f329716cc06259024f9eb4490cd49a813e849428317d20ef189e52be45a4674303ab4c09e","ssdeep":"1536:ytUAqiu+nbssmMQeTOgOLUjnmonsvtQyTWzg6tChau:ycipnYeQeDhjiQVMh7","tlshash":"f76302a0ab1463c6c954fc2f0c9f763007567c7ae24516f19bc93b1ff061a56478a6bc","first_seen":"2025-10-25T20:28:00.647755Z","last_seen":"2025-10-25T20:28:00.647755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":49,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7ea02e2ab2.e55a2001b9.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDcxNTc0MDg2NzcxMjc2NDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjE4NjA3OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoyLjU4LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"7ea02e2ab2.e55a2001b9.com","domain":"e55a2001b9.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:23.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7ea02e2ab2.e55a2001b9.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:47:59 GMT","end":"Tue, 20 Jan 2026 02:47:58 GMT"},"fingerprint":{"sha1":"EF:D6:D4:8A:FB:5C:1A:6C:F8:E1:33:0B:D0:3C:7C:93:9B:C1:96:A8","sha256":"35:B1:DE:D4:49:9D:85:82:66:DE:FF:49:59:1F:B0:9C:12:01:9A:2F:59:DB:77:C7:87:0D:88:C0:75:87:C8:D2"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDcxNTc0MDg2NzcxMjc2NDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjE4NjA3OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoyLjU4LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 7ea02e2ab2.e55a2001b9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:24 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":131,"dns":84,"connect":21,"send":0,"wait":50,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7ea02e2ab2.e55a2001b9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cleansasve.com/adn2.php?id=1244\u0026sitea=bosmusas","fqdn":"cleansasve.com","domain":"cleansasve.com","tld":"com"},"ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbadserv.com/adda42.php","date":"2025-10-25T20:27:25.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cleansasve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 14:32:14 GMT","end":"Sun, 28 Dec 2025 15:30:57 GMT"},"fingerprint":{"sha1":"71:C0:F3:F2:3A:D0:DF:61:16:E0:BE:6C:9F:E8:57:0D:B6:CD:36:5F","sha256":"34:A0:F0:88:17:B6:D4:4F:FB:2B:73:31:24:2B:D2:F1:C0:53:0B:23:26:5A:E1:D1:CB:66:98:B0:F7:2A:9F:D1"}}},"request":{"raw":"GET /adn2.php?id=1244\u0026sitea=bosmusas HTTP/1.1\r\nHost: cleansasve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbadserv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://rtbadserv.com\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZgEWFqm6UvtPq7%2B8dAQwkGvUJBRalB%2FaF2w%2Bh0oxSdBTIDLHUs%2FDw1tMBjWlYa1C4q6qgmTTLIDJM3A4HXOz5NGFSD5tBMx15KuqTVc\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9944745df9b235a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8175,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"C++ source, Unicode text, UTF-8 text, with very long lines (539)","md5":"968f87154ef76c66a36941ee0182e13f","sha1":"f7994b412552dd7ff64df99301fb72365b9be91c","sha256":"27ab2ed7f2350ebf39803a93bb69746df46023c108b43bc32ae2bb4beef06886","sha512":"d6351f804f635810c53fade53b39966e2f9808161eb126705074dcf5fe0c217af8c51f34d3d9f9b91a0555a219b045d765a881226e914f12f91f916cba0f2d24","ssdeep":"192:gtPyqCNfzckjOcRw8jOAlhzLoWxiliM6iciVctL5Ai+AitAiFiD:gtPBSbcyOcRw8jHoWxilijicibi5iai0","tlshash":"80f1504512f71032ca37115e0fe7462572b4a40f7909ca8e3e6d82996fc4b2696f8ff8","first_seen":"2025-09-30T12:02:39.861752Z","last_seen":"2025-11-13T23:55:20.80708Z","times_seen":58,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":22,"dns":3,"connect":1,"send":0,"wait":56,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S270863799%3A1761424050470633\u0026hl=en\u0026ifkv=ARESoU20ZHVOetTpDQupWQSVxHbUM6JH1L424R9I3xoOk1IJNQQ1oLdfqvUpAyJDusTTrvc2Cl-Dhw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:25 GMT","end":"Wed, 24 Dec 2025 14:32:24 GMT"},"fingerprint":{"sha1":"3A:78:B2:96:D0:CD:A5:D3:08:6F:80:16:15:5C:10:CC:41:FE:1B:12","sha256":"D2:92:7D:D4:5D:78:BC:69:FC:32:73:D8:16:EF:3A:37:3A:0E:0C:2D:50:4F:FE:51:7E:F7:EA:93:56:B9:8C:1D"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S270863799%3A1761424050470633\u0026hl=en\u0026ifkv=ARESoU20ZHVOetTpDQupWQSVxHbUM6JH1L424R9I3xoOk1IJNQQ1oLdfqvUpAyJDusTTrvc2Cl-Dhw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 20:27:30 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-Pu_KaKU7cAWh428knBMvZw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Mp9mjkH_buc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/retro/250-5.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/retro/250-5.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 95314\r\nLast-Modified: Sun, 13 Oct 2024 08:43:04 GMT\r\nConnection: keep-alive\r\nETag: \"670b8818-17452\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 88\", baseline, precision 8, 300x250, components 3","md5":"524a7edffe656f1d5e85ce91795bbaff","sha1":"00147e9f9ba639b427c1a19f764d5568da7da26d","sha256":"b6aaf879d7f727f88c9d503df2d623f4825be784778d6d53c4b2cebdc302938c","sha512":"125d5a8620c5561a14a9b795c2933362615b585a31bc711f7dfc552d1340f91975497967c7af50b768b4b0f620cd0c7fa6e7a1a8da0e005ef53eb2003d7d3d1f","ssdeep":"1536:2P1KbaPsiAZS11op5xpBsJ6J8qNz7VN4Bn/pbneItT2P4kfS8UypuWGQ:hNskXBKAH6/7MPbgiDGQ","tlshash":"8593121e69648c424cd7fb252fb474130324fa80e5df888989d2a73cc59bc968f5d36e","first_seen":"2025-10-25T20:28:00.650045Z","last_seen":"2025-10-25T20:28:00.650045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/logo.png","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/styles/all-responsive-metal.css?v=6.0\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 10638\r\nLast-Modified: Sun, 27 Dec 2020 13:27:47 GMT\r\nConnection: keep-alive\r\nETag: \"5fe88bd3-298e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 40, 8-bit/color RGBA, non-interlaced","md5":"a3c05f25ff04303fb47637be9b2a6abd","sha1":"9567c3c7fd9458414d6bb97084d56af33e6f9177","sha256":"6a9ad3412d684ab6ac80e120f47d09a23debef5c870ba31b489e7a33deda0d7d","sha512":"00568ee9855d62de4ca47e178e9a6e722faa589587eabab4aa07c2e0b3f9c6aabd561fdabe8e76f226155931b374400f7a55086e51c5ac75531ef8e105ec419c","ssdeep":"192:kYmYtqx+PoKie5cSFYsFfOx2GKBLiVgWD/CQNM5ryi1g59:XmYtqx9G5ckNn1iWWDpM5GZ59","tlshash":"fa22bf62e1ff66151297c3e25fcc82feaa561bab508445c28cfb40665a1cb07f9470ed","first_seen":"2025-10-25T20:28:00.651562Z","last_seen":"2025-10-25T20:28:00.651562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","date":"2025-10-25T20:27:22.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42513\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 17:54:00 GMT\r\nexpires: Tue, 20 Oct 2026 17:54:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 441202\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f09ebe2f56c1de1e6fa6635668a56bd","sha1":"099f9335f89b3cdcb61c973b8c62999b4c3e1d9c","sha256":"6c41781e0078a96caba219a93989a48bce162a6ca255d372bfd63e90b67799a9","sha512":"f2bb0ca57743279132caa0694a01512f6b4cee7f19d9066ccd2fafcb59578cf5d9ca72077cddd6bf3241cd55f853b5fb9067c8860f100bf757bedd4112d8a226","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIXCdthXwW5l1Dx7:1GRFauOxLA/+IcTO7LX1","tlshash":"ed838e7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-10-21T01:58:59.665109Z","last_seen":"2026-03-21T15:49:57.333419Z","times_seen":16052,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 03:32:10 GMT","end":"Mon, 01 Dec 2025 03:32:09 GMT"},"fingerprint":{"sha1":"A8:B8:5C:A8:67:08:FB:6F:5B:FE:20:D6:BB:7A:04:B0:B2:1A:BE:F7","sha256":"03:91:48:19:1B:C5:3E:CF:59:DE:C7:39:A3:C0:C3:E0:BC:41:15:48:FB:42:AB:77:8C:5B:FF:37:FE:1F:3C:54"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 10:58:05 GMT\r\netag: W/\"68f615bd-24858\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 20:32:20 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149592,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":82,"dns":5,"connect":23,"send":0,"wait":56,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.wpshsdk.com/npc/sdk/push.m.js?v=1","fqdn":"js.wpshsdk.com","domain":"wpshsdk.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpshsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 07:33:10 GMT","end":"Wed, 10 Dec 2025 07:33:09 GMT"},"fingerprint":{"sha1":"62:BE:F1:F7:0A:03:CE:F8:E5:4C:47:01:1E:E9:64:E1:C4:78:3D:D5","sha256":"86:3F:71:43:02:B9:19:61:1A:AC:16:D2:2F:36:03:1E:C1:C6:18:02:AB:1D:95:D6:DD:5A:5A:41:AD:83:D8:CB"}}},"request":{"raw":"GET /npc/sdk/push.m.js?v=1 HTTP/1.1\r\nHost: js.wpshsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 01 Sep 2025 08:26:08 GMT\r\netag: W/\"68b558a0-7b8f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 20:32:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31631,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31246), with no line terminators","md5":"d8575fbbf73a8ff30ff1938a43e664d0","sha1":"d2785dd9892fdadb8703f655b056b02dd1cb5b8d","sha256":"50c8fdcb3cc08967158d65ade7da8ac61718b8a1babc00e13b930367e571aedc","sha512":"8c16a650ae6509952a46206931e89d7ab016ce4f534770e2b9e5d2a4b7fc1c2394a2ed5c454f9fb6d6a99f6b423e2775956ce8ec9c88f686b940a450dfc72078","ssdeep":"768:CuKhVWPsJiRx8Useb6uvOdtkp6O4AQet1/:CuKHesJiXWpuvOdtkQLAf","tlshash":"2be21a88b381b2b4479720b2587f6742b336651a7403c540f367ebc0b869e9fd336b69","first_seen":"2025-09-01T17:49:28.814065Z","last_seen":"2026-02-06T10:34:46.272483Z","times_seen":1059,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":55,"dns":13,"connect":21,"send":0,"wait":21,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/get_file/1/de2a8a9f160de9918b70b34e76dfc710f081063fca/53000/53208/53208.mp4/?rnd=1761424042637","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /get_file/1/de2a8a9f160de9918b70b34e76dfc710f081063fca/53000/53208/53208.mp4/?rnd=1761424042637 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Powered-By: PHP/7.2.34\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-04T06:40:06.346535Z","times_seen":55998,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbbtr.com/get/?go=1\u0026data=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","date":"2025-10-25T20:27:25.