{"report_id":"abe25412-f171-4241-a732-144bcb3f3a07","version":6,"status":"done","tags":[],"date":"2025-10-16T07:37:20Z","url":{"schema":"http","addr":"yabai.si/","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"title":"Posts Index - Yabai!"},"submit":{"url":{"schema":"http","addr":"yabai.si/","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T07:37:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":9,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.525852+0000\",\"flow_id\":309115785774620,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.525852+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.545921+0000\",\"flow_id\":1575259259753601,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.545921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.565929+0000\",\"flow_id\":985800768201385,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.565929+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.626049+0000\",\"flow_id\":309115785774620,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.525852+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.646163+0000\",\"flow_id\":1575259259753601,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.545921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.666187+0000\",\"flow_id\":985800768201385,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.565929+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.826270+0000\",\"flow_id\":309115785774620,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.525852+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.846372+0000\",\"flow_id\":1575259259753601,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.545921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.866400+0000\",\"flow_id\":985800768201385,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.565929+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"npsgzmznak2s.s4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-10-16T07:37:22.901305Z","last_seen":"2025-10-16T07:37:22.901305Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-10-13T03:11:58.082242Z","alert_count":0,"request_count":1,"received_data":80482,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"npsgzmznak2s.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-10-16T07:37:22.900158Z","last_seen":"2025-10-16T07:37:22.900158Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"npsgzmznak2s.n4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-10-16T07:37:22.904166Z","last_seen":"2025-10-16T07:37:22.904166Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yabai.si","ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-22","domain_rank":494150,"first_seen":"2022-07-22T07:16:33Z","last_seen":"2025-06-20T15:20:59.427867Z","alert_count":0,"request_count":10,"received_data":1039811,"sent_data":12147,"comment":"","tags":null,"fingerprints":[{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":420095,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s2.yabai.si","ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-22","domain_rank":0,"first_seen":"2025-06-20T15:20:58.847874Z","last_seen":"2025-08-26T13:57:31.896836Z","alert_count":0,"request_count":24,"received_data":640844,"sent_data":13297,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":2,"received_data":79926,"sent_data":1050,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-10-09T11:11:53.844647Z","alert_count":0,"request_count":2,"received_data":985,"sent_data":833,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.betteradsystem.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":944570,"first_seen":"2020-04-18T19:46:40Z","last_seen":"2025-10-14T21:44:48.448325Z","alert_count":0,"request_count":1,"received_data":42486,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-10-14T14:34:27.736865Z","alert_count":0,"request_count":1,"received_data":1784,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"betteradsystem.com","ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":64565,"first_seen":"2020-04-19T20:28:40Z","last_seen":"2025-10-14T21:44:48.613397Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1745,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":6149,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-10-09T11:03:05.92941Z","alert_count":0,"request_count":2,"received_data":852,"sent_data":833,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.525852+0000\",\"flow_id\":309115785774620,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.525852+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.545921+0000\",\"flow_id\":1575259259753601,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.545921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.565929+0000\",\"flow_id\":985800768201385,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.565929+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.626049+0000\",\"flow_id\":309115785774620,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.525852+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.646163+0000\",\"flow_id\":1575259259753601,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.545921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.666187+0000\",\"flow_id\":985800768201385,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.565929+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.826270+0000\",\"flow_id\":309115785774620,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.525852+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.846372+0000\",\"flow_id\":1575259259753601,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.545921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T07:36:59Z","timestamp":1760600219,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.20","port":36406,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-10-16T07:36:59.866400+0000\",\"flow_id\":985800768201385,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":36406,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-10-16T07:36:59.565929+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.452492Z","times_seen":23029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"c809887dc51fb5a7e73a3a98c3dd661c","sha1":"7d7574d4dcf1e06e2230379897c5df681ba603de","sha256":"1138f8c1bb11f4a5f7d8354b8c8a642ef94c9c741d76a7f476bac6473b7de085","sha512":"3a5e6abed1f1fa40c5d7d13b98d4e90d180f5913a673f10db23f40b1fe68a70de8e780c2633bb6f37745ce4aaf81707844817fa84baaa2b764a322831c298e7a","ssdeep":"","tlshash":"9b8000f00283008b08308f03230b3300b030200c30c032cf3038003c3002383bc030c0","size":32,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.510411Z","times_seen":17900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"61d9031f2b0da3ac81b6732b6d1ecf83","sha1":"515d4db3d1120a7160d1bc7d93d57f7fbdea1fc4","sha256":"436179ef4964c80a03e62015696ba10c5ae70602c6538d07f50b75f35bd72a27","sha512":"3b6ddafdb73b34756f57d92b3db048d03ac38dd2f96be7d4ba695835470b8ce460e2d6059a84e64f3bc2d5237b6151aad2a649f76ab43a81447182684b5741de","ssdeep":"","tlshash":"b58000b02020a830088e020cb030c3cc3e32000230033000a00c028c0830ec00228f88","size":36,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-19T05:15:08.455572Z","times_seen":18664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"033be514d28c79b54f933038a52e9f0b","sha1":"f32bed55ac84f1a9913c5e2ecb327a8da625b746","sha256":"d5a749c3d8588f9cef49160c2058b8dee8f025ce7b78f18af87e32dcb28c45b7","sha512":"78f84633a1e613ef057bde33c3731875f4541c3333835a97755ae105c1104ec24bc138a842d0d7ea0a7ebedc591e133860fd763ec5bc2803e251e11c7d40d05a","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHIMRBy5kgxYbFQzd9elw3mbuk92lLkt6WZjyQCT/8GLgR:pok3m4bHIeEk+zd9elw3mb2VwQFu45q","tlshash":"4b734ca971a2702943b238e9567f5315f1ba0a902c0690e0d37dc9643c74edf927fb9e","size":79011,"data":"","first_seen":"2025-10-08T20:09:38.152092Z","last_seen":"2025-10-17T15:07:50.943623Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d936f0d3e0535e2fa01aa05c9d1508f","sha1":"d20537b105615348981de83acaa439e771f719de","sha256":"ec4b3c7a9f6ffc2691c526ef4e11982138f47505bf1245a72284d5f2ea3a5139","sha512":"b652ddcaf495c6cbd1b4c6ad40996249f94b67922be2c86f6b265b31c364b60fec7647074f81ad90fc8e21efb5349a74dbd0f827d40b45fb5599b9c432ce45fb","ssdeep":"","tlshash":"3a9002114c06c08a0178608e3a1e3b0076012f5180020102bcc60138b454003a4060a0","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.288429Z","times_seen":13737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.474522Z","times_seen":22786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"93128c282499b9ac18b63d0170ef3d44","sha1":"20a9c22e9546d49fc54c41ecbfa82880934f45f3","sha256":"f58ab76f9bc7003d1eaa68b8ca01bc723da2137cac1536511da193bd3062f86c","sha512":"7275c7fe7ca0a85191389c0c276f16c73ea59858c6af7268cc1c4a306755a35956ac72c4c8a7ba702c386eaa76ef38e871d50f0b18304dfd9ef1c75430a53f85","ssdeep":"","tlshash":"0d9000020c0ac08a003a208f3a0e3b002a02aba080020202bcea0238b8a8003aa08080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.290898Z","times_seen":13778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"d5757abfc2dfe2efd4bb1409941cf087","sha1":"a3eb249ef753951d22faa61f87302479aff27023","sha256":"bc9c06f981e7daa0478c449324d4010cdbc3c83c9a95879b99a0b531f5cabb87","sha512":"a21d0aae842d3e854147d43d706f8a72afeb8a045e8c020c6a3f0e61a0c91066b86163539ba9a2827f0a61d53b120a90b5c1ba65875e334a87ceca32b06c0117","ssdeep":"","tlshash":"188000ae80a800202230282a020222a02203e002c882008000ab0300208002b0280c80","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.51193Z","times_seen":19592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"11cc3621e45b2f0b945ccf3c32be2d99","sha1":"65369460879076ce3d2ca049392097e9c15b8149","sha256":"8eab171b0d256cf386d222b71fbf5380f2051b67452dbd83f41401a6216a789c","sha512":"e8af12a7397f87b88e2b71577fbb9be3be97b309345786db07de0c882ef2203a6d2b98a7f74c4f5b065e3d67cdb2c54f23ff7694c9ccc83e22ee93e950e60715","ssdeep":"","tlshash":"8bb009b69262c0b9c4469c9eb13ad6e7397a12143813b327901d49205522e5e2b008a0","size":108,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