{"report_id":"ad970e6e-5999-4549-81a0-e38fee0c763e","version":6,"status":"done","tags":[],"date":"2023-09-22T03:12:01Z","url":{"schema":"http","addr":"www.upload.ee/download/15711713/7288fe0425531d939f77/Client.exe","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"title":"UPLOAD.EE - Client.exe - Download"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T22:07:32Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"serving.bepolite.eu","ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2017-01-29 19:42:29","last_seen":"2023-09-21 07:18:28","alert_count":0,"request_count":4,"received_data":1046,"sent_data":3236,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pogothere.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2022-09-04 21:11:25","last_seen":"2023-09-21 06:09:56","alert_count":0,"request_count":3,"received_data":106984,"sent_data":1259,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.upload.ee","ip":{"addr":"51.91.30.159","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2010-07-04","domain_rank":981196,"first_seen":"2012-05-24 10:39:37","last_seen":"2023-09-21 07:18:26","alert_count":0,"request_count":8,"received_data":45966,"sent_data":4051,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-09-21 07:57:36","alert_count":0,"request_count":2,"received_data":138637,"sent_data":875,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wdownthreerfdfg.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2023-08-27","domain_rank":0,"first_seen":"2023-09-13 09:27:55","last_seen":"2023-09-13 09:27:56","alert_count":0,"request_count":4,"received_data":36082,"sent_data":2157,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.bepolite.eu","ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2017-01-29 06:13:55","last_seen":"2023-09-21 07:18:29","alert_count":0,"request_count":12,"received_data":293813,"sent_data":19854,"comment":"","tags":null,"fingerprints":null},{"fqdn":"animate.adobe.com","ip":{"addr":"23.33.119.17","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1986-11-17","domain_rank":47950,"first_seen":"2014-02-27 05:38:55","last_seen":"2023-09-21 18:14:52","alert_count":0,"request_count":1,"received_data":104728,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"du0pud0sdlmzf.cloudfront.net","ip":{"addr":"143.204.42.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-08-24 12:49:59","last_seen":"2023-09-21 07:18:45","alert_count":0,"request_count":4,"received_data":120724,"sent_data":2385,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-09-21 05:09:09","alert_count":0,"request_count":5,"received_data":3499,"sent_data":1665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"inuedidgmapla.com","ip":{"addr":"65.9.55.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-08-27","domain_rank":0,"first_seen":"2023-09-13 21:56:11","last_seen":"2023-09-13 21:56:11","alert_count":0,"request_count":5,"received_data":6907,"sent_data":3746,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20 13:44:49","last_seen":"2023-09-21 06:57:06","alert_count":0,"request_count":6,"received_data":190976,"sent_data":3710,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-09-22T03:11:50Z","timestamp":1695352310,"ip_dst":{"addr":"Client IP","port":34204,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.37.238.86","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"severity":"high","alert":"ET POLICY PE EXE or DLL Windows file download HTTP","source":"{\"timestamp\":\"2023-09-22T03:11:50.491300+0000\",\"flow_id\":1862003700260347,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"54.37.238.86\",\"src_port\":80,\"dest_ip\":\"10.70.215.88\",\"dest_port\":34204,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"exe.no.referer\",\"ET.http.binary\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2018959,\"rev\":4,\"signature\":\"ET POLICY PE EXE or DLL Windows file download