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 15:42:06 GMT","end":"Fri, 16 Jan 2026 16:38:31 GMT"},"fingerprint":{"sha1":"9C:B6:7E:A5:66:3E:09:B0:5A:6A:5B:E3:1C:8A:39:86:1E:8C:0E:2E","sha256":"8A:64:70:8D:53:EF:02:B2:64:D4:50:D9:06:4F:0D:99:CB:AA:54:BD:FC:15:6C:44:D4:FE:C7:42:30:F6:95:D1"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbbtr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMtn59eIfF6oMSWKE07dBF%2B1F42au3pFZgpNU%2BGBCJsQ7LtR8RLgVh5WEqZLn7m5HnR%2BpoTqZn5l9U8%2FHc5C8hOZmCByYQ%2BsUAFuE4vvF271pg%3D%3D\"}]}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1786299\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nvary: accept-encoding\r\ncf-ray: 9944745d4b8ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T06:45:41.005484Z","times_seen":761893,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/186079?version_name=c\u0026domain=www.smaxim.com.ru","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 02:32:20 GMT","end":"Thu, 18 Dec 2025 02:32:19 GMT"},"fingerprint":{"sha1":"38:85:B2:05:59:7D:15:16:9D:87:1B:83:46:10:68:2E:DC:7C:7A:D1","sha256":"FE:22:4E:C6:6F:85:46:CA:64:38:8F:48:77:17:E8:29:0E:7C:14:27:20:EA:A9:7B:CB:5E:49:87:A6:B0:60:2F"}}},"request":{"raw":"GET /tags/186079?version_name=c\u0026domain=www.smaxim.com.ru HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:23 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1425,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc5a6ee76a209f62c3e74d330b907fc0","sha1":"cb99050fa6381c6e31e3bfac9f02b96b3274ef64","sha256":"d89897cfe4ba2a912c6517f6ebc58d8fc14e8761fd7e38fe3b51beb361d60f8b","sha512":"edb5a99a4140d91343aca23f476087b5c629689ad69fee8dd4302a9e358aa2be910dcac9631143a0e5b148d7f5e1590c97c0ad77356f90841567076749ad5667","ssdeep":"","tlshash":"dc2122f9d926ec76c1c046ca84d67f8809b53067b0c83456e0ec0a6817cf152291b21f","first_seen":"2025-10-25T20:28:00.65444Z","last_seen":"2025-10-25T20:28:00.65444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4466,"timings":{"blocked":1944,"dns":1,"connect":19,"send":0,"wait":577,"receive":0,"ssl":1922},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/skin/img/play_white.png","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/skin/img/play_white.png HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/player/skin/youtube.css\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 3679\r\nLast-Modified: Sat, 08 Jun 2019 12:16:35 GMT\r\nConnection: keep-alive\r\nETag: \"5cfba723-e5f\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit gray+alpha, non-interlaced","md5":"f9a6b1c24a8858cf91b1f79ccecb8544","sha1":"e63232a567ab4c0d09dcd7c9649abbc747e6d2a2","sha256":"e13296a19c623cff752620a9f03aa2b920a13ea08a1d2292ebd423a2e0feeb2c","sha512":"52d71bccd96641b4fb6732efce15caadebedc9f2e600f2015005e0748569d1340cebefcf200b353d01401a2972621f505309333c11855c0feeaeee4ae286b9c0","ssdeep":"","tlshash":"3e715ddcb1c0109c196c7766c7512789e32ea2442cb7f44a373dc518ea7460ed0fd6d6","first_seen":"2023-04-25T17:51:54Z","last_seen":"2026-04-01T18:00:03.182701Z","times_seen":706,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.0","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"172.67.174.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","date":"2025-10-25T20:27:27.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 04:11:27 GMT","end":"Thu, 01 Jan 2026 05:09:55 GMT"},"fingerprint":{"sha1":"2E:5D:41:6D:E1:C9:9D:63:98:30:E4:63:6C:30:32:92:E0:1D:12:8B","sha256":"50:B2:69:48:FB:B6:5E:DD:EC:13:39:31:E7:74:94:FE:44:FD:83:C0:2C:3A:77:52:A0:AD:3B:4D:30:7E:2A:C8"}}},"request":{"raw":"GET /creatives/native/native.min.js?v=5.0 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZFoHX820OLo1rtS%2Fqbeuh6Ok8%2BUmPRktj2RG4qbuFpibB%2FrvBWP94QUnPL5ymXtaGt6yQwkZ9ON%2BgL1AbLG0oNzOO76i2fJo%2Bc%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Sep 2025 15:19:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\ncontent-encoding: br\r\nage: 1884\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"68d55d8f-c8d\"\r\nvary: accept-encoding\r\ncf-ray: 994474662bef2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3213,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3213), with no line terminators","md5":"e2275e08ae5ab3649e3b136de4a6b819","sha1":"7e6831edfe4931f8da7e66e282d67ad613fff5fd","sha256":"a0972735de39d79bda3fd8f3200ba460bb187855c288fc9360749a77f9ca093b","sha512":"13394cc4a2b20ea5d1ef03cda63ad27f97546971fc836e4b0e27a6cb99840f0b38c6d25b188580a481542f3f122286302793d701a6bbb8d1b247f08b33de7c0d","ssdeep":"","tlshash":"a2610cc4d2c85923067531ce4853b575f67c8e05bdb94c50e60b8fc98e15d465b17fe4","first_seen":"2025-09-12T13:55:50.987768Z","last_seen":"2025-11-07T11:53:30.52641Z","times_seen":386,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Sun, 25 Oct 2026 20:27:34 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-04T06:30:59.72043Z","times_seen":10771,"resource_available":false,"data":null}},"time_used":6743,"timings":{"blocked":3354,"dns":24,"connect":19,"send":0,"wait":32,"receive":0,"ssl":3303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/contents/avatars/0/1.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /contents/avatars/0/1.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2312\r\nLast-Modified: Mon, 24 Dec 2018 08:40:02 GMT\r\nConnection: keep-alive\r\nETag: \"5c209b62-908\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2312,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x180, components 3","md5":"94c989de63edad315be34511237cc0ab","sha1":"27bb47caf75247c1151002980800012633fe8190","sha256":"da92ce65fbe6e03ce58a2a4eca1cd17f9799c5b0eb2ee326445f07556eb59e82","sha512":"0c6d18f61f2e04200f55564e512f2d1159721abd6c5ee06a0f2b468b4719f0f4151b18b7fa4bd968173146bb4ce775a848e8e8c05b0bcbd7fb8735742b2da4da","ssdeep":"","tlshash":"bc412c074a5382d18c7747bd2f41c59be6ded34dbc9113d268b19b21d4306865dcd94f","first_seen":"2025-10-25T20:28:00.6577Z","last_seen":"2025-10-25T20:28:00.6577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":87,"dns":1,"connect":28,"send":0,"wait":26,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/skin/youtube.css","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/skin/youtube.css HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 16 Jun 2025 14:33:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68502b33-7cf7\"\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ccf3b650bee299e1c102386735580b9","sha1":"ba44ae54d24a710e010b74434929e065b1ee5121","sha256":"d03850785a5f7b5f2b5b2251ba5a5a2295fba5ef2c206c22a1fb2c11893002ca","sha512":"a7726b813629d6ace6e5bc9f2d826605f30eb1b1daa5fc6cad14b2ebf7d1bdb8cb8f8fe7111ece18ee6fd2fe66b1f8a45adf250868e958555b2d70b8decc8ccd","ssdeep":"768:vcGF9IldtEuO/CqrbhyGaoqQsouzsIYGLXlEo/novvnpn:5F9IldtEuQlrbcQqQsouzsIYGLXuo/nQ","tlshash":"2ae2cd15d5978a0071fa94ceeaac9b1d272e9703b9116fdaf503793c43dd2a021b3a7c","first_seen":"2025-06-28T15:00:25.293841Z","last_seen":"2026-03-12T22:06:37.792902Z","times_seen":36,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/b_as_n.css?v4","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rtbbtr.com/get/?go=1\u0026data=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","date":"2025-10-25T20:27:25.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:31:53 GMT","end":"Fri, 12 Dec 2025 02:31:52 GMT"},"fingerprint":{"sha1":"C6:6F:2D:12:D0:C8:6C:8C:C2:D0:18:31:E6:5F:D9:F3:03:D4:43:57","sha256":"A1:F4:10:13:C7:9A:6F:C6:96:2B:D1:74:91:7F:03:3C:8B:D2:B7:1E:85:D6:E3:BA:E5:29:DF:9C:88:7F:3F:A5"}}},"request":{"raw":"GET /b/b_as_n.css?v4 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbbtr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:33 GMT\r\ncontent-type: text/css\r\nserver: nginx/1.20.1\r\nlast-modified: Tue, 04 Mar 2025 13:12:58 GMT\r\netag: W/\"67c6fc5a-6d6\"\r\ncache-control: max-age=172800\r\nx-request-id: afc474e974460d801cb443d59b4334c6\r\ncontent-encoding: gzip\r\nexpires: Mon, 27 Oct 2025 20:27:33 GMT\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4710815dcdb221d8c5193cc0fa3d7d99","sha1":"3e44ee99da6a9b8d4d50d12b3fdb450fb5f20e8b","sha256":"f492ad6b8d8f9b56191233c65e6464b17ca2d2e585a03bfffa00a24bbc8be8fe","sha512":"f3172565b50840be7a37c2dc5d9da6862398fe8a50b07389377320c30743a8db9e10cc9e5dc7d19637b61e67daa17fc296b0f4d9124be37deeac23140653f558","ssdeep":"","tlshash":"813162a49a65a105d037e7f82751071962aed010e303091ebff07229a2dfdad7a25ffc","first_seen":"2025-04-07T07:53:53.259552Z","last_seen":"2026-04-04T05:33:10.435063Z","times_seen":1635,"resource_available":false,"data":null}},"time_used":15197,"timings":{"blocked":7583,"dns":5,"connect":19,"send":0,"wait":29,"receive":0,"ssl":7558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/ZmJiZTY0NjZmNzZiM2NkYWZkZTMwYjAxOTIwNzc4MjM/jpeg,s(w:480,h:300)/xc/1Q/1Qo4iU/frame/original/6.