.455072Z","times_seen":20074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ac7fe824fc01da2eae66c69cde47673","sha1":"12c7d2596939ad5d05162d227907c9bf707559b0","sha256":"c259f617c5131add5a2a6c588f31e278b6c9443eddfa2399888a0d786712f20c","sha512":"ac205048c8287ebdd4ed9d241173dbca2ec4ceca2963d3706bd6b3d824f31fe3f073295f4003bd848d56dc1aa3733bfea5e620e1ce168519bbc03e8ea6d0ebd0","ssdeep":"","tlshash":"899000020c0af08e0038a0ae3a0e3b002a022ba080028203bcca0238b8a8003a828080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.309926Z","times_seen":13689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.475594Z","times_seen":22616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-19T12:27:52.058996Z","times_seen":68721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.451605Z","times_seen":23637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/js/app.js?id=869964b45e5b19ff9c433c436e5ebc7d","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b0316f4373988332932d8021a151f1","sha1":"ff8b6993171e6a590454e0f10c3d7cd98ae8fe42","sha256":"2e9400a9819ef027a46a316126033bacd1507c7ec1fa622f133724432bdcc5b5","sha512":"59051e2e7a67afcbf28cb4ff1ad28daae7648540af51d5f0daf2dcf2489e723db1aeda423f7d065b03107d8a4ab16e23c2c174ac957a32f69e4685c508dd21a7","ssdeep":"12288:mhIF1XRkfMvNfDyjnOvco9FiMPbXCkzsEksB:me1XRkEh0nOkaIMPbXCkzisB","tlshash":"c605f8da71d2b8e6679311fa503f400af23f5d55b4098460b3a5e8e6b927d4a703bf38","size":828653,"data":"","first_seen":"2025-06-20T15:21:04.749487Z","last_seen":"2026-03-03T08:59:04.270199Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"f2e73d260910d6e60de8e4385119c5fc","sha1":"a31a2def327e169da134a88dff93e1817a719ccb","sha256":"f8aac102dc71390ed9b53b485b34d036f4c871e18d7015b307b95c8f1dcd9fa1","sha512":"1893bde5c63c3cccce38abfce7643e0e25f8b56e4bf3ff39e9927dc947275ee0ef531362e074fa6d6ee2c5d1f18d746a95e1886c773f40ee0ffe9a43c6d40962","ssdeep":"","tlshash":"79a002612498260073361515058a339e75684b425982141426501145f4d9b9b40b45a6","size":59,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-05T11:10:16.803027Z","times_seen":14648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-34Y5B1Z4HJ\u0026l=dataLayer","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31cae0d2d536ee7ae06a3be74941b284","sha1":"a4c1a65a5fc79004df75ae17cc441f101be86b0a","sha256":"b5af1f3885d0502f5d37222272c023a92e53a9686a901afcda2bb2e229494055","sha512":"d066b55b96c321c9dc1b35021ddc0062e54a7dd0f8d02c24e7bda56a31c60cf96556fb1f979bd4956e28253b890927cd9f83006b45857b5ea7ffd027fc93b5cd","ssdeep":"6144:qB4p6RMSO/InPsMsDTXpUJW9l/aqnYyEKDGXNszsDUwXB814v+mA:qW6PIWPsMsDTXpUY9EqnYcsDQh","tlshash":"f794198e73c674669396f078503f018ba57b29a2f45cc899f189cce42d74a9a0277f7c","size":419491,"data":"","first_seen":"2025-10-16T07:37:29.283234Z","last_seen":"2025-10-16T07:37:29.283234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.498638Z","times_seen":21975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.509203Z","times_seen":22176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"6043a0b1ebb36c505a9191b20e11815f","sha1":"6f9cda2539774241dca5f5df2e40b2e83139768e","sha256":"354d474759535f5f0bb63dc6c5ea17455fb3d281aeb3cd6d44c2f3f594c5dec3","sha512":"5a55931f152716ef8803227e0518befc7ec9fdbc66f16aab57824511c7f3a94bfd9b93b4417d6f759d04c517f3d242eec582b49a8d92be6079b88e10a27fb9bb","ssdeep":"","tlshash":"517000a20c0ba0020c228b02838222002020028a288830c220a088203222e0b3028080","size":24,"data":"","first_seen":"2024-05-15T22:21:35Z","last_seen":"2026-03-06T11:55:01.515568Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/gforce.min.css","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"14870898709b0370976556ba7d86b45f","sha1":"002ccecf9ba6ca288947984fc18a42109bb932c7","sha256":"168d0f71363192369f2783efb7e940d8f94b9fd2335d3e985f2922e164e0aa77","sha512":"a400216235b7adb8dcb21a27f6b4bd19b101e9094726edd27bc8b0b84dc95d715fb76049e79ad293d120bcd223702ee708ed40cc6756edb391c365a6d826a8cc","ssdeep":"768:bt9rqAYKK6TZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC0zCntlqor:bb1ZzFQ9JsTgZvfzmMzhYrTscpaZp","tlshash":"541329aab286282601e741b9513eb316b23305167812d458fcb9cdf96e3dd86117b7fc","size":41943,"data":"","first_seen":"2025-10-16T07:37:29.524599Z","last_seen":"2025-10-16T07:37:29.524599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.46926Z","times_seen":23254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"bdc6234a33432c503640ad2f62105dbf","sha1":"2e733c2d4f1953a7ca2231208e8e31edc399ab19","sha256":"61e43d202b6cd0ebf29ac8014115fcb890eb5593c4160b9ae285206ca911bce6","sha512":"ff6da6a9cfa04e9c0e4c8c038b70ff6461de31cf3020ffa062fb50d6507ffb72d431652f7a8eaf7fab316b387a16a0ba5923cb568450f6e5a3eb7c232a3793b6","ssdeep":"","tlshash":"bd70008e020000a0cab220a80a022300b0202c0008022200a0a00008202ee038288080","size":21,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-19T05:15:08.493544Z","times_seen":20578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"df0f0e3e7f31f2501d7e19833ccb4ddc","sha1":"e551bfcbdd3a7c41875f1a974ad1914604b5969f","sha256":"511e9d231c9360fcb7670f7cbaffb35bf8180f124fc080ebbfa5962d4c8bb089","sha512":"57497c56a50a2a0ed0cd9862fdaf381fbf969bd3048dff24dee46f2dc10139cccfcc4b275d7d74cd3d8f036ada1eabe54d05c4773e80ba797748aeff6c855898","ssdeep":"","tlshash":"b98000f8002300c302300f032b0b3302b033000c3accb0ebba3080303802303f8020c0","size":33,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.512729Z","times_seen":18132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.480005Z","times_seen":21542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.47952Z","times_seen":23251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.505282Z","times_seen":24302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"c510d5a3d97cb2f599576a56b2703434","sha1":"9bc8f27eddd88f1e3f879b2dceb86f92486dc1e3","sha256":"b4a3a83fe09d48db0c0b4416fefb19af5f9e069c12d2af8793a18f159574bb79","sha512":"7adf4f6f79a04ef4aa41503ef199d996dfe027863d5493881f4689e595cc9ce27a4451f1be2617108f3716d2c26bea30fe4ef4c7c4922d4896cf3f7f94e50467","ssdeep":"","tlshash":"7d60002002002820002002000a02a20a2002020c82020200000a8000220208300802c0","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-19T05:15:08.496236Z","times_seen":18161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betteradsystem.com/sgtdyjzaxddjxaqxogb?YfKpjGyb=BQOCAAAAAAAACZUAAsuEKBzZyjLi2VaLDEsLdSivC2iFndiadY1rc4C-Hq0vWMdq4d7rlECNw4l4ZJ2FMIlUxUtMG3bs4b8sqLgncwOQF0dhBpTJxrOm7KSYOZV2muroscMFyKWvSGovmIuM_4NKtF0JmRBm6MqQ92vYOM6_YBJmAN-UWVW8sLXTDwHWQmm-6HOdzsED5oph4ODN7hnxYatUJw0NgtrTXxBIMIEdNdQbWzY8kmsYD2g-lzXvKYhiy7tbGyUtplu1hT7K1ie-PAypZjh8YaeThXh_nTp_Yh1MkMjhj-PcJZZrMbtv7YROuEppeGgfsys5HR9aoIz2ye-COLvpn_okJgyswkZuou4tE9Y79Navo_90nW36JUChNWwIFQ2fVdagWarFocFqON3mLdzhhQ-I7akxGvfB6PQ6gfRzCtVK_3Rc6JtOC6xOZPerCjqikAFffL1bNRk5J7dJDMDTiHFyL-PJ7P5PeOGe92C5g_mFXG62he7FdVHtRKMIAzV9VJxar7A78eBLyjr2_ukPr_jxvFXqa5TEViEn0iZtJthzGMtf01f288VKScfTuNQaaq1qbi52eJ-t8Qgt9flq_YeAcfQgB4mjD0_kCwjVBoa112ST_vrXoBKXRcHKuXh0O44cyzkOHPsJ1_DxC5BYZg2NGF_pjckIbgZinm1VkRgLF7VcIjbDdUzkiSTHigRcyYazHxS0tlD5RMzeagFE1y_4cTyuOf5rkEMvJUZonbL8dspFrzar-KXa_QlPzh1aMR3ZjWzaMgqrDFoXETrPEul4O2lOd0mgMM3rWFpGc-_RtJ6a1fN7Ifhp7qgxx0vlcmgKOkjkloC8RkuIPHY2h-oEOG2dowUfrtaJdJbPdcYNEbOiyMZlmTP5Nyt74mrwFP038xxQpUuT5Fyani1m2NW3OJOzBBVBHEHJs_in78BOMj-CTNDcVjOaAhItR5ZKMevbYg5Wcg3vLLeT7FsFT-sqpb_3OaRbvQlJH-qNFnciHZMPXd8qPX2ZPYdNLRB1gTCoodN2W8mzso8X-CjGHDAhwRd5SBFf_2IyxbiVe-1yRAe4NOk7W1kFcofoV3HCSGecyYGWiS_t7xCJL0mpFGvarDfRJvgIQ8_f1Ac-IqS9VHBqxhsYpTiYxxLD4agULNYasAfCn6Br5nNPlG9DB5Ww7pCYMdUEqg3W1Ol0VWsCWa-6MN_U\u0026xCIeBzJT=4\u0026RnwvNqTu=5024876\u0026hiUtusbD=\u0026IjPJRinr=0,0\u0026QMzCPsHm=\u0026xXdWlOco=\u0026KMjSEqwh=1280,1024,1,1280,1024,0","fqdn":"betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-19T12:40:43.394799Z","times_seen":23446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.499726Z","times_seen":22395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"ef9e29d830b47e493c51972bb3af3ef6","sha1":"95d6255c5e100dce97da5619be073c8dbf4f00c0","sha256":"fc5a1ffc9513896711ec2c788490995715c8d32ccda8c4e2c68a9bd8cb214e77","sha512":"af408037587ea95e4db5c0412d582ea898d2fb5084e5917048698bc482dd7c3e8854d87fcf3adf508fd8cceef746eab017029aba07aa934184675a6e6c88f0b9","ssdeep":"","tlshash":"a270000000002830080208002020ca8e2a22208022033a00800a000000208802088b0a","size":19,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.495259Z","times_seen":19082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"265fbd04531d9cf5fd767b4e3149a5d1","sha1":"9df7368252b2b411d8472e2a6cc46fd5557ac415","sha256":"1b5a1da3648fc66667a67e766f23683675655e69a2f5186d65e750c7af80fa01","sha512":"c66a183c6e2dcabfedf54ccf42ca70a8cb2f9fde6fdfabfcb8ce20dc684821ce10b7892a940f459cc41c7462c97300aa740eecc1a38638845d159c684c9b036a","ssdeep":"","tlshash":"cb9000020c0ac08a003a208e3a0e3b022a2a2ba080020202bcca023ab8a8003aa28080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308656Z","times_seen":13860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"dca14c896efeb4b80c68c457aea67f39","sha1":"2488a552655a41fbd3f3165ea5b1999f46f25738","sha256":"998158f6df4183edd82539e6dc971d32f50bc7ee075f64d4abc46d3011a9da27","sha512":"56d0ea635f1a8dd9f7bfed6a8e087ec4d8e38bf65eaee1e1262740fc7ce80cf1b45ea861f0d5949b69ecc650427ccc8879f1b7c9af78933ba26d0aa9f704033b","ssdeep":"","tlshash":"ac8000b02a02b830888c220eb030c3c83c30000030033800a22c00cc08b0ec02208e8a","size":37,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.469862Z","times_seen":18394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"882fb4ec13c370e872df9e4587a98eb6","sha1":"4d41871cdc577c45b141134b16c0eab1b9b720e9","sha256":"791b28f4c489619d78906b8af22fbc11b48c0576134d36470ef92468e47da29c","sha512":"fd2b137155d24d0f76d501103374922d61c5e7947cd4091a694f219281d6feb561114a865de81fab1209ea62f69c35b21f3fb67fee3277be040e04985905bfa0","ssdeep":"","tlshash":"f470000808bb00a28228332f000020020aa2c20288020c8c000202000a08a280320038","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.507096Z","times_seen":14045