HTTP\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"created_at\":[\"2014_08_19\"],\"former_category\":[\"POLICY\"],\"updated_at\":[\"2017_02_01\"]}},\"http\":{\"hostname\":\"20230922t095845_233.ltiapmyzmjxrvrts.info\",\"url\":\"/v4/20230922T095845_233.exe\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\",\"http_content_type\":\"application/octet-stream\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1283},\"files\":[{\"filename\":\"/v4/20230922T095845_233.exe\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1283,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":10,\"pkts_toclient\":9,\"bytes_toserver\":1050,\"bytes_toclient\":6399,\"start\":\"2023-09-22T03:08:15.450043+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"48e07e6b9e60fc36f21db6b71bf0b4b1","sha1":"fb4085cc0058779b28e5c366a2b92cf242399c2f","sha256":"3cbdc71216bd0aa119c93b4c5213941e9972e26ef16b3386c7c9cb32bcc60d64","sha512":"10187db826a6c668fff87f61e2468ecaf94b9a87475115b9718c9458f75281581aa84a3001fad9d5a1c48ba75a443d03da26fdf243fdc1e964770fb12b140178","ssdeep":"","tlshash":"ae60000030f00000c3c3003000c00030000003000cc00303000300c03000c00ccf0300","size":14,"data":"","first_seen":"2023-03-09T23:09:39Z","last_seen":"2026-04-22T19:39:47.356233Z","times_seen":3582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/js/js__file_upload.js","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"617f6d5a2744bc8c02e3d2c67544bd68","sha1":"f57c068257c8bc85644d3be1e845c36506cd4625","sha256":"62a3bb4d9d2b5a55b6d821a75d7b155fac47def3c241e4f1215d17e022f02658","sha512":"9ff6156bbd9bfda93a5b39322b72b0f6caeca3e0acc0b66319f5d429bf7fb5fe4ec87cd3711618029fea339a7b1ea7b548d468fad7c4e91ba4e82b7f0f0cc890","ssdeep":"768:c1vyzvE5keq96s7jR29qxFJuuGBs98dSx1yU+9acoR13knV96Qx8VDJR:b+qP7jR29eFJuuGBs98dSx1yU+9at6VM","tlshash":"98c2f893778684a489da157e259e03ca7634c4536d0ea840fc6ccce8ae74f89907bf7d","size":27351,"data":"","first_seen":"2023-03-09T23:09:39Z","last_seen":"2023-10-14T14:45:24Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/sandbox%20eval%20code","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-03T16:32:00.29595Z","times_seen":837870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/sandbox%20eval%20code","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"bbc02b137750017d2f1016b0b9009003a1c923005eb78001f006001f2040eae88dc180","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-03T16:43:04.061665Z","times_seen":72109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"63fa78e3d4ae4b7fc4cf5126264cb75e","sha1":"65657518c61173b8205d4fb68aabfae6ae7270a0","sha256":"a31d904d1ab6191632f68d0b375b622e4699c6e840f99ce53699df5d9f77ef6a","sha512":"84a1432bf021cfe79ca89727eabd12fc350317b89e20986f12393d7b25df94e424ec561aafb41922db622d4cd2eb4af54d6ae0ddab57d0d3bbdb8c8a9d698034","ssdeep":"","tlshash":"4d90222820800200c20080303003220f80e8200b28800088000002800232030022388e","size":57,"data":"","first_seen":"2023-03-09T23:09:39Z","last_seen":"2026-04-19T05:56:09.148505Z","times_seen":3533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-03T16:32:00.285708Z","times_seen":836237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"bfe55be401c9e41934811dd299c659bd","sha1":"0be43bcd2020a215ab72235d4a22ed9b57f8c40a","sha256":"8056774c976f4f5eca8a043ab01812b1fafc15c0293858b2b4d77caf529c4da5","sha512":"e9e0a6deead69ded3d9153651a9ace58930ac548357c5db0606aa2934220714f55728e1647c650667436058c51d8457246bd4c2b5763fc7faf90561635364ae3","ssdeep":"","tlshash":"71b002d0c76a6a8119205672071154b14480282cc540d54a11408525015118ea022405","size":98,"data":"","first_seen":"2024-08-21T06:07:28.757331Z","last_seen":"2024-08-21T06:07:28.757331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/scripts/saresponsive.js","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"636b4ad7f97aa55c2242b396fe3e9f44","sha1":"b4d6aae9e6f3de7fb4478f9ee5e12a8141bb02ba","sha256":"54f7e44d9e8b65978b3753e157c4a3c9c338645fcc31429f6c49aca5e4bd1c62