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.26","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","date":"2025-10-25T20:27:27.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/ZmJiZTY0NjZmNzZiM2NkYWZkZTMwYjAxOTIwNzc4MjM/jpeg,s(w:480,h:300)/xc/1Q/1Qo4iU/frame/original/6.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46396\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1762326026\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJFAH3yF4EAAwBT3/TaAH3XaQBAA\r\nx-77-nzt-ray: af585630b5bfe0ffaf32fd688372ce13\r\nx-77-cache: HIT\r\nx-77-age: 286408\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46396,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"7828afd386ab942cadfc4a63683e59d7","sha1":"93b7a6d0dc9c2c7cdcd3f3199858abaa392832a4","sha256":"b1328aa7aa1876724a80078a08baa010f1f6682399abb62081fb4ff3a018e528","sha512":"94da9339d4d52117e7b59a209f86b5f23ac8d25609b6bfdc106fdb836ee36173de04272262020864bb2d897f3c60d268b2b9d2297bfa3b6829b4a26e7dbc50a9","ssdeep":"768:6bgv78vsCjOGvaNB49ggABdQcBY1HjwfTIi/kQdh2/4Pi/6b432SdbYzYw:6UksCjOGvdugibBwDwfTIiJT2/yi/6b7","tlshash":"5d2302cc0b4ae5e2d9b483b1e6105c58e7f93421d749e64e12e4b4b8608573c2efbb0e","first_seen":"2025-10-25T06:39:59.724179Z","last_seen":"2025-10-28T15:28:27.150965Z","times_seen":46,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":91,"dns":48,"connect":7,"send":0,"wait":21,"receive":5,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/foot/122.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/foot/122.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 97657\r\nLast-Modified: Sat, 06 Sep 2025 09:51:05 GMT\r\nConnection: keep-alive\r\nETag: \"68bc0409-17d79\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x250, components 3","md5":"6c67ee58c8ca3860d462f53739bb089f","sha1":"9d059f4be7cc6b30685035ac4968a61d616705d9","sha256":"0077cb980b0121a0d167b35b5d5890640f1a3012716a77e6f8c4a7f1778c54a3","sha512":"bf8db9131c3b489bb091c70bf44665aa4cccfb14163b64c6ac39f2646ad42209bc9703ed2404791ab3abbaa2e7de794dfeb110bc22a4addaf36ca3cef9d2e38f","ssdeep":"1536:jWFVXzosDmFLcZXb9AT47cd3rW3JfZsq8RpVVg2BAlGJ1VQAAXH4V2xfnQIdqYmk:QXzoscLs37choKtHgoAlGtCYVOQIdRrj","tlshash":"86931249c6abc3aaac70346774d99775e3422c55b880686a0877307cd8e3bfa513349c","first_seen":"2025-10-25T20:28:00.661474Z","last_seen":"2025-10-25T20:28:00.661474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":86,"dns":0,"connect":27,"send":0,"wait":56,"receive":40,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/foot/124.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/foot/124.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 111553\r\nLast-Modified: Sat, 06 Sep 2025 09:51:05 GMT\r\nConnection: keep-alive\r\nETag: \"68bc0409-1b3c1\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 300x250, components 3","md5":"f3790d333998fe8c37856780082fe45c","sha1":"4a3eef4b125196b8c23a9382e3268b1e73d78684","sha256":"6fda2823eb9fa80ad92272aafd64f3b4937ab2b26ef98de0d853f7c3fcbd56b8","sha512":"0ce7e3e1c05508cb5b802596695d09f20ea467bd1567bd0532150a9ffeba145db52701038b89b617587be54a1cc322a23b7f2aa88f0f3f5dc56ac91ccb9b7518","ssdeep":"3072:AFTsPT4zh+Zx0WO95TD/J7GqrZ82VIPGYC/:8Ts74zhAxWzDRyqlrVEGYC/","tlshash":"69b312954b4699749e1f0f66e4f2dcb691525006f6a82c01fafd0e62c33ef0c1a4eb35","first_seen":"2025-10-25T20:28:00.662968Z","last_seen":"2025-10-25T20:28:00.662968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":53,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riamiavid.com/sweetie/check.min.js","fqdn":"riamiavid.com","domain":"riamiavid.com","tld":"com"},"ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riamiavid.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 18:26:46 GMT","end":"Sun, 18 Jan 2026 18:26:45 GMT"},"fingerprint":{"sha1":"82:6B:71:4B:D8:F7:59:87:22:DB:AE:3D:BC:FA:F1:06:1F:62:1A:2B","sha256":"63:2A:11:1F:59:AF:D9:66:1A:7B:9B:C7:76:A2:70:CE:FF:3D:74:B8:63:B9:5F:D3:1E:28:65:4E:D9:D6:BB:3C"}}},"request":{"raw":"GET /sweetie/check.min.js HTTP/1.1\r\nHost: riamiavid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.29.0\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 14 Sep 2023 14:24:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6503179b-8d3c\"\r\nExpires: Tue, 04 Nov 2025 20:27:21 GMT\r\nCache-Control: max-age=864000\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36156,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36155)","md5":"7047f38f1e0df7670021c6e775d1e73c","sha1":"5694642b7de28cb700602411297693756beb094a","sha256":"c85183390b23326532649a0091ba89aa4d9d1422e85535d6c00b36ec1db5ed4f","sha512":"0eaf70d0b13f327d513210fe8548d671bbda954b8288e7c6128e33e4e202a5c5c2670db50dcc6c40d3276197e28fe690f4b4bff0f5245cb6077153bb73fdb37d","ssdeep":"768:OjUBflOTQpzu2egaDGpNIB0RC/Ac4m9ab:OjUBflTu2eJDkNIB0Q/Acw","tlshash":"02f22b1e61cb28374392216833bfa409747b5ad8510e4044ff7686cafba1c6e913bfb1","first_seen":"2023-05-07T15:42:11Z","last_seen":"2026-04-02T15:59:06.005206Z","times_seen":302,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:23.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.smaxim.com.ru/\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 20:27:24 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":90,"dns":12,"connect":25,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026bft=0dAFcWeA4nQNYwfm3EZ5b8ukZIczYCXIyOP7a5yRrIJOfNyUQ08Hg_zpG8zZMEZyC8NpzeuFJia99GI6pQ7J1VllYqaD9YZfUzFw","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:24.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"FA:B1:EE:2C:7A:C6:EA:B7:3D:61:7F:76:8D:6D:0D:E8:B1:78:C2:A5","sha256":"01:3A:8E:AF:52:74:02:04:D3:F4:0C:22:A9:63:91:1B:7B:F8:C0:67:BC:AB:6C:B1:1E:73:CC:B1:D7:1F:7B:A6"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026bft=0dAFcWeA4nQNYwfm3EZ5b8ukZIczYCXIyOP7a5yRrIJOfNyUQ08Hg_zpG8zZMEZyC8NpzeuFJia99GI6pQ7J1VllYqaD9YZfUzFw HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 20:27:24 GMT\r\ncontent-security-policy: script-src 'nonce-F7jCWRpjbi_-6SDtlS_8Vw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7625,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5f1374eb59e73c96fc56f1c09d9117b7","sha1":"cbb00f3d3c77eb0610d8b055914a1e4d4e0ae31c","sha256":"d15f3f88255dd4a36336ac6237fbca7cf57c9283cc4bfa401844d13bac2b426c","sha512":"834a0cc0bc26a9ba6a4c42a1f3471e5b14206f0a0176f52599e7d3ee76bf3297717c13a8f603ba1c8171e34c7aff9d17a492fbbecf958c422bf460568e8dd34d","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpK538:M+tI/y6yekn+f8QZRtpGKuBjdu+538","tlshash":"6ef1ce90081a9400ab930cd273cf3e36ed4f51157186c8b6abfd58acede7d27925974d","first_seen":"2025-10-25T20:28:00.664413Z","last_seen":"2025-10-25T20:28:00.664413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cleansasve.com/aba.php?id=4564","fqdn":"cleansasve.com","domain":"cleansasve.com","tld":"com"},"ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cleansasve.com/adn2.php?id=1244\u0026sitea=bosmusas","date":"2025-10-25T20:27:26.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cleansasve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 14:32:14 GMT","end":"Sun, 28 Dec 2025 15:30:57 GMT"},"fingerprint":{"sha1":"71:C0:F3:F2:3A:D0:DF:61:16:E0:BE:6C:9F:E8:57:0D:B6:CD:36:5F","sha256":"34:A0:F0:88:17:B6:D4:4F:FB:2B:73:31:24:2B:D2:F1:C0:53:0B:23:26:5A:E1:D1:CB:66:98:B0:F7:2A:9F:D1"}}},"request":{"raw":"GET /aba.php?id=4564 HTTP/1.1\r\nHost: cleansasve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cleansasve.com/adn2.php?id=1244\u0026sitea=bosmusas\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTToXYWYscXiN6IByHqCiN5aAN3dlyVcaxk5%2FbAGuAn07Kq6TFhO6ZGbwaLmEzvNeOnht%2BPor3cB2OJO2N0one8eTPGbvmOFa3QfA0G%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9944746169cd35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"203f389e11676c0caecb0169af8ed2dc","sha1":"2fba75e8d035fddeef780cd89dcaa09d2a45dce2","sha256":"f6c5bb856de5c3f3bc9ca850275669f57a10dd6b1cf2c00f168e40644d3fd5e4","sha512":"b1ac74df10f8115f65f7cca9eceb838291373021933e52638b6e5ff253074e450b495f2f9d21edd86c01a711c210a7a6d5f3e3c7691aa83337e036676e796410","ssdeep":"","tlshash":"caf0acaf2c6f1028092190aa227a659c3142300f51b7c3b83c99e2835fd073e50497fc","first_seen":"2025-10-13T14:06:18.539226Z","last_seen":"2026-03-31T01:30:42.349601Z","times_seen":94,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Sun, 25 Oct 2026 20:27:34 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-04T06:30:59.641326Z","times_seen":10782,"resource_available":false,"data":null}},"time_used":6744,"timings":{"blocked":3354,"dns":25,"connect":19,"send":0,"wait":33,"receive":0,"ssl":3307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/styles/jquery.fancybox-metal.css?v=6.0","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /styles/jquery.fancybox-metal.css?v=6.0 