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.502771Z","times_seen":20810,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"e018c77e67a96b7f5440da3c7397e35a","sha1":"a090b0a7035556c7f71070fe10c2e37fa15584c5","sha256":"5c5bb18e544cb67f765d8a6d2c774838d3ae95df9b62f25660c64554a7302d8e","sha512":"cfaad7c410b0f14c2c849855f859a973177c6bdeb27ce9e3dfbbb38169a4abd0f66252213aa1885751c54d1ae761fd68af739081e9b7d6875f084c2240874062","ssdeep":"","tlshash":"0a6000c000030030000300303030c3cc3c30003030333000000c3c3f0000f00c003f0c","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-19T05:15:08.515432Z","times_seen":21366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"523999a59614cb7fb7f32470f0295fad","sha1":"6f3ab89215283f93ecb678671fe8cb434d13f14f","sha256":"10e13194e3fa89605179a6d3e37f0ceb5493c59d25814a959d3af035b3984424","sha512":"bbadeca5982e523d33aa37b5bf5b3182b97768869e6894ef0d9760928db84af5f0ce9eca55b14f9ab5e2e0a02fac085a5b4a603ad2c4d64578c3e3b177d49805","ssdeep":"","tlshash":"ac11a85027149119735134bc1b7bfc09b871069b4780f996a4ffe0d04b74cc35806ddc","size":1039,"data":"","first_seen":"2025-10-16T07:37:29.831606Z","last_seen":"2025-10-16T07:37:29.831606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc0afc5aee21e3a2c7ba20fcbbc5502","sha1":"b0b548e52b180b7ac2fbac80962700dcd226b31f","sha256":"97e8f3fb205c8b155c8c6370121edddfad4baf9da50783c9b7efc9ed120bf41b","sha512":"e37b0c0f47dd7f5641a98b80cd68fa04f9b932dedd7d691399e0d04a47e75abc50fe62dee85ca735f2dc3c534869f8f8c1478afc9fcde9b91719665003f21a7b","ssdeep":"","tlshash":"819000022c2ac08a0038208e3b0e3b082a022fa080020202bcca0238f8a8803a808080","size":49,"data":"","first_seen":"2024-05-15T22:21:34Z","last_seen":"2025-11-06T10:54:25.308032Z","times_seen":13933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"c24107ca675c86ce400f00f60737bf91","sha1":"915db7d3426c409da4f1c6d58c38d9dfd6ad39be","sha256":"3688d7e88d248ea850c456f0233738d10695a410a3dec97785ca7422c3f562c1","sha512":"0b10c8522a9d3b4cd1b5d63918ca7888bf837bd48c2c456c38e20e215a0c5e1cc38e5248658c54021b1d2337a68dc1f61b17adfbda678078d0d4a8cb4fc56e40","ssdeep":"","tlshash":"2870002002002830880200022020cb8c2a200280280230008208000800208002808a0a","size":20,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.509945Z","times_seen":18884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.45205Z","times_seen":23602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.481416Z","times_seen":20842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce3b68ba9f112eace00bea9f0ef15928","sha1":"4ff28633ed762b44c94a22716fc4e9d03957c6f9","sha256":"ad98fb88024d8fcb62472a0c1aa4bf9b521f01c9addd5f7a7e0bf8e3699dd294","sha512":"1b08d1799c78adc2ec506481d6803c9bc68a7a31ee56d9e17f66bd7ff7187832ec387293d4d28d60ce3529c44bfc6d78bf5a47e7d4db4f48db1761a2188a1240","ssdeep":"384:9H0Q01Oul5wNRibJKm6AcjLAW9NR9WSElFWBi72Vf/d7oeq:OpIi2SJHcXAWCfSBi4/q","tlshash":"e182a698b4d6f46147972164945f440bf23d7a6ab48de4a0f681d8e06cfe68e8027f3e","size":18431,"data":"","first_seen":"2024-12-31T14:20:34.088942Z","last_seen":"2026-03-03T08:59:04.323167Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"yabai.si/g","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T07:36:57.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /g HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=KhcxvTEj5gLto0d3; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6Ik9yb0RjZXdZOVplOVQ0SWtZbnJMQXc9PSIsInZhbHVlIjoiNUZJcWFCNFI0SEdTdThRRVU1akIzS0ozS0FRREwvRlEra3BFUW5GS0NJOThIdnZjV0lxNU4wVG5pM1FKSGg5MlMrc2NWbStHdytZRlA4bVEwVmlWcmF3YUZpUE9CMEpIUnN2N096anVNYUJCYmVuUk5nRmE4bGJJZmdXUHJOdG4iLCJtYWMiOiIyYTY1NTI1YzBjNjgwY2Y4MTMxNWY1MjhmMmY3NzEyYzEyZDZkMDc1Y2RmYmY0ZTc4NWVlZjRhMDViZWMwZWVhIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6IjJmVS9nUXZhSlRNbis1NjY0UWlsSmc9PSIsInZhbHVlIjoiMnIvcGs2ayt2QWtnaEZNYVU2K3I5Q1RUQjgwM0UwY0hxSkVFTjJVRmZ1MmJsYURmdTYrWFlEc3c5Rmd0QXhpa3pGVElLM2ZWR1NBWXZUU0U0eWRXQVIxVWJrOTQ5c1h5TDBFNWVmVW1SZHAwVm00VE5YMGFIY2RMem43YTBTN2EiLCJtYWMiOiI4Y2M3MDJkNzQ4NTRmMDA1Njk1ZGJmNTYxOTg4ZTg5NGQxZmVlNmE1Y2Q1YzAwNjE1N2Q4ZGJlODU2MTMwMmIxIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bAwa5j0ROBOXOe9o; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg10_=1760600217; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\nXSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; expires=Thu, 16 Oct 2025 09:36:57 GMT; Max-Age=7200; path=/; samesite=lax\nyabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D; expires=Thu, 16 Oct 2025 09:36:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Thu, 16 Oct 2025 07:36:57 GMT\r\nvary: Accept-Encoding, X-Inertia\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36019,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17906), with CRLF, LF line terminators","md5":"f54bc1a841f300eb8194cff6bb1be2f8","sha1":"03b4eefe2eb25cf935b058177d5b0ffd93ff5c00","sha256":"5f1fc6b69d3a2a4cceb0f74d61b65438b3e0f9d492395fb7e04ab8310716cbc8","sha512":"64c5165011642c3013eb3021ed43d4361b9c9eb3c5014375225575b6e8ed0ea2cc96b61f5492ff363c74bda73fcb42c7e95cfcc495a218675294f44f2b57175e","ssdeep":"768:EkQBVpIi2SJHcXAWCfSBi4/8c8ff4+wJeC:r6VCi2u8XAWX44/8c6lmeC","tlshash":"a6f2a4b5f0f3e07201ae30a0d81b9b4aa66be76763c4e7f2a244d4d05b7854d4c17ead","first_seen":"2025-10-16T07:37:29.257562Z","last_seen":"2025-10-16T07:37:29.257562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/css/app.css?id=eb5b1fcc65b0b672196c0b2724e11ca7","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:57.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /css/app.css?id=eb5b1fcc65b0b672196c0b2724e11ca7 HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=bAwa5j0ROBOXOe9o; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nCq0cp9ScEP4r7vg; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg10_=1760600217; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 09 Oct 2025 11:08:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Apr 2025 07:27:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67ee3847-8406\"\r\nexpires: Sat, 08 Nov 2025 11:08:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 592107\r\ncontent-length: 6758\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":33798,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33797)","md5":"eb5b1fcc65b0b672196c0b2724e11ca7","sha1":"98ed8cae75ff082e96b2228a6a7fce280a896690","sha256":"92e032c03931d7fd2c26e4ec582611563cd5adfca4b1f957a09f1a4857af6c1b","sha512":"a05c3a7185b549402d4aeef7a59832f04998de4976e25baf2217c0fd9c430d3f69690d5f2eeed15df553aab97c12895f8e96d4f802a1d37ad76665c5802f7822","ssdeep":"384:DkxHKwvQkBKkyBPNimPVParIaNtx+Lij/XNN0gMwhwd1JyC38+:vwQimPc3+yNN0gMwhwzn8+","tlshash":"b3e2751eab11013f7c6384fad199f89ca21a71c5ee3aa2e7bc862510cbd57f75c53248","first_seen":"2025-06-20T15:21:04.733093Z","last_seen":"2026-03-03T08:59:04.285476Z","times_seen":4,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-34Y5B1Z4HJ\u0026l=dataLayer","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-34Y5B1Z4HJ\u0026l=dataLayer HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 16 Oct 2025 07:36:58 GMT\r\nexpires: Thu, 16 Oct 2025 07:36:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139871\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419491,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"31cae0d2d536ee7ae06a3be74941b284","sha1":"a4c1a65a5fc79004df75ae17cc441f101be86b0a","sha256":"b5af1f3885d0502f5d37222272c023a92e53a9686a901afcda2bb2e229494055","sha512":"d066b55b96c321c9dc1b35021ddc0062e54a7dd0f8d02c24e7bda56a31c60cf96556fb1f979bd4956e28253b890927cd9f83006b45857b5ea7ffd027fc93b5cd","ssdeep":"6144:qB4p6RMSO/InPsMsDTXpUJW9l/aqnYyEKDGXNszsDUwXB814v+mA:qW6PIWPsMsDTXpUY9EqnYcsDQh","tlshash":"f794198e73c674669396f078503f018ba57b29a2f45cc899f189cce42d74a9a0277f7c","first_seen":"2025-10-16T07:37:29.283234Z","last_seen":"2025-10-16T07:37:29.283234Z","times_seen":1,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":116,"dns":1,"connect":8,"send":0,"wait":35,"receive":22,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587991/0000-0059485d-mkuqoxqm.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587991/0000-0059485d-mkuqoxqm.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=odsxH7gQjupmnm4P; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:57:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26545\r\nlast-modified: Thu, 16 Oct 2025 05:32:45 GMT\r\netag: \"68f0837d-67b1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2357\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26545,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 247x350, components 3","md5":"a4e8a21829455bc20e4c95ecb33e2121","sha1":"8a6a196932ec29dcbb5c733a007e66e4e74709d6","sha256":"01c3915a55625179293a306fa985d18719f40eaca98b3e92677eaf21835353ae","sha512":"0f4c5ace0fa2f38756c6020e241c7c008027ae66f3a799d69935ab69e8d1fd951d1d62f212dae6f6ac14ff7d3cb67e6f6bfbd8c51fa678e45dc9a27c38799cab","ssdeep":"768:GdDNulF6emUBZDrXyEjA+HuqSwg6SGIeKeF9IXnSm:ODNul41YXNEwg6pNF4","tlshash":"08c2e00c80b2f18c6f6d63684398bd63df2d71e5bf7b99148909d8e87017cb58529c2e","first_seen":"2025-10-16T07:37:29.289944Z","last_seen":"2025-10-16T07:37:29.289944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587961/0000-74926832-fhy9r3w8.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587961/0000-74926832-fhy9r3w8.