","sha512":"93a8b3d7ac4dc3e12cf97b66f376f6dbad42bd950abe820bd2e44b7cfb4e6cfa675748dcaff65d6b040a69d64a855b4e2a383f32b44ab8b6d71c55bf9902888b","ssdeep":"3072:y4J+03jL5TCOauTwDhFdnCVQNLa98HrHevC2eYCLaISE92oa:40zEOQR+iLa98Hr4reYCvSE9K","tlshash":"6c0418d57b8e381787a632a980ff014ef17dd2f6a1094875f09894a06db8a1d13b7f6c","size":176967,"data":"","first_seen":"2023-09-19T12:20:21Z","last_seen":"2023-10-02T07:31:20Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index_edge.js","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"033232ccfc3988ea75e56fc5a3ba647c","sha1":"cc8a5830f95942bdebe409fdc04868bd055480dc","sha256":"2886b24ee4dfc3bd83aa79daceb23f6205acb3b67e94aff4ebfd35885c3ee102","sha512":"e3fe43ead89fe8673602c9ff1a29cb49f7339e09c065c04ae52ae650270a700baebe7736892dd6dae7259331d8f1a6c9e1b944b16b8e3576a3d501d3a5cd6ce5","ssdeep":"","tlshash":"b84111524dc692526699f0979f1b14de0045bc1bebac4ff7f5c02c0afb532a1cb86722","size":2331,"data":"","first_seen":"2023-09-22T05:12:02Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"f63197075511c5fa022195d6ea7a3e2e61337628523440a8f238f23b23770cbf3d1abd","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-03T16:43:04.061177Z","times_seen":70205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"cb2ea4d45296ae09e0c21b349649980b","sha1":"dc7d80030bfee2c623137d2f865c47d38794ea08","sha256":"863131ed8140976ca74302158132c31042deeab63436599c25b8f0c06797f169","sha512":"7c7bcfa59a8362312d65819ccef2965347133d7e025a961205cdcb1edc0c6327948de40211ec7084ffe31e4c586ebe496a773bfc77c3a43023c58d8ce342801e","ssdeep":"","tlshash":"69c00471dc7c74377dc5347415c051c773d00415d0d3411514f05175543350f1517001","size":136,"data":"","first_seen":"2024-08-21T06:07:28.759755Z","last_seen":"2024-08-21T06:07:28.759755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba71a86056b5c9ef37b625aade54337e","sha1":"4769c2a07aa71c342dcb06dfa2950cff7ecae40f","sha256":"65d96ab8cd224643e09a693cdc8fa0b76eb9c6cfe0a4be8b797136ca83a305c0","sha512":"e115753c5b2d6cbecba098a1efc800f3b04e17610b6e509e81aa0bb637e4f7d74b1c9c79d89e7e4bf7204d7607a8ba490b44adf1719b6a20bb96e3819e55fdc4","ssdeep":"","tlshash":"d9c02b89210e0c7190f733808f3fbd01f4122364a4d05c33484e23058e20f27d358910","size":155,"data":"","first_seen":"2023-03-09T23:09:39Z","last_seen":"2026-03-28T13:29:03.445604Z","times_seen":3495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"fdd650c2dc012202e51a94f7a89c0dc4","sha1":"b0505fb7e78ed1a89d1c78dbf9a03bca718a5db6","sha256":"e5b92ed66c8fb57d045c127f408a169a8ecda07021d9541192f0ed31aa5b39bb","sha512":"50675ba6b9f041c2cb1eae01ea5e203ca089d2957a4fb4e67703bd352248c5a8a57965e74c8a3a1dea457496fe453efdd5a376cedbb574c3c7664a6818ba4e77","ssdeep":"","tlshash":"67b002d0c76a6a8119205672071154b14480282cc540d54a11408525015118ea022405","size":101,"data":"","first_seen":"2024-08-21T06:07:28.761974Z","last_seen":"2024-08-21T06:07:28.761974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"4e96fab5309aad9fd5698690fcb07082","sha1":"b7f8cf62b15df778392dc56202d685269f58b18d","sha256":"fcdf64dc4b927d6c53e65872a53233818a9246cb6bded1e076d21dbd9ecbe265","sha512":"5da3aaa185e7a948f13c7e8a604851ac329fcd24f23093de039febbd9ff07e074d5f029a035b58eccd5ea30a1ce10b5b57db805739f8da471773a178d5579265","ssdeep":"","tlshash":"6fc00471dc7c74377dc5347415c051c773d00415d0d3411514f05175543350f1517001","size":133,"data":"","first_seen":"2024-08-21T06:07:28.763649Z","last_seen":"2024-08-21T06:07:28.763649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"animate.adobe.com/runtime/6.0.0/edge.6.0.0.min.js","fqdn":"animate.adobe.com","domain":"adobe.com","tld":"com"},"ip":{"addr":"23.33.119.17","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e639ab33ff27a85b48e43fa6a9c49a1","sha1":"11ae1b30653f3d90b8a01d38fb2ae6c89866365c","sha256":"4338ef4782c1cc60e27fb10ff29ef635553887f154aeaeaa547c8f492919898d","sha512":"8552c3e6d06ce719dd63503934178ac7de779551eae67ca287e0400432e2b24422069a521c52a87df