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 20 Nov 2018 14:54:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5bf42018-14fa\"\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5370,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ff32a4b30c99d3d5b84a0c94ffea62df","sha1":"a073177623778a7b869bb3c0a861ee36bf1e9c3d","sha256":"44b12ab03351303612fd44ca2ae25fe6916366310ecd1cac55a01baf299e1504","sha512":"eec81201bc5bf20d5da1a96f884598225b79b6f7ca36d93dbb3e7c78d6eb8e683ae2a7cd27f0de93d35147760696ca5b057b303b9bf75651d045c37393c63a7b","ssdeep":"96:hZ3Q04GobUJNn5UYZXda2sOTBRlSpUqSnyMgMz0zO2brOa82mQVCGUWM:hJJN5ho2sEBLA7SyMN0zbr1mQPM","tlshash":"28b1d8afa591300a643bae54e77f5a69ce710421b60201ffb1acf12583d87f671b24dc","first_seen":"2023-06-03T16:02:17Z","last_seen":"2025-10-25T20:28:00.667212Z","times_seen":3,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":77,"dns":1,"connect":18,"send":0,"wait":21,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1257/?remote_uid=3062215412326782000","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:10 GMT","end":"Fri, 28 Nov 2025 23:22:09 GMT"},"fingerprint":{"sha1":"DF:8A:AE:8B:ED:44:80:4D:3B:EB:26:59:E2:5F:93:03:BC:7D:31:F4","sha256":"D9:6C:DC:4A:1E:9E:64:3A:2B:71:51:9B:CD:A8:75:44:2E:9A:DC:B5:A7:C8:35:79:8A:0E:0C:05:6E:D6:AD:FB"}}},"request":{"raw":"GET /match/1257/?remote_uid=3062215412326782000 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: jcsuuid=ZBXNkcyWgz6qFPWseOMK\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nset-cookie: jcsuuid=ZBXNkcyWgz6qFPWseOMK; expires=Sun, 25 Oct 2026 20:27:25 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-04T06:47:40.21562Z","times_seen":6194,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/skin/fonts/ktplayeryt.ttf?wqseia","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/skin/fonts/ktplayeryt.ttf?wqseia HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/player/skin/youtube.css\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:22 GMT\r\nContent-Type: application/font-sfnt\r\nContent-Length: 2264\r\nConnection: keep-alive\r\nLast-Modified: Sat, 08 Jun 2019 12:16:36 GMT\r\nETag: \"8d8-58aceeb1f9881\"\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"application/font-sfnt","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, ktplayeryt ","md5":"c89ca428be45c3c212c5658a05823a10","sha1":"74916a018bea5b27c223f164e2355ddb78422b4f","sha256":"bf86d8eb9277b69e2c6202ca711c3b19c64a2a9a8cf4ba7bc33bdecacfb8a0b2","sha512":"62e0d7ee58a9f64490dac69a5ab8abf6d9dab9ef366698a80bb7c0478f40ba32110de60ed9908cf375118d00022daf5ba3a217bdd4ed9da9609a553bcc062abe","ssdeep":"","tlshash":"d6414316b7d68d09c15207bc85f2436dabfecd79933ed347a5802646acba3d05d213b8","first_seen":"2023-04-07T05:09:52Z","last_seen":"2026-04-02T10:22:00.547128Z","times_seen":1923,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cleansasve.com/abastandart2.php?id=3","fqdn":"cleansasve.com","domain":"cleansasve.com","tld":"com"},"ip":{"addr":"172.67.191.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cleansasve.com/abal.php?id=324","date":"2025-10-25T20:27:26.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cleansasve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 14:32:14 GMT","end":"Sun, 28 Dec 2025 15:30:57 GMT"},"fingerprint":{"sha1":"71:C0:F3:F2:3A:D0:DF:61:16:E0:BE:6C:9F:E8:57:0D:B6:CD:36:5F","sha256":"34:A0:F0:88:17:B6:D4:4F:FB:2B:73:31:24:2B:D2:F1:C0:53:0B:23:26:5A:E1:D1:CB:66:98:B0:F7:2A:9F:D1"}}},"request":{"raw":"GET /abastandart2.php?id=3 HTTP/1.1\r\nHost: cleansasve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cleansasve.com/abal.php?id=324\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtTvhuirj7M1OnEVMbZ9cX6pkTHuvhrOOSabIh35edKBF77BYp8n1gVsIDhIPgAbVcy%2BCtV7eYdOG6HOsQ9gXAaC94gohGbhhtYMsZbE\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 994474625bf335a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"471c5f225e1f51a634fc7845157a7331","sha1":"17337faa3734397f4c94f4cb8dec5ca5082dbf18","sha256":"9c7c46bb1fd5f03f61cd2b4e4a76bccfd6d042beb53baec561562438d242788f","sha512":"531e135fa5235fc6ac81b939216cf8ada81bce417796f599fa4cab292d2ef542f1fa80c74962ae6b42bf82abaa5cb14a77791c51fa2d6b66147f7ff4cef9e73e","ssdeep":"","tlshash":"d1c08cf3e50a030da2874014aa9215445b82549ab6f4dba498f03a92308128f1ce9b0d","first_seen":"2025-10-09T05:10:56.709698Z","last_seen":"2025-10-28T07:28:18.12983Z","times_seen":6,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cleansasve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 08:32:39 GMT","end":"Tue, 02 Dec 2025 08:32:38 GMT"},"fingerprint":{"sha1":"60:0F:5E:BC:74:09:D9:0B:43:F4:67:D4:E5:3C:8D:6B:66:34:81:96","sha256":"91:ED:2F:10:60:88:EF:A8:60:89:46:1D:A0:EE:FE:F2:2B:45:01:4E:99:DB:7E:CD:D5:3E:A9:E4:08:26:B6:40"}}},"request":{"raw":"GET /skins/nmain.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 23 Oct 2025 08:52:25 GMT\r\netag: W/\"68f9ecc9-925a3\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 20:32:30 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"ad95b65ecbcf789a8ccd2d54f165587a","sha1":"c8b4b9ba2510a3bcf5b7882ef299362b73526498","sha256":"c56828cfcd5217721a7c360d3c3e675da4a8fbcfaab123d4c1a7c1f1af830b40","sha512":"265ebb6e804700700b53ec25d37b2f88290b951f1a79b5547715cba26a58c78d030deaa217346178a517fc1f9a5d542c9507dceee2b629d589c5b6d16d313946","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPW0hMs4hs:JONux6EHOJcFnagwxdRwl","tlshash":"d8d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","first_seen":"2025-10-23T10:57:14.90805Z","last_seen":"2025-10-27T08:33:06.75464Z","times_seen":79,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","date":"2025-10-25T20:27:22.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 351872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 17:53:58 GMT\r\nexpires: Tue, 20 Oct 2026 17:53:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 441204\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825565,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-03-21T15:49:57.335649Z","times_seen":18193,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"13.248.148.254","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.multstorage.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 02:54:50 GMT","end":"Mon, 22 Dec 2025 02:54:49 GMT"},"fingerprint":{"sha1":"A7:F0:92:B0:60:17:0F:89:16:0D:51:27:DB:FE:C6:A0:D9:39:15:0F","sha256":"D8:BB:7C:8D:91:E4:6A:95:F9:86:5F:70:CE:DE:E9:AA:14:7C:0B:84:56:FC:96:09:E6:62:FD:5E:68:8E:E2:11"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 410 Gone\r\nalt-svc: h3=\":50944\"; ma=2592000\r\nserver: Caddy\r\ncontent-length: 0\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"410","status_text":"Gone","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riamiavid.com/sweetie/hello.min.js?id=1741555614","fqdn":"riamiavid.com","domain":"riamiavid.com","tld":"com"},"ip":{"addr":"23.109.94.28","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riamiavid.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 18:26:46 GMT","end":"Sun, 18 Jan 2026 18:26:45 GMT"},"fingerprint":{"sha1":"82:6B:71:4B:D8:F7:59:87:22:DB:AE:3D:BC:FA:F1:06:1F:62:1A:2B","sha256":"63:2A:11:1F:59:AF:D9:66:1A:7B:9B:C7:76:A2:70:CE:FF:3D:74:B8:63:B9:5F:D3:1E:28:65:4E:D9:D6:BB:3C"}}},"request":{"raw":"GET /sweetie/hello.min.js?id=1741555614 HTTP/1.1\r\nHost: riamiavid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.29.0\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Fri, 27 Dec 2024 10:16:41 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"676e7e89-16a61\"\r\nExpires: Tue, 04 Nov 2025 20:27:20 GMT\r\nCache-Control: max-age=864000\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92769,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6613)","md5":"2c6e9d0a8d2e00a3feed00afca2c8b28","sha1":"436538f4846d5ea735bb30a7e1f0a10bdec3017f","sha256":"c05934c5b5ccdb6ec08eeb8aef37562cd49211671292492575123c78ed447c15","sha512":"964b53bf937410f114ac9dd6ad38fa07c8f5dd61f0a6343e902ab03dd40c93467f5a554e64d1e6cc87bdba3dc8234882a9e555c134202fa406ac5d3d45c01525","ssdeep":"1536:oxKna2vaxQEXJpvJSntYbmDful8zinp5SqrZI9CPnnwQIdRNWGLI/VINu:oEa/bJSnFui5WAu","tlshash":"20933ae433e3683952e783c97aa50340b2354446e917449cf97c98d7bb6590a70fabfc","first_seen":"2024-12-29T14:40:13.371959Z","last_seen":"2026-04-02T15:59:05.982612Z","times_seen":129,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":3,"connect":22,"send":0,"wait":60,"receive":1,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.new-programmatic.com/userbind?src=clcadlla\u0026id=3062215412326782139","fqdn":"match.new-programmatic.com","domain":"new-programmatic.com","tld":"com"},"ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"admanager.geniusgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 12:11:31 GMT","end":"Thu, 11 Dec 2025 12:11:30 GMT"},"fingerprint":{"sha1":"21:6E:11:68:B3:E8:49:45:76:47:46:92:C8:99:2D:61:31:B4:29:54","sha256":"2A:28:74:F4:0D:CC:1A:83:FE:4D:04:CB:15:2D:AB:B6:70:0B:BC:30:81:E9:A0:B6:25:28:B7:72:B9:BD:DF:C2"}}},"request":{"raw":"GET /userbind?src=clcadlla\u0026id=3062215412326782139 HTTP/1.1\r\nHost: match.new-programmatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.22.1\r\nDate: Sat, 25 Oct 2025 20:27:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":97,"dns":1,"connect":29,"send":0,"wait":44,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4345b902be.9655b68ff3.com/in/multy","fqdn":"4345b902be.9655b68ff3.com","domain":"9655b68ff3.