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BKJkq3G8XqkhAjyn; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:36:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55826\r\nlast-modified: Thu, 16 Oct 2025 04:42:28 GMT\r\netag: \"68f077b4-da12\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55826,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 463x350, components 3","md5":"11a431adbeae953bcb8f146b1201d693","sha1":"5b26533524e778a3397a2c27da5738146f6a7a74","sha256":"b52375dc8503d9b3e564314aa1381cf7c8593734db1a011e79e66a14ea092c7e","sha512":"72313ab3860aaa321803af71330bbcda1368ba8bb0e50e69612294a52872f14592f462238c668ef133e89c3459e2226d2665e63d91d8bb7d58a81cf414e135a6","ssdeep":"1536:R+4m6Jozku3PJRVWgLylXDmua9E7mpKftr:Ql6yPvVZIeTitr","tlshash":"6e4301e10fa748bb0e1e90d71e569f7b865b1f33480025b5aa97eb65c03c9f180311b9","first_seen":"2025-10-16T07:37:29.297427Z","last_seen":"2025-10-16T07:37:29.297427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":259,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/images/vendor/flag-icons/flags/4x3/jp.svg?5ca780fad1db90fc6dfda8b2afd86fac","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /images/vendor/flag-icons/flags/4x3/jp.svg?5ca780fad1db90fc6dfda8b2afd86fac HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NEOJ0nwQ4E6rWYdD; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 07 Oct 2025 10:36:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Sep 2023 15:49:30 GMT\r\netag: W/\"650db78a-1d1\"\r\nexpires: Thu, 06 Nov 2025 10:36:07 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 766943\r\ncontent-length: 323\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48b5810ea46c7d81206bfd46a81e2f88","sha1":"a77d86931a00c45252242612dbb6848ab74fef95","sha256":"d4c859a42648a418066bf37784919d973c75e68d8ae3061d813620d205f12093","sha512":"3604d6a906e1959d8f6ae137bdf1ac7667eca1a1047df9775d7fa9dd6de7b4c04069dcea3fa419fe9d29c83b80618b130828ba00e1ac0648d7667f0e823b57d9","ssdeep":"","tlshash":"c2f05c94a6f8c40ccf190529c79d29c5562db0c6438a418db59419596f1867b16d72f4","first_seen":"2025-07-06T23:09:45.713647Z","last_seen":"2026-03-03T08:59:04.301765Z","times_seen":5,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/images/vendor/flag-icons/flags/4x3/gb.svg?516897fd3988e35032b772b026a19f75","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /images/vendor/flag-icons/flags/4x3/gb.svg?516897fd3988e35032b772b026a19f75 HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Q6JJCuhOtTnYx23I; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 09 Oct 2025 22:22:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Sep 2023 15:49:30 GMT\r\netag: W/\"650db78a-217\"\r\nexpires: Sat, 08 Nov 2025 22:22:29 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 551669\r\ncontent-length: 330\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcfef6780b36bef537381474df9d0be9","sha1":"68b2ead4370e7ab7b70eb6d35a09c31e73c44fd3","sha256":"51a8613ac1b05eafb9486e6420336bd8b95dae7a9d11def6318776a61c701a08","sha512":"ec21f7b6951f00f0da0acfdb21bbbe037dcaa2a14f2a1de02c991f91af689b1039720801ebb90ca900379766d5726752ed7fd85a349db508d3f94edecc4ec0a0","ssdeep":"","tlshash":"acf0c9c8c32c7005c70a97105cbcf8e3d4c9a1ce588400eab4e09ae460aeba7dccadd1","first_seen":"2023-04-17T21:02:35Z","last_seen":"2026-04-19T05:02:12.894052Z","times_seen":1910,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/js/app.js?id=869964b45e5b19ff9c433c436e5ebc7d","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:57.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /js/app.js?id=869964b45e5b19ff9c433c436e5ebc7d HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=bAwa5j0ROBOXOe9o; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=P9BPfDAvThvTCGUw; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg10_=1760600217; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 14 Oct 2025 07:02:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 03 Apr 2025 07:27:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67ee3847-cab96\"\r\nexpires: Thu, 13 Nov 2025 07:02:21 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 174969\r\ncontent-length: 212589\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":830358,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64403)","md5":"a6b0316f4373988332932d8021a151f1","sha1":"ff8b6993171e6a590454e0f10c3d7cd98ae8fe42","sha256":"2e9400a9819ef027a46a316126033bacd1507c7ec1fa622f133724432bdcc5b5","sha512":"59051e2e7a67afcbf28cb4ff1ad28daae7648540af51d5f0daf2dcf2489e723db1aeda423f7d065b03107d8a4ab16e23c2c174ac957a32f69e4685c508dd21a7","ssdeep":"12288:mhIF1XRkfMvNfDyjnOvco9FiMPbXCkzsEksB:me1XRkEh0nOkaIMPbXCkzisB","tlshash":"c605f8da71d2b8e6679311fa503f400af23f5d55b4098460b3a5e8e6b927d4a703bf38","first_seen":"2025-06-20T15:21:04.749487Z","last_seen":"2026-03-03T08:59:04.270199Z","times_seen":4,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588059/0000-3aed8f4f-rpc8zfqg.png","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588059/0000-3aed8f4f-rpc8zfqg.png HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FF9PykjmGjMM3bfM; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:26:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 20767\r\nlast-modified: Thu, 16 Oct 2025 07:22:17 GMT\r\netag: \"68f09d29-511f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 625\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20767,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 425x350, components 3","md5":"4ee1319d69e8734445be0d6a6b397219","sha1":"5c8c2227030e38927b79c021c815307069ab4910","sha256":"8122ec4f0893e5c3266e66bacb45ccab920391b224112cc9ae319f0cd20b6a60","sha512":"11dd1766c897c911aa259ad7963dcf0a221b70e2eb2020c8772b345671e2b36c5dbc277fa8857142916df2481635975157cdea5db89f4d23f549c0e98f24f353","ssdeep":"384:GUWznTCW8M/1Q7bBU2GZwZTu0IP73Qo8eMFikEPJc1CP756T56owSOm/cw:GUWLXx/eSr4u0IP73fjMYkcxC6owXw","tlshash":"4792af279d5dd723871606f8be035c3d626f3f0e6c6292b604725dcb9ce2c651c4a89d","first_seen":"2025-10-16T07:37:29.318816Z","last_seen":"2025-10-16T07:37:29.318816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588036/0000-b1af75f8-jslwsvgy.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588036/0000-b1af75f8-jslwsvgy.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xWHVu15heE9tmPtI; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:24:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45027\r\nlast-modified: Thu, 16 Oct 2025 07:04:26 GMT\r\netag: \"68f098fa-afe3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 776\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":45027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 466x350, components 3","md5":"00c4ab02a9356b7a082dc1a89a9abf86","sha1":"4b5d55b0d9fb957c8e6f93be95c329889a61cc75","sha256":"af54e80da0858f059ed1c22791d72ab64475c98798947abc2320bb10085406b9","sha512":"12b47cc4667bedaa6312bc4933373967e28c537440b605d42691373917a4a73fd42513f4f981a5fc70ec64f2da65b2bb141e21c685529988d9e3d20d722dee58","ssdeep":"768:Grg0+eCc/LsgMhkpVpixLoBqwuD/HeEL6vxIxfgGLJ3xks7caAgyZ86qh2IzSBXw:AgQCc/AgU8VgUBq1/HB6SaG93es73A/q","tlshash":"b71302019d642ae16f22c25b400df6eddd24fda01eb91c98ab49c25d3a70df6e0caf48","first_seen":"2025-10-16T07:37:29.331047Z","last_seen":"2025-10-16T07:37:29.331047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588016/0000-09f48b0f-ynu9bab6.png","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588016/0000-09f48b0f-ynu9bab6.png HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KZ4ZJQjFzGAY4ZlX; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:35:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 13096\r\nlast-modified: Thu, 16 Oct 2025 06:21:48 GMT\r\netag: \"68f08efc-3328\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 3663\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13096,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 500x333, components 3","md5":"79e5d315d634f88f5be6afa274d9eddf","sha1":"9eeef891032436b35d3c88cc98fc64ffb8e560c6","sha256":"46db91134331a01aab7f6cfba2a9998f65b5b3b1d7d25278c90d7642888980aa","sha512":"2cbc2bb3a62e791d20e3a45b1aa52a3b3bdb3cfd4a109885452a57a221d8b52b1a3d773420fa7491e1c5e23dec758d210a7b4eb6e598e3d9ff7e0b454400e699","ssdeep":"384:G6BqKYE8ddPQZvGV/gXHtGe97QqOmabid6:G6B+74Ae97QhmXs","tlshash":"3642d1502603d7924763498c7b0bf56ad4479982ffa22ab073d387a05a5fdf4dc8c469","first_seen":"2025-10-16T07:37:29.346036Z","last_seen":"2025-10-16T07:37:29.346036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/images/vendor/flag-icons/flags/4x3/cn.svg?890ef6a654b865eea03306b076c178f9","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /images/vendor/flag-icons/flags/4x3/cn.svg?890ef6a654b865eea03306b076c178f9 HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=kuA22jZocpaDRQ1R; __ddg10_=1760600218; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fwj45QuMTXc7AvW7; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 15 Oct 2025 12:57:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Sep 2023 15:49:30 GMT\r\netag: W/\"650db78a-31b\"\r\nexpires: Fri, 14 Nov 2025 12:57:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 67185\r\ncontent-length: 349\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":795,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01b1e16506941b544ede62b2d65fdbad","sha1":"503625f72ecacba80521c55deb4bdc76ebb3494a","sha256":"c1f228412a5062bbd02fbc3e54727820e0dbbdbc1bdc4aa7563ddceb36b4c43c","sha512":"594362210c65f69407022d105eb9c3aa9363409a717d2b28a5ed8d88cf78943ccab72d4abde84a826a05cfdc8d78ed7df0b5f299cb8a5ddf2f2bf719b2a439e4","ssdeep":"","tlshash":"6801c911e106900cc60a4344c2acfe88a746f0a283b3448bfe30269a813cd2f59ea7cd","first_seen":"2023-05-06T10:54:58Z","last_seen":"2026-04-18T22:48:31.007823Z","times_seen":280,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:02:55 GMT\r\nexpires: Thu, 15 Oct 2026 00:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113643\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-19T12:48:43.34951Z","times_seen":20350,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":80,"dns":1,"connect":14,"send":0,"wait":15,"receive":17,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T07:36:56.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KhcxvTEj5gLto0d3; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg10_=1760600217; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:57 GMT\n__ddg1_=2FgQe1iHjb7skmeGhtmX; Domain=.yabai.si; HttpOnly; Path=/; Expires=Fri, 16-Oct-2026 07:36:57 GMT\nXSRF-TOKEN=eyJpdiI6Ik9yb0RjZXdZOVplOVQ0SWtZbnJMQXc9PSIsInZhbHVlIjoiNUZJcWFCNFI0SEdTdThRRVU1akIzS0ozS0FRREwvRlEra3BFUW5GS0NJOThIdnZjV0lxNU4wVG5pM1FKSGg5MlMrc2NWbStHdytZRlA4bVEwVmlWcmF3YUZpUE9CMEpIUnN2N096anVNYUJCYmVuUk5nRmE4bGJJZmdXUHJOdG4iLCJtYWMiOiIyYTY1NTI1YzBjNjgwY2Y4MTMxNWY1MjhmMmY3NzEyYzEyZDZkMDc1Y2RmYmY0ZTc4NWVlZjRhMDViZWMwZWVhIiwidGFnIjoiIn0%3D; expires=Thu, 16 Oct 2025 09:36:57 GMT; Max-Age=7200; path=/; samesite=lax\nyabai_session=eyJpdiI6IjJmVS9nUXZhSlRNbis1NjY0UWlsSmc9PSIsInZhbHVlIjoiMnIvcGs2ayt2QWtnaEZNYVU2K3I5Q1RUQjgwM0UwY0hxSkVFTjJVRmZ1MmJsYURmdTYrWFlEc3c5Rmd0QXhpa3pGVElLM2ZWR1NBWXZUU0U0eWRXQVIxVWJrOTQ5c1h5TDBFNWVmVW1SZHAwVm00VE5YMGFIY2RMem43YTBTN2EiLCJtYWMiOiI4Y2M3MDJkNzQ4NTRmMDA1Njk1ZGJmNTYxOTg4ZTg5NGQxZmVlNmE1Y2Q1YzAwNjE1N2Q4ZGJlODU2MTMwMmIxIiwidGFnIjoiIn0%3D; expires=Thu, 16 Oct 2025 09:36:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Thu, 16 Oct 2025 07:36:57 GMT\r\nlocation: https://yabai.si/g\r\nvary: X-Inertia, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36019,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":82,"dns":0,"connect":20,"send":0,"wait":274,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:57.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 07:36:57 GMT\r\ndate: Thu, 16 Oct 2025 07:36:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-04-19T13:09:37.391884Z","times_seen":1048,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":110,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588062/0000-1cb17683-ec3seopz.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588062/0000-1cb17683-ec3seopz.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kuA22jZocpaDRQ1R; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:26:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26967\r\nlast-modified: Thu, 16 Oct 2025 07:26:10 GMT\r\netag: \"68f09e12-6957\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 647\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 496x350, components 3","md5":"e5cd8e4f6cebf6b317584f948913db0a","sha1":"d03a457e0793f860561bfb2c3035f443ddf9c2d6","sha256":"a5155b23b1b179b6732c94a3063bb10213298a7e051da30f8f18de85ad3ed8a7","sha512":"8e4f310dca1d5d33dc82dd2d19f08be01db37f86a9a911f5a98cfd13539e8d79280e3628183d5d8cf23549ce38e96abbfb6b1b2c2330c455928226d0006d19ba","ssdeep":"384:GhQfafiMgtG91nr7SFDE8mo1jyhpFcaVTdDDC+ZbdJxhr+eoTR:GhaW1Z1nYiosh3ljuAdJDSF","tlshash":"e2c2d0e34f258753471ea3a1ef2758bd2b4a0a9efa1779f913061ac46231c7311ad85c","first_seen":"2025-10-16T07:37:29.370707Z","last_seen":"2025-10-16T07:37:29.370707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588060/0000-72457174-dqmbw1ae.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588060/0000-72457174-dqmbw1ae.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bFpUaRXjZq5Wi1oO; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:24:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25866\r\nlast-modified: Thu, 16 Oct 2025 07:23:35 GMT\r\netag: \"68f09d77-650a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 776\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":25866,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 248x350, components 3","md5":"35e9d6bc2c679f6a8ec752ea77a345c9","sha1":"f9aa5007b1d7ff0f832efb98a4431bb24fc4193b","sha256":"551e7cca7a665fe48c9c53e9b8e4a43d6505f08b0a78181ac37893bdc768347d","sha512":"00f364425132c4eb716213b4d7d4dfa6196e054a42840c8f43a276d99ba62419fafd18a159cb181ca57bba80834ca1b8ab2b0085280fa016afecb5f7ca18817f","ssdeep":"384:GuykOTWIZQMHwYuwKPYyfv8Ux4k9PAdSH9nFgDBJ4Bwt:GuySUwLrPlfv8Uqk6dSH1FSJ4Wt","tlshash":"1ac2e12c13c9c512af2ea16787f2b05327837b163d6176bd5c603f868a14fb0c2917b9","first_seen":"2025-10-16T07:37:29.381095Z","last_seen":"2025-10-16T07:37:29.381095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588033/0000-26127024-1vb18apx.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588033/0000-26127024-1vb18apx.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=c7lJS5ncavCkBwbg; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:36:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23417\r\nlast-modified: Thu, 16 Oct 2025 07:01:22 GMT\r\netag: \"68f09842-5b79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 246x350, components 3","md5":"57067905603b70b96ed35e7031ec6117","sha1":"52569df3a4bba4371952b9eea1fcf6ca5c0c4f40","sha256":"404b3215720880202cb6b273129ae3d78c4be177550ab4710cfc062e19dc49dd","sha512":"e2ea349a4a069fa2d1babafccd71a6eb19166ffefc5b2a38d10e514d515494002a4be5a37d17d6d52dee908de8316b5450d3ba3aefc0c588b87c451b9d3c8251","ssdeep":"384:GIXh4g0PfEVZYRHJ5gxK9AYWnxrGtGldo/ER7ZJgkhTXy7Nzph6DfygmqV5jmHAH:GIXh4g0Pf4yJew9AYWnxCe/JrgYXy76L","tlshash":"c6b2e1f479900052bfef2df3affba0e3daa0107198a791375119cd435928cf69129719","first_seen":"2025-10-16T07:37:29.392576Z","last_seen":"2025-10-16T07:37:29.392576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588014/0000-643e733a-dupemaec.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588014/0000-643e733a-dupemaec.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Yw6d5neYPW2HY5iZ; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:57:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28809\r\nlast-modified: Thu, 16 Oct 2025 06:11:17 GMT\r\netag: \"68f08c85-7089\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2357\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":28809,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 243x350, components 3","md5":"bd0a5895613a0fbcf50d9677c7cb0ccd","sha1":"422f737cd34e6d4c0fba87b72b823bed8394cccd","sha256":"df2cebb5d41732f050aae7eba03b97429ca7fb9616e3ad4ee8d0a6fd773a98b3","sha512":"31ac6142aec11d383dcc48045c043fa33d2e73fa4b61b1c0778872dcd4e258f4f73a9057a443ce8c7a45cb0eb2f1e79b0f1a1aa1c5fee72d996e34f99a769bf4","ssdeep":"768:GRwJbY0lbBPD9nORFoF53owd8ixL0zXQf+oeAv7EcH:6ElVP50FoX3d8ixaoXOcH","tlshash":"7dd2f10985c6a505fb2864a9eb440da757e08bf03c85d3bd5af0fc50ede5c739a0ba35","first_seen":"2025-10-16T07:37:29.402873Z","last_seen":"2025-10-16T07:37:29.402873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/images/vendor/flag-icons/flags/4x3/fr.svg?b377e77885d6a93660dcaf59f68ab2af","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /images/vendor/flag-icons/flags/4x3/fr.svg?b377e77885d6a93660dcaf59f68ab2af HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=kuA22jZocpaDRQ1R; __ddg10_=1760600218; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=goMl0sXDQs1o71fX; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 14 Oct 2025 23:39:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Sep 2023 15:49:30 GMT\r\netag: W/\"650db78a-121\"\r\nexpires: Thu, 13 Nov 2025 23:39:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 115075\r\ncontent-length: 194\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc4d943dbac895a562d174fc60d3a8df","sha1":"43787164ac316df0a0131e02c83b7970ce5f8c92","sha256":"c19557a7703c7239bb32690d9166e34f97d9191e567031292b3c1a5e50176b9c","sha512":"bcf9a5d7ff770551ed37294e7c6246249c8ce4de2f51e542744751f0fe52e29d9a7bb143c3374764b8e2581e9d9017fd8f245af5a67462c746221cff36859d71","ssdeep":"","tlshash":"dbd02bf8937da414461847344b3c35d26c7670ca619420cef4e058a4660d1b75ccb5e9","first_seen":"2023-05-09T23:59:51Z","last_seen":"2026-04-18T22:48:31.003475Z","times_seen":370,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588067/0000-83da4d93-r20joyce.png","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588067/0000-83da4d93-r20joyce.png HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=alHeW8jzelEIQQVo; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:36:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 49350\r\nlast-modified: Thu, 16 Oct 2025 07:33:16 GMT\r\netag: \"68f09fbc-c0c6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 36\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49350,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 500x348, components 3","md5":"bb162f914ca5f10be4a91a52fec2a8b1","sha1":"3b0e20137183d44f358ad2920dc89f95f85afc93","sha256":"61e270ed51156938b91799b4cee4f5040f179a8d39b7960a4005e6f657096f28","sha512":"6aedb3c1afd39ac80db5513f41faec6bc8a6ec20821623530a5c06568c9b5952ceb04837f68a1c0a84334165e12aa647a6577b5eff11f23115902da54fa8665c","ssdeep":"1536:QZKx2LaPgAp3zv+qZzY1qcSO6QORNKoBx:W2P/pDWqsfskoL","tlshash":"2223f14d1149b58f32ae90b18a98110a08d01c946327c5f88b629ab9eef5f5cb7e712b","first_seen":"2025-10-16T07:37:29.42496Z","last_seen":"2025-10-16T07:37:29.42496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588061/0000-c6d4e9a3-hk4mgqjt.webp","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588061/0000-c6d4e9a3-hk4mgqjt.webp HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1KpduOD5VsWVFtda; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:26:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20024\r\nlast-modified: Thu, 16 Oct 2025 07:24:24 GMT\r\netag: \"68f09da8-4e38\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 647\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":20024,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 250x350, components 3","md5":"437d90623380e26b35d98cdb938c36f5","sha1":"65410025d5a8a78a8619beccaf88544bfbc1b0af","sha256":"72d6602667838f82a3500ccf276b23259cd723e894875acea569e8d89a4b1e3f","sha512":"189572cde60b81fd8383cb56419915becb90a13dfd4752e9c0820c2209253c2e288c1ef03b742bc280000c7c96bbc4e82cf0e2769327cf3288652abef03cdca2","ssdeep":"384:G0ufr3yaUt8Bw6GFgO5NgSpGxqZ2De80pc9lQgdNRBhvHGbcL:G0uWaJisO5Nuqg9ygfThPG4","tlshash":"0292d0ad705d5720870381ab18f51a48f1875c2da7674b3875784bbc9fe3c3a4d1cc6a","first_seen":"2025-10-16T07:37:29.439193Z","last_seen":"2025-10-16T07:37:29.439193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588027/0000-1d88746a-8el1pbuw.png","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588027/0000-1d88746a-8el1pbuw.png HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TUD68yLHuSK9Uvu2; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:43:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 16165\r\nlast-modified: Thu, 16 Oct 2025 06:41:15 GMT\r\netag: \"68f0938b-3f25\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 3192\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 233x350, components 3","md5":"bf71cb4b9ce058fe05f16bedd9fb5d09","sha1":"f34aa7c2349f56435a44e6e3b7ebea0fa86dc11a","sha256":"6d31a03246dbd4ba964e03db21391295b611dec126247eca2eb059d35bca09e3","sha512":"7639f5ae6777fe5e80b93be8e9ab8f4f0e9dd81f42ad818867e52ad4167d6a051d3e92d44ee768f55c5d068623c09a296342d6b70c8d57dc0688407c46d2a296","ssdeep":"384:GTPOz1B2oOImuO/G/T/ZLCLiij1tqJciAC+kHqVZ/bi:GTPOyEO6/El1tqJcZC+kWw","tlshash":"5272d0e7b73a9288be70d67c33053fc21a0569452ec6207e71e6b4c665bddf750882c4","first_seen":"2025-10-16T07:37:29.448899Z","last_seen":"2025-10-16T07:37:29.448899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587972/0000-30ab5bdb-db2cxmmu.