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9655b68ff3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 14:04:09 GMT","end":"Mon, 19 Jan 2026 14:04:08 GMT"},"fingerprint":{"sha1":"F1:03:21:BB:7E:7C:A4:0D:A9:0D:1E:CC:90:32:C7:30:1D:4B:76:33","sha256":"4B:B0:63:1F:19:1C:AF:FD:BD:09:CC:02:A2:30:43:0C:09:85:85:95:C2:6A:95:22:6C:6F:1A:73:F0:58:00:28"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: 4345b902be.9655b68ff3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.smaxim.com.ru/\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 20:27:30 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":97,"dns":32,"connect":25,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"4345b902be.9655b68ff3.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtbbtr.com/banner/in/show/?mid=5896698256429650633\u0026pid=0\u0026site=1435179\u0026sc=\u0026usage_type=DCH\u0026subid=1410471080\u0026sid=0\u0026cid=22170\u0026price=0\u0026is_cpm=1\u0026cpm=0.0002\u0026ecpm=0.0002\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.90.3\u0026ver_c=\u0026refdom=www.smaxim.com.ru\u0026hostname=auc-banner-hz-14\u0026site_id=0\u0026spot_id=1435179\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1435179\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026min_cpm=0.0001\u0026placement_type_id=269\u0026verify_hash=dd861f6bd81e57c454bf68e31a5ccc22dc887955835149d4d4cca13be37f6ed6\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=c\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3062215412326782139\u0026icon=%2F%2Frtbadserv.com%2Fadda42.php\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%2C%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%2C(1982)%2C21%2B%2C%D0%90%D1%80%D1%82-%D1%85%D0%B0%D1%83%D1%81%2C%D0%92%D0%B8%D0%B4%D0%B5%D0%BE%2C%D0%A4%D0%B8%D0%BB%D1%8C%D0%BC%2C%D0%9A%D0%BB%D0%B0%D1%81%D1%81%D0%B8%D0%BA%D0%B0%2C%D0%A0%D0%B5%D1%82%D1%80%D0%BE%2C%D0%A3%D0%B6%D0%B0%D1%81%D1%8B%2C%D0%A2%D1%80%D0%B8%D0%BB%D0%BB%D0%B5%D1%80%2C%D0%B4%D0%BE%D0%BC%D0%B0%2C%D1%81%D1%82%D0%B0%D1%80%D1%8B%D0%B5%2C%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%2C%D0%BD%D0%B0%D0%B3%D0%BE%D1%82%D0%B0%2C%D0%BD%D0%B5%D0%B7%D0%B0%D0%B2%D0%B8%D1%81%D0%B8%D0%BC%D1%8B%D0%B9%2C%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%2C%D0%BC%D0%B0%D1%81%D1%82%D1%83%D1%80%D0%B1%D0%B0%D1%86%D0%B8%D1%8F%2C%D0%B3%D1%80%D1%83%D0%BF%D0%BF%D0%BE%D0%B2%D0%BE%D0%B9%2C%D1%81%D0%B5%D0%BA%D1%81%2C%D0%BB%D0%BE%D0%B1%D0%BA%D0%BE%D0%B2%D1%8B%D0%B5%2C%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%2C%D0%BE%D1%80%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%2C%D1%81%D0%B5%D0%BA%D1%81%2C%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%2C%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%2C%D0%BD%D0%B0%2C%D0%BB%D0%BE%D0%B1%D0%BA%D0%B5%2C%D0%B0%D0%B2%D1%82%D0%BE%D0%B1%D1%83%D1%81%D0%BD%D0%B0%D1%8F,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1435179\u0026original_bid_usd=0.0002\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00046410852252658176\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=53604833\u0026auction_time=1761424045\u0026account_id=3373\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1761424045\u0026ip_mismatch=false\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=BDSM,Adult,Masturbation\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.07131799356947219\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=6850\u0026advanced_pub_id=6850\u0026lv_id=0\u0026entry_source=direct","fqdn":"rtbbtr.com","domain":"rtbbtr.com","tld":"com"},"ip":{"addr":"195.201.208.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbbtr.com/get/?go=1\u0026data=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","date":"2025-10-25T20:27:25.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 11:40:25 GMT","end":"Wed, 07 Jan 2026 11:40:24 GMT"},"fingerprint":{"sha1":"4C:2F:3B:EF:F4:3B:F0:06:66:A4:CC:D0:2F:52:5E:96:B4:DA:FD:DF","sha256":"6F:15:D0:A4:DD:A4:6F:A6:5F:28:DB:5F:E9:A1:C0:15:5D:53:34:91:A8:84:99:BA:14:33:3D:36:3B:0C:BD:CA"}}},"request":{"raw":"GET /banner/in/show/?mid=5896698256429650633\u0026pid=0\u0026site=1435179\u0026sc=\u0026usage_type=DCH\u0026subid=1410471080\u0026sid=0\u0026cid=22170\u0026price=0\u0026is_cpm=1\u0026cpm=0.0002\u0026ecpm=0.0002\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.90.3\u0026ver_c=\u0026refdom=www.smaxim.com.ru\u0026hostname=auc-banner-hz-14\u0026site_id=0\u0026spot_id=1435179\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1435179\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026min_cpm=0.0001\u0026placement_type_id=269\u0026verify_hash=dd861f6bd81e57c454bf68e31a5ccc22dc887955835149d4d4cca13be37f6ed6\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=c\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3062215412326782139\u0026icon=%2F%2Frtbadserv.com%2Fadda42.php\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=%D0%A3%D0%BA%D1%80%D0%BE%D1%89%D0%B5%D0%BD%D0%B8%D0%B5%2C%D0%A0%D0%B5%D0%B1%D0%B5%D0%BA%D0%BA%D0%B8%2C(1982)%2C21%2B%2C%D0%90%D1%80%D1%82-%D1%85%D0%B0%D1%83%D1%81%2C%D0%92%D0%B8%D0%B4%D0%B5%D0%BE%2C%D0%A4%D0%B8%D0%BB%D1%8C%D0%BC%2C%D0%9A%D0%BB%D0%B0%D1%81%D1%81%D0%B8%D0%BA%D0%B0%2C%D0%A0%D0%B5%D1%82%D1%80%D0%BE%2C%D0%A3%D0%B6%D0%B0%D1%81%D1%8B%2C%D0%A2%D1%80%D0%B8%D0%BB%D0%BB%D0%B5%D1%80%2C%D0%B4%D0%BE%D0%BC%D0%B0%2C%D1%81%D1%82%D0%B0%D1%80%D1%8B%D0%B5%2C%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%2C%D0%BD%D0%B0%D0%B3%D0%BE%D1%82%D0%B0%2C%D0%BD%D0%B5%D0%B7%D0%B0%D0%B2%D0%B8%D1%81%D0%B8%D0%BC%D1%8B%D0%B9%2C%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%2C%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B0%D1%8F%2C%D0%BC%D0%B0%D1%81%D1%82%D1%83%D1%80%D0%B1%D0%B0%D1%86%D0%B8%D1%8F%2C%D0%B3%D1%80%D1%83%D0%BF%D0%BF%D0%BE%D0%B2%D0%BE%D0%B9%2C%D1%81%D0%B5%D0%BA%D1%81%2C%D0%BB%D0%BE%D0%B1%D0%BA%D0%BE%D0%B2%D1%8B%D0%B5%2C%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%2C%D0%BE%D1%80%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%2C%D1%81%D0%B5%D0%BA%D1%81%2C%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%2C%D0%B2%D0%BE%D0%BB%D0%BE%D1%81%D1%8B%2C%D0%BD%D0%B0%2C%D0%BB%D0%BE%D0%B1%D0%BA%D0%B5%2C%D0%B0%D0%B2%D1%82%D0%BE%D0%B1%D1%83%D1%81%D0%BD%D0%B0%D1%8F,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1435179\u0026original_bid_usd=0.0002\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00046410852252658176\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=53604833\u0026auction_time=1761424045\u0026account_id=3373\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1761424045\u0026ip_mismatch=false\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=BDSM,Adult,Masturbation\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.07131799356947219\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=6850\u0026advanced_pub_id=6850\u0026lv_id=0\u0026entry_source=direct HTTP/1.1\r\nHost: rtbbtr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbbtr.com/get/?go=1\u0026data=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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://preroll.hostave3.net/notifications/zeropixel.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/kt_player.js?v=3.0.13.1","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/kt_player.js?v=3.0.13.1 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Mon, 16 Jun 2025 14:33:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68502b32-298fc\"\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170236,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33677)","md5":"45904382d1f33800fb3d84e1c87227ef","sha1":"c32086104f3a2e357efef80bc3f66a2b07a7d7d9","sha256":"8931e182f464d05ac41f612f4bccd0c15111a5cb120e2f9e9e908af7fe33e189","sha512":"a2f169e2913356ef56d10c5d62d3c5f90c9df78a30089088af50f18e1dd7c5b01de1d4ef687d7e4493540eab7895d86edd8777bb8c35d43d092a7ea0628c4882","ssdeep":"1536:R1hxd1GlUwI74w01zICfJ96iDHNKJ6ErUxbZiS5+6LTu88kzZf13F2kj9Hkgaxe:7hIlTR96i7wPylbuFkzp13F2SHC0","tlshash":"24f32a9a7240b8b243d724f4419f290b7037ad36e89ec9a0f1a6d9e47e79c58017ff19","first_seen":"2025-06-23T02:10:43.678358Z","last_seen":"2026-03-28T19:40:50.055106Z","times_seen":270,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-63S0F026EX\u0026cid=1139633046.1761424043\u0026gtm=45je5am0v9179764099za200zd9179764099\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115938466~115938469~116217636~116217638\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115938466~115938469~116217636~116217638\u0026z=1393675678","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:37:03 GMT","end":"Wed, 24 Dec 2025 14:37:02 GMT"},"fingerprint":{"sha1":"01:07:2F:3E:9D:0C:AF:61:3D:59:70:51:C6:74:49:1C:D9:36:BA:88","sha256":"AB:06:67:D9:B5:54:EF:27:3A:97:65:78:F5:E0:A6:5C:49:07:D7:4D:4D:59:57:DD:A3:67:7C:96:84:79:19:4F"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-63S0F026EX\u0026cid=1139633046.1761424043\u0026gtm=45je5am0v9179764099za200zd9179764099\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115938466~115938469~116217636~116217638\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115938466~115938469~116217636~116217638\u0026z=1393675678 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 25 Oct 2025 20:27:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T06:45:41.005484Z","times_seen":761893,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":113,"dns":13,"connect":28,"send":0,"wait":48,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LegvoYpAAAAABclidx5xTyIlVnUTy-pbRCDtv2r\u0026co=aHR0cHM6Ly93d3cuc21heGltLmNvbS5ydTo0NDM.\u0026hl=en\u0026v=-PgDGgfmUF0ySmnjMTJjzqak\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=br4j3kgfxqfv","date":"2025-10-25T20:27:23.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 08:03:23 GMT\r\nexpires: Mon, 27 Oct 2025 08:03:23 GMT\r\ncache-control: public, max-age=604800\r\nage: 476640\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-04T06:43:15.28694Z","times_seen":541057,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 10734\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 54\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc8c28f045edba48c5262d4fa587f8eb","sha1":"cc59790d790cb8cd0553544f55825c3e2a8cb461","sha256":"3ab6eef81ca993d28591b2ec9b6e1f100a9091df9808d183c8c6e63d4966da92","sha512":"5e84d2cebcf73fcddcb9dd277db3efb9e8fe4074e028161ba1adf22e64ef05fdd34bba47226278718d7790e3b319995b02195ff237db57c930905c6f079d127e","ssdeep":"","tlshash":"54900244708904165ec65a8235058909bc5cd2d145421c9559e104485319654514955d","first_seen":"2025-10-25T20:28:00.671811Z","last_seen":"2025-10-25T20:28:00.671811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trk-web.com/win/t-5pAh9eXKfn4PxxDXJLl86K43gut3ua45MeSYajw2rLOPnTRY9VHS1r76dycN3ebEWkQv-ZFxjaVN2_b9VbGx1_EuZY3Xue-EUIdkzDlhCaQKhmJD0JuZp0WWyeKKp70xpGHLt8V8tUM9OkDjknCHlwsncXe6-itBkA5rQjH3BE?aprice=0.5004719999999999\u0026amtw=${AUCTION_MIN_TO_WIN}\u0026e=600415\u0026advt=5","fqdn":"trk-web.com","domain":"trk-web.com","tld":"com"},"ip":{"addr":"173.233.145.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:31.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trk-web.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 14:14:27 GMT","end":"Mon, 05 Jan 2026 14:14:26 GMT"},"fingerprint":{"sha1":"36:49:BA:1F:E0:B7:7F:EF:BA:21:71:D0:1C:90:86:F3:C7:FF:4E:17","sha256":"9F:19:9A:16:2F:FE:36:E7:06:2A:D8:43:01:A0:F6:94:34:AF:B4:9C:AF:8B:EF:A5:99:E7:1D:98:6D:EE:C3:B4"}}},"request":{"raw":"GET /win/t-5pAh9eXKfn4PxxDXJLl86K43gut3ua45MeSYajw2rLOPnTRY9VHS1r76dycN3ebEWkQv-ZFxjaVN2_b9VbGx1_EuZY3Xue-EUIdkzDlhCaQKhmJD0JuZp0WWyeKKp70xpGHLt8V8tUM9OkDjknCHlwsncXe6-itBkA5rQjH3BE?aprice=0.5004719999999999\u0026amtw=${AUCTION_MIN_TO_WIN}\u0026e=600415\u0026advt=5 HTTP/1.1\r\nHost: trk-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 25 Oct 2025 20:27:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":279,"dns":1,"connect":127,"send":0,"wait":139,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:31.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15768\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:31:53 GMT\r\netag: \"676563b9-3d98\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x108, components 3","md5":"2e22068d6c028aae1484dcb188b0dbe9","sha1":"06166176ce916ec30e700a8ef14e2a4e0281a165","sha256":"cf28e006bd60694e75878484f862907a9d9c128d2daae08f098ad33aa08ef267","sha512":"45145af081276c9bc141403ac0319efcf202b92768863ae052d164e63c0e090d3b5ac2ede3316109469f7203f0154cec9e77d01ddbff49b38fbd2e1ba9aa805e","ssdeep":"384:HyfTep7svYXcGF5L5wEpTVJp5Peme8sl84fruMH4M:kQXcW5ZVJ7eLTlzrj4M","tlshash":"e062d0504c6205e7cf68bf0ba4d064a23ece2a27d584e966e904f848f1b2deac45ac4d","first_seen":"2025-08-11T01:48:06.622057Z","last_seen":"2025-12-29T02:51:31.481286Z","times_seen":451,"resource_available":false,"data":null}},"time_used":6546,"timings":{"blocked":3248,"dns":25,"connect":21,"send":0,"wait":30,"receive":19,"ssl":3197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:24.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 10734\r\nOrigin: https://www.smaxim.com.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 20:27:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 54\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"378d548967c674b7d803f09f8e25a35d","sha1":"1785b255946232e5b3a5b5668804fb50d5bb6aed","sha256":"d63f2e7c52281a63e81ee46beb5cdda900c4fa932aa72a6dc1d0570e938b7296","sha512":"c0619d7169ac4e8b5b40882df53cf98200fe1f7b964dc247d58379c4ce2a6b187e9f1343951ad3ed16649562c1962dc052383efa50d0720cff75901d48d2ed8a","ssdeep":"","tlshash":"f1900244b08a18121ec65a8139059915ac5cd3e145422d99696210445219654514951d","first_seen":"2025-10-25T20:28:00.674074Z","last_seen":"2025-10-25T20:28:00.674074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/images/sample/retro/250-8.jpg","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:20.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /images/sample/retro/250-8.jpg HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126454\r\nLast-Modified: Sun, 13 Oct 2024 10:39:46 GMT\r\nConnection: keep-alive\r\nETag: \"670ba372-1edf6\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x250, components 3","md5":"1f74078418793234ffe70823acbe4d61","sha1":"dae24b57516bd5658c78dcc3a16200a6e21905df","sha256":"c3bb97d1ff9eb06f644b76f2244f2cf5d6747b7c973e4a18d5a930ca1dcb21fa","sha512":"86e00eb5b36496f58c6a648245dfda9050ea26e2b4de5396c46c861e7ef7b97ee5dea20682d13030c67f76f23ab4ac0759d3d29a949e2dbf826b43c8397ae2e8","ssdeep":"3072:7JwfshUXEgfLAMgN/tOdZCnw/qSpsqP9HE1QZGddMCVQdoVjh0:7NhUXEM0MgmZCw/JpTVEJdM1dop+","tlshash":"37c312af53b580a67c45b36e634cccc3b6293f74b1b961240192d24ec850fb52bd96eb","first_seen":"2025-10-25T20:28:00.675484Z","last_seen":"2025-10-25T20:28:00.675484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":26,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/player_ads.html?advertising_id=0.05864330711993759\u0026adzone=0.5365775643084258","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:22.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/player_ads.html?advertising_id=0.05864330711993759\u0026adzone=0.5365775643084258 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1; _ga_63S0F026EX=GS2.1.s1761424042$o1$g0$t1761424042$j60$l0$h1261906665; _ga=GA1.1.1139633046.1761424043\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2fadb511fd427c8fad79cd9202467f7b","sha1":"935fd00e517dd932491f3aa02a600d893c826d93","sha256":"b800881548eb81b99bf88898b73e591217723b54f172fe209488722d6c98e358","sha512":"4738adcfba205d190839501b8e76827b5a9108f28877a95f5112529e4cc53a9417a341db3168474350c2a867d107a995076a4933aa5b4d2cf71ceeb937a76c3f","ssdeep":"","tlshash":"249002509c15e511867b101c9e21f30d565455655801814009cca00631456834c00480","first_seen":"2023-05-13T00:55:55Z","last_seen":"2026-03-28T16:05:44.163143Z","times_seen":156,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1410/?remote_uid=3062215412326782139","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:25.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:10 GMT","end":"Fri, 28 Nov 2025 23:22:09 GMT"},"fingerprint":{"sha1":"DF:8A:AE:8B:ED:44:80:4D:3B:EB:26:59:E2:5F:93:03:BC:7D:31:F4","sha256":"D9:6C:DC:4A:1E:9E:64:3A:2B:71:51:9B:CD:A8:75:44:2E:9A:DC:B5:A7:C8:35:79:8A:0E:0C:05:6E:D6:AD:FB"}}},"request":{"raw":"GET /match/1410/?remote_uid=3062215412326782139 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 25 Oct 2025 20:27:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nset-cookie: jcsuuid=pNYdDDhr4RV0iX5pjpcR; expires=Sun, 25 Oct 2026 20:27:25 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-04T06:47:40.21562Z","times_seen":6194,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":39,"dns":1,"connect":17,"send":0,"wait":17,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"172.67.174.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tsyndicate.com/iframes2/2f90135699ad41d59dea962ea12ae787.html?extid={extid}","date":"2025-10-25T20:27:26.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 04:11:27 GMT","end":"Thu, 01 Jan 2026 05:09:55 GMT"},"fingerprint":{"sha1":"2E:5D:41:6D:E1:C9:9D:63:98:30:E4:63:6C:30:32:92:E0:1D:12:8B","sha256":"50:B2:69:48:FB:B6:5E:DD:EC:13:39:31:E7:74:94:FE:44:FD:83:C0:2C:3A:77:52:A0:AD:3B:4D:30:7E:2A:C8"}}},"request":{"raw":"GET /creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=\u0026preview_mode=hover\u0026s1=HiTNef6TSygnzvMOUuzNXMGh3Hy7q8tBneB5hSAQaQ3hT6bquqNWr-H_r4lz9BrwlMwwI_TjqKuPhOzvGGIdQd7B6odQS6mmBTKEVqiWZqEeVIUzMA_gUIDRUi HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tsyndicate.