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587972/0000-30ab5bdb-db2cxmmu.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OyYsxqQLMUqCCh9k; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 05:40:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25010\r\nlast-modified: Thu, 16 Oct 2025 05:04:10 GMT\r\netag: \"68f07cca-61b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 6996\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":25010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 241x350, components 3","md5":"f674b8c79e56e5e1d74e3ac97ca884f8","sha1":"4fbb9bf86003661c46a253991c335844ecaef4a3","sha256":"e4781f84cbab67ef0906aa16e51443a32fb4c41e14f397d2d4d0eb8d84c2fef8","sha512":"3f732a9bbf43e3e9dfc84d81e4ed7f590e569ebbdd4c03ca46e5337de38127349921837ecfe423704941cfc4e73d0ad8fd2569826209fc33d4a6d804a0117c67","ssdeep":"768:G70UAQ32kykOWQ94gudEdwHoY2ZImiw3tBE:w0/QnOvGgudSwHT2RE","tlshash":"15b2c03de98d11fa830e9c627d983e52e947786c08639cb821f0c5beaf15d344de499e","first_seen":"2025-10-16T07:37:29.456746Z","last_seen":"2025-10-16T07:37:29.456746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":38,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587970/0000-17c4ee70-gls6iuei.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587970/0000-17c4ee70-gls6iuei.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RY7XGuIcYzvK4kNJ; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 05:40:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28063\r\nlast-modified: Thu, 16 Oct 2025 05:02:04 GMT\r\netag: \"68f07c4c-6d9f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 6997\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":28063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 247x350, components 3","md5":"394ff5ca2260e9243537da05d0eb6e1c","sha1":"4e821254c467829cb8567e101251a69c7c718e0b","sha256":"f12d764a8fdd6f9306e77ce7da62cb61306babdb6313583413776dd6718d5e6a","sha512":"5b9a03a01b94185aff06e08e3c884a6916a47635eac307bbc47f1ad7ce1038bf9936e9bb3c966ef5ba8f2066ae8b713ee66ca85f53503f92d380d6ac2dca068c","ssdeep":"768:Gdfjx9SpHICa4P2E4kJQR1xCNv0akkCyjQwLMZ:Ofjx9S1r2XkK6fVCyjZYZ","tlshash":"1cc2f21d3e783cb5d9974a7e9bab9184067ed44003605bb9073de7fd6580c78dc10ae6","first_seen":"2025-10-16T07:37:29.463237Z","last_seen":"2025-10-16T07:37:29.463237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 16 Oct 2025 07:36:59 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://yabai.si\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":287,"dns":1,"connect":95,"send":0,"wait":101,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 07:36:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 98f5e36c2a2656cb-OSL\r\naccess-control-allow-origin: https://yabai.si\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":47,"dns":33,"connect":1,"send":0,"wait":14,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588002/0000-38d165e8-qtguu5c5.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588002/0000-38d165e8-qtguu5c5.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=psvqytX2cpUWGE97; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:57:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23329\r\nlast-modified: Thu, 16 Oct 2025 05:51:59 GMT\r\netag: \"68f087ff-5b21\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2357\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23329,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 250x350, components 3","md5":"96681080380b33d0e5be211e26e4a4c4","sha1":"8bdaa59c965c74f5804a492e32f215cd332ac929","sha256":"9ad947304b17a6268b72f99c5d5701915429e189b0fe0098c40ef3a7adbf3711","sha512":"2fc08b640e821c3e05c8808c0b1b80370f9c8077625cf361ad71a02d5c6ee351f9732389c52cd91991a9fce5dbe842721e9e5fb3e974c1293e5a6f955eae1618","ssdeep":"384:G0d+GlkITD/YBRJ2pX6EQD5awcqy1UWMrgprq4N+bJSp3zVJ:G0eI/cJ0e5aOhWa8e4+S9zVJ","tlshash":"47a2e12d247f6cf4ef11a73c1501ebdb62642f259896fd3932c3d0a53a88eb05a494b8","first_seen":"2025-10-16T07:37:29.479198Z","last_seen":"2025-10-16T07:37:29.479198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":47,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587996/0000-70a07cdf-z0skwfie.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587996/0000-70a07cdf-z0skwfie.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=q6IJn9CNMy8Ye1HR; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:57:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16475\r\nlast-modified: Thu, 16 Oct 2025 05:48:18 GMT\r\netag: \"68f08722-405b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2357\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 245x350, components 3","md5":"61a6519f24a906fee77df5dbabe7a507","sha1":"fa5f9d228cee4a21fa099dd797c15179c9203406","sha256":"37e3c7dde74251ca5836700b6f9fb090b18986489e8aa0b5696e51f4eb798f07","sha512":"e2d88cced5c6e6c6204d6aa9f966c3081d3ec1fbfacbac019262272b262289ef25e406eb32525cffe38bb5272cbb154d76fb8a490fd3c00230565e70cf75f362","ssdeep":"384:G3xZFr1AFmLT5eCAQxpEOzRQIJDoMo4cY0D5Tj1GLUC:G3xZFr6wLTFlpEURFbmtj1Gh","tlshash":"8e72d0ac1f679085af5285e74de9772768e14a014370fab46931fd3631b3cf08b156e8","first_seen":"2025-10-16T07:37:29.491611Z","last_seen":"2025-10-16T07:37:29.491611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587993/0000-a54488ab-yoths4uj.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587993/0000-a54488ab-yoths4uj.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WsG3cTw3FIgX2Q77; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:57:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14039\r\nlast-modified: Thu, 16 Oct 2025 05:47:48 GMT\r\netag: \"68f08704-36d7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2357\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":14039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 241x350, components 3","md5":"f0bc627d0a910121bca8603219fe0e53","sha1":"5bdc897925535d46704607fb493f42255a2a5e88","sha256":"49c1226ce24e3be4a02a4274f1c819620e5161edcb991cb4ae8eaec7b34a9d81","sha512":"928c7875732d87f6a1f687a7bd041823598ed4d64316606bc6cc011d60d6f113b5b96283c630528c8f9447eddc31ca66ded81ad2657085a57b113ba3a16e3273","ssdeep":"384:G7PlPX0ScBEYl6Hp/5VrtELkE/6t8/hW0DXROQvt:G7PcB16T1tY68h9XROQF","tlshash":"f752c0ebc08c8702ff3443264343793a2a0ba95a6ed67138d431de991937fb96d8c526","first_seen":"2025-10-16T07:37:29.499974Z","last_seen":"2025-10-16T07:37:29.499974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/images/vendor/flag-icons/flags/4x3/kr.svg?2b4d800b17bf5c624a185da1c2966854","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /images/vendor/flag-icons/flags/4x3/kr.svg?2b4d800b17bf5c624a185da1c2966854 HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=kuA22jZocpaDRQ1R; __ddg10_=1760600218; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=g6tTbHfFuKf95Heq; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 15 Oct 2025 19:11:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Sep 2023 15:49:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650db78a-407\"\r\nexpires: Fri, 14 Nov 2025 19:11:21 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 44741\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1031,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cdfad72c8e727ef9a0567798866d0e2","sha1":"a8427907486796ad44f36a7ed0dfa116d2decd11","sha256":"268e0a2d6ce180930393935951f59da54f55d8ddf573222278e9c61c0635da3f","sha512":"e16095bd740b4a57b5e8d1e5401c2323d8ca84fa73025394a7883b4b1e7a20108c1b7306f2d708ee8fd2dd4844177c578731d8f7da33d0186c742338416b5182","ssdeep":"","tlshash":"7b11bdb060f9902c866d8302dbfd54c89b1f70e7574206dab95c38b45f60457da876da","first_seen":"2023-05-06T10:54:58Z","last_seen":"2026-04-18T10:26:03.503274Z","times_seen":278,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:02:55 GMT\r\nexpires: Thu, 15 Oct 2026 00:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113643\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-19T12:48:43.34951Z","times_seen":20350,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":33,"dns":1,"connect":29,"send":0,"wait":22,"receive":14,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.138.102","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 07:36:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 98f5e36c188adfec-OSL\r\naccess-control-allow-origin: https://yabai.si\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":42,"dns":33,"connect":1,"send":0,"wait":9,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"npsgzmznak2s.s4.adsco.re/","fqdn":"npsgzmznak2s.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.502Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: npsgzmznak2s.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":331,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.16543233501121168","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.138.