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 20:27:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 25 Sep 2025 15:19:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWkaa%2FWjeBl48i81Flf4mRrLBLlYgShNo719M3uy4V9mWj34wpObrl8JBXodLp%2FJ5K1ncptKAJVm6vaBiKtb4atydzA46H%2B2\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 994474654f9c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7723,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a996e3d8e6153c1eee0bddaa3d84d7cb","sha1":"84919b86824bfda861e51ee069f5b5c8d672f6ee","sha256":"12c37b7b91db198667456eae7e173f285e145f330a6c8987bde56fa8868474c5","sha512":"99a0ecaa86b50a370ae08bcfced174e0d864f1d22022abc6bc4c0e9e85bbc6b20e4a0184711c08fbd76ed6f60f0b8d3c83dc7dcc52f5eee943280fcd4f8d8345","ssdeep":"96:LXM3HEuHtQquVJFgMb/k1EFT47IwnUukpzFNqEsOu5U+FNdMKKO1Fo2JgkLXWFDb:CkuHtQquVZZwL5U+FYOQhkqLYIWa","tlshash":"2ef1846597bf2462515361d9afab6394343d8107b602ce89beee91d00f8dc0882f3bdd","first_seen":"2025-09-26T19:53:07.494221Z","last_seen":"2025-11-07T11:00:16.625861Z","times_seen":226,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":26,"dns":5,"connect":1,"send":0,"wait":43,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4345b902be.9655b68ff3.com/in/show/?tag_ab=c\u0026site_id=3111186\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3963\u0026page=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026refdom=www.smaxim.com.ru\u0026auction_time=1761424050\u0026subid=2025691240\u0026sid=626324297\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=11186\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=100\u0026kubik_score=99.823\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2025691240%26spot_id%3D11186%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.smaxim.com.ru%252Fvideos%252F53208%252Fukroshchenie-rebekki-1982%252F%26idzone%3D0%26sid%3D1546\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Frcdn-web.com%2Ft%2Fr.html%3Ft%3Dhttps%253A%252F%252Ffhvfd.com%252Fapi%252Fsubmit_form_request%253Fp%253D4649ee75-abea-43cc-bbce-8d1d74ed9d22%2526ts%253D1761424050%2526z%253D8863325\u0026icons=Xz1g6-YD98uN6vdbF2qMcYDjtufbRqPGJ0fE8fDYWRVIOj2aQ0jLCfTg1Jy30T7WJ11vPpzHh9EzJsRlNSx2hCcTJE9sLbKkiD2oNV-lkGxiih4d71ssIOzMA6TQP--eonvJS_iT5FL7XVOyw-mqxA12C6BB3ELBjmw6HkdsKT8Rou0aLw\u0026ext_cid=0\u0026px_id=10884517\u0026min_cpm=0.15357581363265219\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=4217\u0026cid=22320\u0026uniq=\u0026mid=7030393410010430299\u0026skin_id=52\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.10989051695224905\u0026cpm=0.10989051695224905\u0026verify_hash=533dda1765de410d30c0d91da8d9eb90\u0026verify_hash_v2=487a7ac29a8e104c3ff0c83049b9a2737b069c84c13b5f66118cd64d7c8824fb\u0026is_native=2\u0026real_bid=0.000500472\u0026original_bid_usd=0.000500472\u0026original_bid=0.000500472\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=0,108,4,89,20,27,150\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000500472\u0026hostname=auc-inpage-hz-6-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=vintage,bdsm,masturbation,adult\u0026pop_cpc=0.000000500472\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Masturbation%2CAdult%2CVintage%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.21957375627857115\u0026social_network=\u0026publisher_id=6850\u0026advanced_pub_id=1007370\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026mlf=1\u0026mlc=1\u0026cpa=0e182d0a-2386-40b9-a17c-eb926f962a4f\u0026prev_step_diff=534\u0026st=0.16","fqdn":"4345b902be.9655b68ff3.com","domain":"9655b68ff3.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9655b68ff3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 14:04:09 GMT","end":"Mon, 19 Jan 2026 14:04:08 GMT"},"fingerprint":{"sha1":"F1:03:21:BB:7E:7C:A4:0D:A9:0D:1E:CC:90:32:C7:30:1D:4B:76:33","sha256":"4B:B0:63:1F:19:1C:AF:FD:BD:09:CC:02:A2:30:43:0C:09:85:85:95:C2:6A:95:22:6C:6F:1A:73:F0:58:00:28"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=3111186\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3963\u0026page=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026refdom=www.smaxim.com.ru\u0026auction_time=1761424050\u0026subid=2025691240\u0026sid=626324297\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=11186\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=100\u0026kubik_score=99.823\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2025691240%26spot_id%3D11186%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.smaxim.com.ru%252Fvideos%252F53208%252Fukroshchenie-rebekki-1982%252F%26idzone%3D0%26sid%3D1546\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Frcdn-web.com%2Ft%2Fr.html%3Ft%3Dhttps%253A%252F%252Ffhvfd.com%252Fapi%252Fsubmit_form_request%253Fp%253D4649ee75-abea-43cc-bbce-8d1d74ed9d22%2526ts%253D1761424050%2526z%253D8863325\u0026icons=Xz1g6-YD98uN6vdbF2qMcYDjtufbRqPGJ0fE8fDYWRVIOj2aQ0jLCfTg1Jy30T7WJ11vPpzHh9EzJsRlNSx2hCcTJE9sLbKkiD2oNV-lkGxiih4d71ssIOzMA6TQP--eonvJS_iT5FL7XVOyw-mqxA12C6BB3ELBjmw6HkdsKT8Rou0aLw\u0026ext_cid=0\u0026px_id=10884517\u0026min_cpm=0.15357581363265219\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=4217\u0026cid=22320\u0026uniq=\u0026mid=7030393410010430299\u0026skin_id=52\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.10989051695224905\u0026cpm=0.10989051695224905\u0026verify_hash=533dda1765de410d30c0d91da8d9eb90\u0026verify_hash_v2=487a7ac29a8e104c3ff0c83049b9a2737b069c84c13b5f66118cd64d7c8824fb\u0026is_native=2\u0026real_bid=0.000500472\u0026original_bid_usd=0.000500472\u0026original_bid=0.000500472\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=0,108,4,89,20,27,150\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000500472\u0026hostname=auc-inpage-hz-6-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=vintage,bdsm,masturbation,adult\u0026pop_cpc=0.000000500472\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Masturbation%2CAdult%2CVintage%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.21957375627857115\u0026social_network=\u0026publisher_id=6850\u0026advanced_pub_id=1007370\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026mlf=1\u0026mlc=1\u0026cpa=0e182d0a-2386-40b9-a17c-eb926f962a4f\u0026prev_step_diff=534\u0026st=0.16 HTTP/1.1\r\nHost: 4345b902be.9655b68ff3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 20:27:31 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"4345b902be.9655b68ff3.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4345b902be.9655b68ff3.com/in/show/?tag_ab=c\u0026site_id=3111186\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3963\u0026page=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026refdom=www.smaxim.com.ru\u0026auction_time=1761424050\u0026subid=2025691240\u0026sid=626324297\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=11186\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=100\u0026kubik_score=99.823\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2025691240%26spot_id%3D11186%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.smaxim.com.ru%252Fvideos%252F53208%252Fukroshchenie-rebekki-1982%252F%26idzone%3D0%26sid%3D1546\u0026is_cpm=0\u0026resp_type=\u0026crid=215722\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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_dXRtX3NvdXJjZT1odHRwczovL3R1YmUtdG9hZC5jb21cdTAwMjZhdWN0aW9uX2lkPXslYXVjdGlvbl9pZCV9IiwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInVoIjoiYWRhNzFhNzY2NTA5MzNjODZmYWVmYzJjZTNlYWZmZTMiLCJ1aSI6IjdiNmRhYTU2LTQxZjQtNTYyMC1iZTNjLTc4NmU4NGRiMDI5OSIsInVyIjoiMTg3OmlucGFnZV9hZHVsdF9tcV92MjozMTExMTg2OnRydWU6IiwidiI6IiIsInZmIjoiIn0.6en1d5QSuuG5h4hTNAo1DaXo-Fu13x__DMzFW-6Jais%26sp%3D2.6999999999999996e-05%26skin_id%3D52\u0026icons=r_LHKTzeJDFlZhSKvIuPiq_cUMbWNZg4oDvhTqDpsxtmrG8MttGlTbtlHmbCs8QH2hNFBR-3P5xNYjtAg5cQSyd5L2CPztKUoHAnRTnrHKyxOfTBBJDoI5TJjeKdNoikKFknnex7-x3M5bXGdB0h1QgpBrx_hxJCrP__XSnm8uDFHIaywN4qnlDdSEr9r7g_gXgbszDBhAyYWLijLUAjtw9UTjrReEmhEy5-Rpr933a1dR_XP7YyO7U_EhzUhHcgXiK7oFg-CV_3j9RBpNfMLgjk00jGeuKAWjxb-hYK07WBDEo-QS1_KP1DPmMajdRUQ90LoLovG_EDehqdi1ijQmZK6W3_aEdvb5R_7N32X0Yons2Ijbbx4QGNUhagLOnUYa03TsIp9CVNdYxZ_8V4J9svr_pv8FS1iHt7ZRTOox0wdh5WL3I1_5Ogu5V5QcWwzwRkmBADD1DRuK1qmZPeA7xIY7nqDmOQIUcB4XuPBXsxNL7WLPYRUO4TtJTsjVjw8aZOQo_B-eMA4ORlVc4SowwYwCBNtUm4KceYYwh1t1MbMXZyXyZVUVb-XXJWyj_PZW4eC36EV7r40qVJDwXVjF0cwyjdXNYcx1y7N7SALwBa97i8WBDS3kmKnfT5kP_PBFIg2GTAnnX7ur9TD_snVUtHjPto3QTvk4tFkzHAdk3etL2B-_EstUdkTBwiFt3u0XsTHDL1fk0p4ueY-8LUk7UQ4wAGREfYJNs4sHbVZ1Jmp93Qz4eId6AUWEBnQvqomgvLcVg24RypjWzaMBofBnLvzinXe3w1ktoLj1Yi0rbSxfd_cJX0zzURjiEMKWmKtfLw7jQzTlGQMpSWxrsDmDykH8KrdPdyQAVNKbCTp1Ge8Y_396POD68XMLtE4rSQ_baRNLDKzdlCkGVNF_PwpDqjVOyYeUUQLT3OpwarBuEhIrMycS65bXS001R3_BjcbGLOGkPxhj0g0PnKfIiyLjKEGJG3Ym2WOC1jbnNgklkkzbhxm8Z2AMkCnh2q4Szs4nbU4Uw2KlifT8uzbp0Hzv0nV5EL7vjIsdH--mapVGrRHMwkXa-NSsqem9rKL5ElwBXdDUUMfEyDu6odeOI6Pmwc8OwVFV7oTDM1Ro1hN0ZHEGN4kVJo60Ox_3n3kQeEcUsQ_etQ2aZFscxVZPcb46JzwoCtq-wNnb7IPMFAeB6QLGflfFYBGNxzEbBQKbWBWNVGK1JQ26z7Vs000nixqygIoKvnIuSiHmkG_6cThh7u6j_ifa_poSJPPC8YDAbyxuiBH8FQUaRkXBGWtMHP3jt-VId1bpFx3a88OhWjHOvA_iykzpCDWubg0Kol9k0R4-eQx1Kpuwbdl1W3BfloFLlnp4CVAELflzaB3eqY09Yn-lnJFPnSQHHx0ra-GbcrOos5-foH01rQiIpM-Jeemlmrw-MaF-BSHd1GFdp8hiDJcyDJ02x1yMI4Vbe6_gyqIy4ppik7KHPjbMZvimOIYnjJZJTg7h5O44XQ0BBcjZli77p2f9o508hY5KQOpFezJIA-jTLsPqt5NoFsMzct2fTJYfeYjOm4fCnrQ-OrdKt3R5gwT8PEO_M71O3atrU0nR8W_JNJdjtgIbVBt0Mh8t3suZ40X-xmBhlVF1x9-rIewHFJO3efHjUczQstI_ElbnTCImuNFyGVXTmo1KAP2bUYC0ys5wncGPgQ8p5K7ccoNzQfi5DhkO_XdISRmVzS2M2RfKAB3FCHrA0-92bHUT32QvrhGWjjVgXZAa392G9D5FsDs3Zq2w\u0026ext_cid=81347\u0026px_id=3111186\u0026min_cpm=0.05787058654554383\u0026out_id=0\u0026campaign_type=mq\u0026aid=3296\u0026cid=17911\u0026uniq=\u0026mid=7030393410010430299\u0026skin_id=52\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0021124513027652157\u0026cpm=0.0022339798674195924\u0026verify_hash=7933288ec76392f0723d2c5d878d65cc\u0026verify_hash_v2=d5d6c7988454591c039d9311284fd871f2a56e16a6005574eb77e03437aad893\u0026is_native=1\u0026real_bid=2.553119927644725e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=101,4,70,148,98\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1761510450\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-6-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=vintage,bdsm,masturbation,adult\u0026pop_cpc=0.000000026999999999999997\u0026ext_campaign_id_str=81347\u0026is_webview=0\u0026client_price=0.00002553119927644725\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Masturbation%2CAdult%2CVintage%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.08273999508961453\u0026social_network=\u0026publisher_id=6850\u0026advanced_pub_id=316850\u0026user_click_counter=1\u0026lv_id=8\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026cpa=a613c5a0-96a4-485e-8e33-06389759866f\u0026prev_step_diff=535\u0026st=0.16","fqdn":"4345b902be.9655b68ff3.com","domain":"9655b68ff3.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:30.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9655b68ff3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 14:04:09 GMT","end":"Mon, 19 Jan 2026 14:04:08 GMT"},"fingerprint":{"sha1":"F1:03:21:BB:7E:7C:A4:0D:A9:0D:1E:CC:90:32:C7:30:1D:4B:76:33","sha256":"4B:B0:63:1F:19:1C:AF:FD:BD:09:CC:02:A2:30:43:0C:09:85:85:95:C2:6A:95:22:6C:6F:1A:73:F0:58:00:28"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=3111186\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3963\u0026page=https%3A%2F%2Fwww.smaxim.com.ru%2Fvideos%2F53208%2Fukroshchenie-rebekki-1982%2F\u0026refdom=www.smaxim.com.ru\u0026auction_time=1761424050\u0026subid=2025691240\u0026sid=626324297\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=11186\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=100\u0026kubik_score=99.823\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D2025691240%26spot_id%3D11186%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.smaxim.com.ru%252Fvideos%252F53208%252Fukroshchenie-rebekki-1982%252F%26idzone%3D0%26sid%3D1546\u0026is_cpm=0\u0026resp_type=\u0026crid=215722\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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_dXRtX3NvdXJjZT1odHRwczovL3R1YmUtdG9hZC5jb21cdTAwMjZhdWN0aW9uX2lkPXslYXVjdGlvbl9pZCV9IiwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInVoIjoiYWRhNzFhNzY2NTA5MzNjODZmYWVmYzJjZTNlYWZmZTMiLCJ1aSI6IjdiNmRhYTU2LTQxZjQtNTYyMC1iZTNjLTc4NmU4NGRiMDI5OSIsInVyIjoiMTg3OmlucGFnZV9hZHVsdF9tcV92MjozMTExMTg2OnRydWU6IiwidiI6IiIsInZmIjoiIn0.6en1d5QSuuG5h4hTNAo1DaXo-Fu13x__DMzFW-6Jais%26sp%3D2.6999999999999996e-05%26skin_id%3D52\u0026icons=r_LHKTzeJDFlZhSKvIuPiq_cUMbWNZg4oDvhTqDpsxtmrG8MttGlTbtlHmbCs8QH2hNFBR-3P5xNYjtAg5cQSyd5L2CPztKUoHAnRTnrHKyxOfTBBJDoI5TJjeKdNoikKFknnex7-x3M5bXGdB0h1QgpBrx_hxJCrP__XSnm8uDFHIaywN4qnlDdSEr9r7g_gXgbszDBhAyYWLijLUAjtw9UTjrReEmhEy5-Rpr933a1dR_XP7YyO7U_EhzUhHcgXiK7oFg-CV_3j9RBpNfMLgjk00jGeuKAWjxb-hYK07WBDEo-QS1_KP1DPmMajdRUQ90LoLovG_EDehqdi1ijQmZK6W3_aEdvb5R_7N32X0Yons2Ijbbx4QGNUhagLOnUYa03TsIp9CVNdYxZ_8V4J9svr_pv8FS1iHt7ZRTOox0wdh5WL3I1_5Ogu5V5QcWwzwRkmBADD1DRuK1qmZPeA7xIY7nqDmOQIUcB4XuPBXsxNL7WLPYRUO4TtJTsjVjw8aZOQo_B-eMA4ORlVc4SowwYwCBNtUm4KceYYwh1t1MbMXZyXyZVUVb-XXJWyj_PZW4eC36EV7r40qVJDwXVjF0cwyjdXNYcx1y7N7SALwBa97i8WBDS3kmKnfT5kP_PBFIg2GTAnnX7ur9TD_snVUtHjPto3QTvk4tFkzHAdk3etL2B-_EstUdkTBwiFt3u0XsTHDL1fk0p4ueY-8LUk7UQ4wAGREfYJNs4sHbVZ1Jmp93Qz4eId6AUWEBnQvqomgvLcVg24RypjWzaMBofBnLvzinXe3w1ktoLj1Yi0rbSxfd_cJX0zzURjiEMKWmKtfLw7jQzTlGQMpSWxrsDmDykH8KrdPdyQAVNKbCTp1Ge8Y_396POD68XMLtE4rSQ_baRNLDKzdlCkGVNF_PwpDqjVOyYeUUQLT3OpwarBuEhIrMycS65bXS001R3_BjcbGLOGkPxhj0g0PnKfIiyLjKEGJG3Ym2WOC1jbnNgklkkzbhxm8Z2AMkCnh2q4Szs4nbU4Uw2KlifT8uzbp0Hzv0nV5EL7vjIsdH--mapVGrRHMwkXa-NSsqem9rKL5ElwBXdDUUMfEyDu6odeOI6Pmwc8OwVFV7oTDM1Ro1hN0ZHEGN4kVJo60Ox_3n3kQeEcUsQ_etQ2aZFscxVZPcb46JzwoCtq-wNnb7IPMFAeB6QLGflfFYBGNxzEbBQKbWBWNVGK1JQ26z7Vs000nixqygIoKvnIuSiHmkG_6cThh7u6j_ifa_poSJPPC8YDAbyxuiBH8FQUaRkXBGWtMHP3jt-VId1bpFx3a88OhWjHOvA_iykzpCDWubg0Kol9k0R4-eQx1Kpuwbdl1W3BfloFLlnp4CVAELflzaB3eqY09Yn-lnJFPnSQHHx0ra-GbcrOos5-foH01rQiIpM-Jeemlmrw-MaF-BSHd1GFdp8hiDJcyDJ02x1yMI4Vbe6_gyqIy4ppik7KHPjbMZvimOIYnjJZJTg7h5O44XQ0BBcjZli77p2f9o508hY5KQOpFezJIA-jTLsPqt5NoFsMzct2fTJYfeYjOm4fCnrQ-OrdKt3R5gwT8PEO_M71O3atrU0nR8W_JNJdjtgIbVBt0Mh8t3suZ40X-xmBhlVF1x9-rIewHFJO3efHjUczQstI_ElbnTCImuNFyGVXTmo1KAP2bUYC0ys5wncGPgQ8p5K7ccoNzQfi5DhkO_XdISRmVzS2M2RfKAB3FCHrA0-92bHUT32QvrhGWjjVgXZAa392G9D5FsDs3Zq2w\u0026ext_cid=81347\u0026px_id=3111186\u0026min_cpm=0.05787058654554383\u0026out_id=0\u0026campaign_type=mq\u0026aid=3296\u0026cid=17911\u0026uniq=\u0026mid=7030393410010430299\u0026skin_id=52\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0021124513027652157\u0026cpm=0.0022339798674195924\u0026verify_hash=7933288ec76392f0723d2c5d878d65cc\u0026verify_hash_v2=d5d6c7988454591c039d9311284fd871f2a56e16a6005574eb77e03437aad893\u0026is_native=1\u0026real_bid=2.553119927644725e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=101,4,70,148,98\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1761510450\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-6-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=vintage,bdsm,masturbation,adult\u0026pop_cpc=0.000000026999999999999997\u0026ext_campaign_id_str=81347\u0026is_webview=0\u0026client_price=0.00002553119927644725\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Masturbation%2CAdult%2CVintage%2CBDSM\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.08273999508961453\u0026social_network=\u0026publisher_id=6850\u0026advanced_pub_id=316850\u0026user_click_counter=1\u0026lv_id=8\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026cpa=a613c5a0-96a4-485e-8e33-06389759866f\u0026prev_step_diff=535\u0026st=0.16 HTTP/1.1\r\nHost: 4345b902be.9655b68ff3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 20:27:31 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"4345b902be.9655b68ff3.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-25T20:27:20.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /videos/53208/ukroshchenie-rebekki-1982/ HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:20 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/7.2.34\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; path=/; samesite=Lax; domain=.smaxim.com.ru\nkt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; expires=Sun, 26-Oct-2025 20:27:20 GMT; Max-Age=86400; path=/; samesite=None; Secure; domain=.smaxim.com.ru\nkt_ips=91.90.42.154; expires=Sun, 26-Oct-2025 20:27:20 GMT; Max-Age=86400; path=/; samesite=None; Secure; domain=.smaxim.com.ru\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":62733,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5854)","md5":"65488e8df3edf82fb6fbdf18e78ae8c3","sha1":"f5f992d6edf7aeb8256257993bf1643570670dda","sha256":"48a254c81ef1053f0e7bd284b31b4f30926276a9302a094d4a5712dd958f9ff9","sha512":"34d3327e1af6f4c051f4bcc2aab1ae0795a94e64ece6e09193c9425ce950a475ef0c8f647eb2450ccd7bc3a28fb75cede2a7db82d3a2ed67853da0f5c2d4b8d4","ssdeep":"768:YUg1Uhuxoj9NHL4gU0tkrFTW13Sb5z/oeoZU4Amvj:3Vhuxoj9NqAkrFT75LoeoZU4Amvj","tlshash":"7e536573819ede7f0201d0c7b820bb0d644b68bdda6296e2f5ff183debc5858862615d","first_seen":"2025-10-25T20:28:00.679215Z","last_seen":"2025-10-25T20:28:00.679215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":103,"dns":40,"connect":18,"send":0,"wait":66,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smaxim.com.ru/player/player_ads.html?advertising_id=0.05864330711993759\u0026adzone=0.5365775643084258","fqdn":"www.smaxim.com.ru","domain":"smaxim.com.ru","tld":"com.ru"},"ip":{"addr":"185.162.128.101","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/","date":"2025-10-25T20:27:21.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smaxim.com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 00:15:59 GMT","end":"Wed, 10 Dec 2025 00:15:58 GMT"},"fingerprint":{"sha1":"D3:3A:33:DC:5A:8F:F1:1C:4F:44:B2:A4:BB:95:92:A6:A6:2B:40:FB","sha256":"8A:83:52:AF:DD:0D:3E:13:7D:4E:19:13:4A:26:B1:21:22:1A:72:27:87:51:E6:47:E3:99:7F:04:0B:51:B4:E0"}}},"request":{"raw":"GET /player/player_ads.html?advertising_id=0.05864330711993759\u0026adzone=0.5365775643084258 HTTP/1.1\r\nHost: www.smaxim.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.smaxim.com.ru/videos/53208/ukroshchenie-rebekki-1982/\r\nCookie: PHPSESSID=099a947410351d4eb2e60d9deaabd1b5; kt_qparams=id%3D53208%26dir%3Dukroshchenie-rebekki-1982; kt_ips=91.90.42.154\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Sat, 25 Oct 2025 20:27:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2fadb511fd427c8fad79cd9202467f7b","sha1":"935fd00e517dd932491f3aa02a600d893c826d93","sha256":"b800881548eb81b99bf88898b73e591217723b54f172fe209488722d6c98e358","sha512":"4738adcfba205d190839501b8e76827b5a9108f28877a95f5112529e4cc53a9417a341db3168474350c2a867d107a995076a4933aa5b4d2cf71ceeb937a76c3f","ssdeep":"","tlshash":"249002509c15e511867b101c9e21f30d565455655801814009cca00631456834c00480","first_seen":"2023-05-13T00:55:55Z","last_seen":"2026-03-28T16:05:44.163143Z","times_seen":156,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}