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Oct 2025 07:36:59 GMT\r\ncontent-type: text/html\r\ncf-ray: 98f5e36be970b512-OSL\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nlink: \u003c//adsco.re/\u003e; crossorigin; rel=preconnect, \u003chttps://6.adsco.re/\u003e; rel=prefetch; crossorigin; as=fetch, \u003chttps://4.adsco.re/\u003e; rel=prefetch; crossorigin; as=fetch, \u003chttps://6.adsco.re:2087/\u003e; rel=prefetch; crossorigin; as=fetch, \u003chttps://4.adsco.re:2087/\u003e; rel=prefetch; crossorigin; as=fetch\r\nexpires: Sun, 16 Nov 2025 07:36:59 GMT\r\netag: W/\"AzvlFNKMebVPkzA4pS6fCw==\"\r\ncontent-encoding: gzip\r\nage: 210686\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79011,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (713)","md5":"033be514d28c79b54f933038a52e9f0b","sha1":"f32bed55ac84f1a9913c5e2ecb327a8da625b746","sha256":"d5a749c3d8588f9cef49160c2058b8dee8f025ce7b78f18af87e32dcb28c45b7","sha512":"78f84633a1e613ef057bde33c3731875f4541c3333835a97755ae105c1104ec24bc138a842d0d7ea0a7ebedc591e133860fd763ec5bc2803e251e11c7d40d05a","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHIMRBy5kgxYbFQzd9elw3mbuk92lLkt6WZjyQCT/8GLgR:pok3m4bHIeEk+zd9elw3mb2VwQFu45q","tlshash":"4b734ca971a2702943b238e9567f5315f1ba0a902c0690e0d37dc9643c74edf927fb9e","first_seen":"2025-10-08T20:09:38.152092Z","last_seen":"2025-10-17T15:07:50.943623Z","times_seen":710,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/gforce.min.css","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1285643437.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 12:33:55 GMT","end":"Tue, 02 Dec 2025 12:33:54 GMT"},"fingerprint":{"sha1":"15:3F:64:32:A4:AF:89:A4:F4:7E:E1:A5:CE:F8:07:16:55:38:1B:1E","sha256":"6F:EC:F2:53:6C:53:22:01:83:A3:62:2E:AF:BE:84:3B:43:72:03:37:D2:DE:4B:80:22:E7:37:8F:55:1F:4A:08"}}},"request":{"raw":"GET /gforce.min.css HTTP/1.1\r\nHost: www.betteradsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 07:36:58 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb4\r\nexpires: Mon, 20 Oct 2025 22:38:39 GMT\r\naccess-control-allow-origin: https://yabai.si\r\nlink: \u003chttps://betteradsystem.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwgBX63NDQFBDAG5TAoJAfclIQMADAElE8I0AbcGAAAA\r\nx-77-nzt-ray: 2a494a150165213bbfa0f0684789f607\r\nx-77-cache: HIT\r\nx-77-age: 205093\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41943,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"14870898709b0370976556ba7d86b45f","sha1":"002ccecf9ba6ca288947984fc18a42109bb932c7","sha256":"168d0f71363192369f2783efb7e940d8f94b9fd2335d3e985f2922e164e0aa77","sha512":"a400216235b7adb8dcb21a27f6b4bd19b101e9094726edd27bc8b0b84dc95d715fb76049e79ad293d120bcd223702ee708ed40cc6756edb391c365a6d826a8cc","ssdeep":"768:bt9rqAYKK6TZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC0zCntlqor:bb1ZzFQ9JsTgZvfzmMzhYrTscpaZp","tlshash":"541329aab286282601e741b9513eb316b23305167812d458fcb9cdf96e3dd86117b7fc","first_seen":"2025-10-16T07:37:29.524599Z","last_seen":"2025-10-16T07:37:29.524599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":79,"dns":64,"connect":1,"send":0,"wait":26,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588066/0000-04a83b2c-kww7zyw2.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588066/0000-04a83b2c-kww7zyw2.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=h3ARZOHFrPVKnF8F; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:36:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26881\r\nlast-modified: Thu, 16 Oct 2025 07:32:17 GMT\r\netag: \"68f09f81-6901\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 33\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":26881,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 247x350, components 3","md5":"9631ccc5e407730d6bfa41d5e07e0521","sha1":"5f61cb017c69b46e2200553acfe325f34821e084","sha256":"e81a5e2f7af9e0855e8817bd480962b6e316577b6f5f6baee8548d529dc1b690","sha512":"566fd14d1b6e3a049a043b98e9aabe0e9a4e7f2ba7bbc17687a5afa36e2cb0574b384f5a6985afc94b50411d228270564c4c5f601e9f50a66669052771edbd64","ssdeep":"384:Gd978BtoEoIedax+QF5sCF/eLpvOAlSx8ifNB6/2ktH6iejBq:GdUjJrx+k5sOMpvOkifi/jH6Fj0","tlshash":"9dc2e13552b698314fb01dba8d46783aa9ae4851e3dc0c3bed3245337f86e3e746c056","first_seen":"2025-10-16T07:37:29.5386Z","last_seen":"2025-10-16T07:37:29.5386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588007/0000-b8c75460-5rzqr6qx.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588007/0000-b8c75460-5rzqr6qx.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WWMb59AVcBZptxrM; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 06:57:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24991\r\nlast-modified: Thu, 16 Oct 2025 05:57:40 GMT\r\netag: \"68f08954-619f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2357\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24991,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 273x350, components 3","md5":"2d8af275121dff6ff4d6559bfd544825","sha1":"9e522a2c22d65b2765843781c91e319f5e290a92","sha256":"d81ccd6d4c913a05fa6af098f61195511093de82d1c7997ecfd247c7b942cf70","sha512":"3bd8c75578be772d2fae268ed47b9d4e6416f70a92935e22f0ba370f5984e58dcba190f08046dde014f0f36dcd9f0a9dbca2999f6cbbdf1391ae7555c968624c","ssdeep":"768:Gc9BU9oa4SEyx7Y05D4NmKzofC1IYOjmFMqJcUFF:PzHa4SEb05DOokId/cTP","tlshash":"bbb2e18ad79c8853ff38da093761691a1348d4593f5fbf33d02d82e2d468cb5e668542","first_seen":"2025-10-16T07:37:29.550407Z","last_seen":"2025-10-16T07:37:29.550407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587971/0000-82161e0f-w9mfydf4.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587971/0000-82161e0f-w9mfydf4.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VwGzFQQFzZqRBRKH; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 05:40:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19340\r\nlast-modified: Thu, 16 Oct 2025 05:03:17 GMT\r\netag: \"68f07c95-4b8c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 6993\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 247x350, components 3","md5":"48d7a69d2785f7cec3344ba0fc48c900","sha1":"26e089438aa2d4a03db7c170288935c0b0ee4ee8","sha256":"57c4a45e8a8e23a98e8ab47e95a19a7a7856bf67a73ecef2e65c93296c1c2dfb","sha512":"4fee100b0083e14d7b6f7e4e7aedda3ebbba062b87b1d925f3285828195185a238ab6a2e24f800b2da446b0923dd2168688d4eea467eb325e1444eff24a6ef2a","ssdeep":"384:GdO6ufg0RHJbAmrgRJVlJRHN/GN3i0KFd5WNPSEky482l0LQllNrCWA26k3K:GdO6uH/0hjRHxGNisNXhS0LQllgC6","tlshash":"6992f14a3b1d9e13026263b668a600555ef4aea9b4b4a875005f6319e838cff30f670c","first_seen":"2025-10-16T07:37:29.564337Z","last_seen":"2025-10-16T07:37:29.564337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587965/0000-33c4e139-wcsg6tu1.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587965/0000-33c4e139-wcsg6tu1.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qHffSQELuKm6IYnV; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 05:40:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24655\r\nlast-modified: Thu, 16 Oct 2025 04:53:20 GMT\r\netag: \"68f07a40-604f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 6996\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":24655,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 246x350, components 3","md5":"c147a0b7830a64ca8c91a416c622a57f","sha1":"a5fba651e85f0f56a9721611d287a7a8b042c227","sha256":"895fd0b23bcd260cc9eb3059593fe51358ddd08f9aebe553884db695831d47b8","sha512":"650fd41ff722f4cb35128eae488f8b9edda336f1014b686f7ef9277727aefa9dc7f44e8693fac3a446edb4a66fab61221c61b8e284b19fdf4bbf948dce420294","ssdeep":"768:GIhG8T31PoeGe7AjK8Ms8kP+SwytCmeoSQmRrzdG0Q:DZxtkdMz4wygmeoSQiVRQ","tlshash":"37b2f1a910c39906ce46c6a3a25c39c5f282b6d0a58c36645f799d1efc02c7473ff2d6","first_seen":"2025-10-16T07:37:29.578611Z","last_seen":"2025-10-16T07:37:29.578611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"npsgzmznak2s.l4.adsco.re/","fqdn":"npsgzmznak2s.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:30 GMT","end":"Sun, 14 Dec 2025 09:14:29 GMT"},"fingerprint":{"sha1":"AA:48:1D:E2:C4:73:88:D6:A0:D5:36:32:2B:EE:2F:67:01:C4:3D:23","sha256":"FC:04:34:8C:BD:15:93:CB:47:29:34:FA:05:BA:8C:F8:AE:96:33:7F:42:F2:72:62:C9:07:CC:D2:57:B3:1D:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: npsgzmznak2s.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 07:36:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":142,"dns":67,"connect":25,"send":0,"wait":25,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:37:00.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2364\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 16 Oct 2025 07:37:00 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK nyc123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://yabai.si\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"06fcd7ed7d8fe7b6daef8f90580810b0","sha1":"dd0de8d01ced77f6945a94e08cabd1ef09f1d2a7","sha256":"7cbcdce707c39484004643cad08fcb144c8cbad0248415c0c19e0d4d2c2bbb15","sha512":"be56f850c6b7db25900c08cd63e18d73213af5a371622e9dc624677a4719b3d302b322e24095f429dbf114c09c570192c714ba35389764747f5a8db298cd7d54","ssdeep":"","tlshash":"4a210afcfc1fd7028a30894219f65217be3e418f60437ee090ac851a9cb5c356a76704","first_seen":"2025-10-16T07:37:29.58496Z","last_seen":"2025-10-16T07:37:29.58496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":286,"dns":1,"connect":92,"send":0,"wait":193,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3588063/0000-120af6d1-zv3s6ezs.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3588063/0000-120af6d1-zv3s6ezs.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Pa775wsJA4mYgu9Q; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 07:36:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18947\r\nlast-modified: Thu, 16 Oct 2025 07:27:36 GMT\r\netag: \"68f09e68-4a03\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":18947,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 195x350, components 3","md5":"116720e1052dec593daa3d60c442171e","sha1":"392a5ba78432fbee3ac0aac92cab1be98080f59c","sha256":"be4e269f60161b0380669ec1147a2dd3cd05df367e649c8b2bd2eef3bca51543","sha512":"6b12c6acb801044a8f3c8d32558ccb6c37e85e9b9048f2a1dffcc2a5b9548188010e2d007705bf5564a37042c1560e1d5e9052e902bab6a2c069757ca6010923","ssdeep":"384:GhJ2TrzC7uTB6yMi0FUdLuX2vxHPGuChbp/X8vP+5Bz/h:GhfuV6yZ+xX2FG/EwBLh","tlshash":"c782d1e1515e45a8df01bfa6d541a7a288461e350b8ae6bcf42509910c74cfef237af3","first_seen":"2025-10-16T07:37:29.593685Z","last_seen":"2025-10-16T07:37:29.593685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587976/0000-0b4e731b-n0g9xuj1.jpg","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587976/0000-0b4e731b-n0g9xuj1.jpg HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4zS1O2A59PnVM4ry; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 05:38:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25309\r\nlast-modified: Thu, 16 Oct 2025 05:11:25 GMT\r\netag: \"68f07e7d-62dd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 7125\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":25309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 247x350, components 3","md5":"0a21afa6e02cf2d8098ca55cdafd0fbb","sha1":"a2d12830e99ac73f32015e7424fa06691d8c422b","sha256":"27ab4f264767bdb0a7b6c8ba13ca2d8a4fb2cc5abd711f55c47a9bcd359e8d85","sha512":"678b4b247c6fdda3de6ca65f695089bd5a8e83e69b026d746c9540d07def722e7e36d3590d8ba966992688b7074b0609132aeef3d8265fea2d0038a7687df7bd","ssdeep":"768:GdI96IWrchxEd9d8x27L9HIQOppSSGuUgu4s37:OT3du27L9o7zUgPQ","tlshash":"f8b2e04b1d02e2aa8b0e6132f51a4579d0e1490b3fe4bffd16b551a0e783e3ab8011ca","first_seen":"2025-10-16T07:37:29.601952Z","last_seen":"2025-10-16T07:37:29.601952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"npsgzmznak2s.n4.adsco.re/","fqdn":"npsgzmznak2s.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:20 GMT","end":"Sun, 14 Dec 2025 09:14:19 GMT"},"fingerprint":{"sha1":"E1:1C:75:CB:71:36:CE:62:CC:D3:97:20:A3:3E:A2:FA:DB:E6:BA:53","sha256":"71:DD:71:4E:B6:1B:9E:7A:90:D9:9D:D2:2D:76:D2:D4:30:96:42:27:B9:D5:71:B1:13:B4:4E:91:D6:27:1A:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: npsgzmznak2s.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":392,"dns":132,"connect":88,"send":0,"wait":0,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.yabai.si/3587966/0000-8b916895-dndklejo.png","fqdn":"s2.yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /3587966/0000-8b916895-dndklejo.png HTTP/1.1\r\nHost: s2.yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nCookie: __ddg8_=nCq0cp9ScEP4r7vg; __ddg10_=1760600217; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HUaMLK0TANx48Wx3; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 16 Oct 2025 05:40:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 24686\r\nlast-modified: Thu, 16 Oct 2025 04:54:36 GMT\r\netag: \"68f07a8c-606e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 6997\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":24686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 247x350, components 3","md5":"eb98df32aba26e6e5557974d3d8fd76a","sha1":"ac5bfad586a0bbddd681912cbe52ce17dab4be01","sha256":"d7c660197392673890d256dbb043eedf306c7d0b0d452090c17ea966fbf9425a","sha512":"126f0e643125a449fb77dea104eeb5c560b5d34483b3f82bd8032a4b0c245efff3ff5b68b570df16b543ad0a377257a2d13ce546c74586f6bfd35013c85e5dcd","ssdeep":"384:GdK5h0IpIvKuwM3tECWLp/1TpPmPLUOFTyzMhzzrpGS7Wyev8ty7xOTQ8:Gd4hfMKufdEh11FSLUezzVGS7Wmy70T1","tlshash":"bcb2e17ec1ee571acf66e3d2d6c04397e2c9849fb69058380a101c86258bbf055aab34","first_seen":"2025-10-16T07:37:29.61351Z","last_seen":"2025-10-16T07:37:29.61351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":34,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yabai.si/images/vendor/flag-icons/flags/4x3/es.svg?e3db1b5f8a2ec8ae87640f32237c01b3","fqdn":"yabai.si","domain":"yabai.si","tld":"si"},"ip":{"addr":"185.178.208.179","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:58.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rhvrpwww.dezsaphpmydemo.yabai.si","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 01:45:22 GMT","end":"Thu, 11 Dec 2025 01:45:21 GMT"},"fingerprint":{"sha1":"91:B9:2A:1D:7D:ED:57:17:56:0B:DA:7B:81:5A:6F:1F:4C:58:43:79","sha256":"5F:72:DA:2E:63:D3:25:45:1E:B1:0F:5C:0E:36:31:B2:C7:C9:3E:7B:07:2B:3C:9E:98:04:4E:7E:81:4D:08:D7"}}},"request":{"raw":"GET /images/vendor/flag-icons/flags/4x3/es.svg?e3db1b5f8a2ec8ae87640f32237c01b3 HTTP/1.1\r\nHost: yabai.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/g\r\nCookie: __ddg8_=alHeW8jzelEIQQVo; __ddg10_=1760600218; __ddg9_=91.90.42.154; __ddg1_=2FgQe1iHjb7skmeGhtmX; XSRF-TOKEN=eyJpdiI6InhxRUJPMTR3ellSVDkvYVpVeWhPNlE9PSIsInZhbHVlIjoiTXN0Z0M4YnR0NFZ2TVNqOTNlOXhQMG1oeXl0U1k3anY3NVBaa2tpSFZxWkYwTDFOQ0xscVJmM3lYdDNnWnZNN2I5NGpQQy9hRS9qUXRKd2V2TXFEVGR6T3kwbW00bXd4UWp6QzZidEJVMXgyWU16ZVJDMnlxTHpaelBQUkNYdjciLCJtYWMiOiJmOGExY2NlZWE1NWU5YmFlNjgxOGU1YjJmMTc2NzBhZTU1ZWRkZGQzM2ViZWJlZWU0ZGQ2NDA1OWZhYzJiMTJjIiwidGFnIjoiIn0%3D; yabai_session=eyJpdiI6InlXNjVwUnUwU1gwYmpZNU1INnBTMmc9PSIsInZhbHVlIjoidUEvZ2xXa0x0azBLT1JFeDg0UFM2OXpMS2FCNXBYa0wyQWc5ZmpuMzFyMnhHaFhQK0t6L0hsSWFyZjVrMUM4WHJHQUhxeHVtR3M5azlRUG1DN3JXeUN4ekE0UDV1NnVoTStBZ0JpVUFjU1NhMUFkMXozTDIxWVhjVHhHV1V4Z1EiLCJtYWMiOiIyMzJmNzExMTdkY2ViYmU2MGIxMDdiYjAxMDRlMjhhYWUwYzU5MzZhMDI3NTc2ODRiZjMwODY3Yzc4NDNmNzU0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bQQjjZsKqrDZeuEQ; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg10_=1760600218; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\n__ddg9_=91.90.42.154; Domain=.yabai.si; Path=/; Expires=Thu, 16-Oct-2025 07:56:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 15 Oct 2025 06:23:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Sep 2023 15:49:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650db78a-166a7\"\r\nexpires: Fri, 14 Nov 2025 06:23:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 90834\r\ncontent-length: 16479\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":91815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91221aeba452aeb57c55826c70920835","sha1":"a9556ab0e13a9fb6f2bed11251c35044864a0b52","sha256":"6fe80291cd9be7f06d9f205081c3a5264da531b49e40ddbe63bda08a83c1afd9","sha512":"c3888a7c6e7c9f985f4801738da1b1b405a7d9a9a95906c9b17926c627f7c100c191d684ece752906e72406574d92e3e42d0affd2efabdaaafc18bf1ab6b8e42","ssdeep":"1536:3xMcdm6KY4kmAq6RPewyYd491pPiv1iuLVg6wuU9GW/b/qOuD+1TcKszCWsXiKiB:Wcdm6KY4ky10d4vpPiv1P","tlshash":"c993ab7c871c83bc9a12cb789f3da0f5630ef0e9b23a9256541c89b061e35ded46b9c5","first_seen":"2023-05-08T15:18:32Z","last_seen":"2026-04-18T23:18:14.797822Z","times_seen":794,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yabai.si/g","date":"2025-10-16T07:36:59.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yabai.si\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 16 Oct 2025 07:36:59 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://yabai.si\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":287,"dns":1,"connect":94,"send":0,"wait":104,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betteradsystem.com/sgtdyjzaxddjxaqxogb?YfKpjGyb=BQOCAAAAAAAACZUAAsuEKBzZyjLi2VaLDEsLdSivC2iFndiadY1rc4C-Hq0vWMdq4d7rlECNw4l4ZJ2FMIlUxUtMG3bs4b8sqLgncwOQF0dhBpTJxrOm7KSYOZV2muroscMFyKWvSGovmIuM_4NKtF0JmRBm6MqQ92vYOM6_YBJmAN-UWVW8sLXTDwHWQmm-6HOdzsED5oph4ODN7hnxYatUJw0NgtrTXxBIMIEdNdQbWzY8kmsYD2g-lzXvKYhiy7tbGyUtplu1hT7K1ie-PAypZjh8YaeThXh_nTp_Yh1MkMjhj-PcJZZrMbtv7YROuEppeGgfsys5HR9aoIz2ye-COLvpn_okJgyswkZuou4tE9Y79Navo_90nW36JUChNWwIFQ2fVdagWarFocFqON3mLdzhhQ-I7akxGvfB6PQ6gfRzCtVK_3Rc6JtOC6xOZPerCjqikAFffL1bNRk5J7dJDMDTiHFyL-PJ7P5PeOGe92C5g_mFXG62he7FdVHtRKMIAzV9VJxar7A78eBLyjr2_ukPr_jxvFXqa5TEViEn0iZtJthzGMtf01f288VKScfTuNQaaq1qbi52eJ-t8Qgt9flq_YeAcfQgB4mjD0_kCwjVBoa112ST_vrXoBKXRcHKuXh0O44cyzkOHPsJ1_DxC5BYZg2NGF_pjckIbgZinm1VkRgLF7VcIjbDdUzkiSTHigRcyYazHxS0tlD5RMzeagFE1y_4cTyuOf5rkEMvJUZonbL8dspFrzar-KXa_QlPzh1aMR3ZjWzaMgqrDFoXETrPEul4O2lOd0mgMM3rWFpGc-_RtJ6a1fN7Ifhp7qgxx0vlcmgKOkjkloC8RkuIPHY2h-oEOG2dowUfrtaJdJbPdcYNEbOiyMZlmTP5Nyt74mrwFP038xxQpUuT5Fyani1m2NW3OJOzBBVBHEHJs_in78BOMj-CTNDcVjOaAhItR5ZKMevbYg5Wcg3vLLeT7FsFT-sqpb_3OaRbvQlJH-qNFnciHZMPXd8qPX2ZPYdNLRB1gTCoodN2W8mzso8X-CjGHDAhwRd5SBFf_2IyxbiVe-1yRAe4NOk7W1kFcofoV3HCSGecyYGWiS_t7xCJL0mpFGvarDfRJvgIQ8_f1Ac-IqS9VHBqxhsYpTiYxxLD4agULNYasAfCn6Br5nNPlG9DB5Ww7pCYMdUEqg3W1Ol0VWsCWa-6MN_U\u0026xCIeBzJT=4\u0026RnwvNqTu=5024876\u0026hiUtusbD=\u0026IjPJRinr=0,0\u0026QMzCPsHm=\u0026xXdWlOco=\u0026KMjSEqwh=1280,1024,1,1280,1024,0","fqdn":"betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yabai.si/g","date":"2025-10-16T07:37:00.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betteradsystem.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:D5:01:0D:84:B1:3A:6E:02:EB:59:F2:DF:E2:63:E9:58:AF:A1:F5","sha256":"AB:3A:88:05:75:BF:A5:4F:5E:42:5A:7C:45:3C:10:A5:08:40:8E:2A:B2:89:38:57:A6:D8:BA:96:21:91:F2:61"}}},"request":{"raw":"GET /sgtdyjzaxddjxaqxogb?YfKpjGyb=BQOCAAAAAAAACZUAAsuEKBzZyjLi2VaLDEsLdSivC2iFndiadY1rc4C-Hq0vWMdq4d7rlECNw4l4ZJ2FMIlUxUtMG3bs4b8sqLgncwOQF0dhBpTJxrOm7KSYOZV2muroscMFyKWvSGovmIuM_4NKtF0JmRBm6MqQ92vYOM6_YBJmAN-UWVW8sLXTDwHWQmm-6HOdzsED5oph4ODN7hnxYatUJw0NgtrTXxBIMIEdNdQbWzY8kmsYD2g-lzXvKYhiy7tbGyUtplu1hT7K1ie-PAypZjh8YaeThXh_nTp_Yh1MkMjhj-PcJZZrMbtv7YROuEppeGgfsys5HR9aoIz2ye-COLvpn_okJgyswkZuou4tE9Y79Navo_90nW36JUChNWwIFQ2fVdagWarFocFqON3mLdzhhQ-I7akxGvfB6PQ6gfRzCtVK_3Rc6JtOC6xOZPerCjqikAFffL1bNRk5J7dJDMDTiHFyL-PJ7P5PeOGe92C5g_mFXG62he7FdVHtRKMIAzV9VJxar7A78eBLyjr2_ukPr_jxvFXqa5TEViEn0iZtJthzGMtf01f288VKScfTuNQaaq1qbi52eJ-t8Qgt9flq_YeAcfQgB4mjD0_kCwjVBoa112ST_vrXoBKXRcHKuXh0O44cyzkOHPsJ1_DxC5BYZg2NGF_pjckIbgZinm1VkRgLF7VcIjbDdUzkiSTHigRcyYazHxS0tlD5RMzeagFE1y_4cTyuOf5rkEMvJUZonbL8dspFrzar-KXa_QlPzh1aMR3ZjWzaMgqrDFoXETrPEul4O2lOd0mgMM3rWFpGc-_RtJ6a1fN7Ifhp7qgxx0vlcmgKOkjkloC8RkuIPHY2h-oEOG2dowUfrtaJdJbPdcYNEbOiyMZlmTP5Nyt74mrwFP038xxQpUuT5Fyani1m2NW3OJOzBBVBHEHJs_in78BOMj-CTNDcVjOaAhItR5ZKMevbYg5Wcg3vLLeT7FsFT-sqpb_3OaRbvQlJH-qNFnciHZMPXd8qPX2ZPYdNLRB1gTCoodN2W8mzso8X-CjGHDAhwRd5SBFf_2IyxbiVe-1yRAe4NOk7W1kFcofoV3HCSGecyYGWiS_t7xCJL0mpFGvarDfRJvgIQ8_f1Ac-IqS9VHBqxhsYpTiYxxLD4agULNYasAfCn6Br5nNPlG9DB5Ww7pCYMdUEqg3W1Ol0VWsCWa-6MN_U\u0026xCIeBzJT=4\u0026RnwvNqTu=5024876\u0026hiUtusbD=\u0026IjPJRinr=0,0\u0026QMzCPsHm=\u0026xXdWlOco=\u0026KMjSEqwh=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: betteradsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yabai.si/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb3\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Thu, 16 Oct 2025 07:37:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-19T12:40:43.394799Z","times_seen":23446,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":331,"dns":27,"connect":93,"send":0,"wait":110,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}