9a0cacad6a2ceb6bf596e97027839e7a77b05ca178e3ad9","ssdeep":"1536:sFxOwN5uDaBSsrZkrOOdegrUAWCpP0DqkvXdFce5wtqmPxGynu6txuFhir8SOfd3:hU7rZGOOtrUdge5CGmu6txuXBSON","tlshash":"67a34bc573917015925b61b992ef210b713e581bb41888ecb6a8c4e67e7ae5c01fff38","size":104401,"data":"","first_seen":"2023-03-08T14:37:37Z","last_seen":"2026-03-16T20:52:11.76491Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"bada815b0add3317d69cbff824573d6b","sha1":"60ebc2061d3dbf196d418b6802aa0d971b7bc189","sha256":"f2fe3c2dc65244420df6fc8efd959211c4ef3d9f76e2a3c530b4a3163138d92b","sha512":"ebebfda077663be98ce77e2cd5423a0714b98afd3e733b59e81eb93b8fad64d788707761de91ed96d6cbe281cd96b11641a77532c41ae95a08944e1987070463","ssdeep":"","tlshash":"a43140f4ab7d64a498be210d633cf38fa46d60373c431c43ad5e55e41a71e2f0523a96","size":1636,"data":"","first_seen":"2023-03-09T23:09:39Z","last_seen":"2024-08-21T09:18:42.71122Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-6703115-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"351a869011be7e3d71a60210cdce9c82","sha1":"dc999c52d1b2e9c7ab98f60ca525cbe11207acbb","sha256":"1562705cdcacb05d81df793f7b8a2d47951bcb9d611c390a634cd33c9ea209f7","sha512":"3acb6786c3e9287524ae96f59eee02dbdb60c2010ccd6982ec64bb62c174a3360313fa0f4b5875cf12452c695f07c724e7ba1294da02a258533b4102b1b4c0ce","ssdeep":"3072:DbsvjQe7Ch8Masc0i4lWcAnSpI+3/aQ8LrmT:jIs8CUcFpI+3/a/2","tlshash":"4cd30ad9b3927126c3a3b4b8553f010bf17a6e91f84cdc94e246c9c02e7869a417bf6d","size":134268,"data":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serving.bepolite.eu/script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c\u0026type=direct\u0026page_id=3949550\u0026screen_width=1280\u0026screen_height=1024\u0026os=Linux%20x86_64\u0026refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F15711713%2F7288fe0425531d939f77%2FClient.exe\u0026pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F15711713%2FClient.exe.html%3Fmsg%3Dsess_error\u0026rnd=1695352303852","fqdn":"serving.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6248fe0260f90e6bb736bbf51f8b590","sha1":"7448c31ccba542bcd15ad86cf9201289be66d939","sha256":"c98ef50774e1b5febc235d1336ba93e3411388f19e0e6cc4ae5f76c56db31b30","sha512":"66ec3b5d8d3c3113c18756c0687233cbb1fc567f3fbabb8c845b0d4bf374dd52e6500c7186781b3dd30730febd410d3a90577f60890fd222931dfc9587b2319a","ssdeep":"192:JMmEXVKNzFzZz4zpzs17H1z+L8z+LCz+Lbz+LUz+LeClN:CmEFKFdhkxstt+E+m+T+8+hT","tlshash":"46e18598931e71312794e82616fe31cca00da771cc02ade969ebdc7bb0ef63a0585918","size":7130,"data":"","first_seen":"2024-08-21T06:07:28.765283Z","last_seen":"2024-08-21T06:07:28.765283Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2ddb545c9a18bb834643a26d90fc11e","sha1":"55955ea9ad82ee6d02d490ea3cd4d3335f9b7201","sha256":"74e78e16229fe2b33139ca0d6de0f7976c1e2f0ed41d00cb07e6f1ba10628a78","sha512":"8316309f8d25edf3aed334537d56a39c0eb1089e940f82cfbda42e8a99bd06c276257a65119a43456bec5df17bd1811e87c3b9978ee2331c2105f3ec7ca6f2ac","ssdeep":"3072:WHrjhKJl+FPChIwFyPQL5uoHNYREMLaGreknNSvw6jOkrhUTqx55PJnWm+Xk:ufbFKhIwFyPne2/6knNSvwG7rOmxrPJ9","tlshash":"863408d9b3c3706682a7b479503f014ba57b6ca6b44ccc98e189c9d02e78a99513bf7c","size":246726,"data":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"du0pud0sdlmzf.cloudfront.net/?dupud=997369","fqdn":"du0pud0sdlmzf.cloudfront.net","domain":"du0pud0sdlmzf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c08c036ca41650b733ec1837af328fd","sha1":"99463eba24bd64945aa06b4dbb7f13d991a03e19","sha256":"f22ae22dedba7fac2d485ff7c71955be01240da3b253201ff74d33fa82192a97","sha512":"46d9124ccdfe6734f30636e357419e5e651305242bcf95aab3bea495d8c2da66423c35ef2ad54fe4fda7839441c533848540245376b4d199e5d338641c865ce3","ssdeep":"6144:WShLAyB2hrfVgl103N+wLShLAyB2hrfVOF:Wi0yYh7V+g0gi0yYh7Vy","tlshash":"f5743b89be523869836374b540ff124e723f4669b8084dd4b49ad4d16db8d0a43bffac","size":362674,"data":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.upload.ee/download/15711713/7288fe0425531d939f77/Client.exe","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:42.935738761Z","timestamp":1695352302935,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /download/15711713/7288fe0425531d939f77/Client.exe HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 401\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1\r\nP3P: CP=\"CAO PSA OUR\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":401,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (401), with no line terminators","md5":"97801f6d7935fb5e630ade59374ade64","sha1":"c5f1777ec694eb7bce45bac9f48b2d7371bc9ddc","sha256":"57fb5dc14ec6802b172959704e191b8016635d8d360521011e6ef5037c132dd7","sha512":"ba829284fe273a60d3e893aa557dc139772b0a87139023224c0c40950bc5a75e3aac288022a918acef60447682f24b94b62960af77bc12c5167f177d38bcd608","ssdeep":"","tlshash":"40e061ae0d11d50fd61031f0f5f2f188249e913bf854594065d004be93c4befcd41359","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/download/15711713/7288fe0425531d939f77/Client.exe","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:43.229571494Z","timestamp":1695352303229,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /download/15711713/7288fe0425531d939f77/Client.exe HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 401\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1\r\nP3P: CP=\"CAO PSA OUR\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":401,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (401), with no line terminators","md5":"97801f6d7935fb5e630ade59374ade64","sha1":"c5f1777ec694eb7bce45bac9f48b2d7371bc9ddc","sha256":"57fb5dc14ec6802b172959704e191b8016635d8d360521011e6ef5037c132dd7","sha512":"ba829284fe273a60d3e893aa557dc139772b0a87139023224c0c40950bc5a75e3aac288022a918acef60447682f24b94b62960af77bc12c5167f177d38bcd608","ssdeep":"","tlshash":"40e061ae0d11d50fd61031f0f5f2f188249e913bf854594065d004be93c4befcd41359","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-22T03:11:43.496Z","timestamp":1695352303496,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.upload.ee","organization":""},"issuer":{"commonName":"RapidSSL Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 02 Mar 2023 00:00:00 GMT","end":"Mon, 01 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4","sha256":"AB:0D:2D:02:34:6F:B5:08:58:FA:7A:F5:12:43:16:EF:56:12:7B:6F:99:CB:3F:AA:39:F3:0E:91:FE:43:FE:CF"}}},"request":{"raw":"GET /files/15711713/Client.exe.html?msg=sess_error HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/download/15711713/7288fe0425531d939f77/Client.exe\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 8982\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nLast-Modified: Fri, 22 Sep 2023 06:11:43 +0300\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nX-XSS-Protection: 1\r\nP3P: CP=\"CAO PSA OUR\"\r\nSet-Cookie: lng=eng; expires=Fri, 20-Oct-2023 03:11:43 GMT; path=/; domain=www.upload.ee; secure; httponly; SameSite=None\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8982,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (4526)","md5":"67be4e3a05b4b8c88fe09c1014d6d30e","sha1":"1195274a60f32c00751ef9e900be495619b051c9","sha256":"eef88c7755fdb739c23172bf694581c23c5d5058c47bedf8d327f41562da8fca","sha512":"9bcf003833071fca214d7f8717a89487edb05f81df4c7cd5b464c1cab053f2cfdad4554ae3441259a96ae654ca9085c5e6a943fcb58ed67a772b5eba98565e7d","ssdeep":"384:toJylIn7xpYwuu504Y6eHYiDRzhU3E8+UUKIz40qoJmBKNQ3eBizEm+D:toJCIn7XY20tVDRzh4E8+UUKIz40qokE","tlshash":"43922a7115cee82e8654a0d8e274feac98d774afc3400884e47b68bba5c5fa46d211fd","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/static/ubr__style.css","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.598Z","timestamp":1695352303598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.upload.ee","organization":""},"issuer":{"commonName":"RapidSSL Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 02 Mar 2023 00:00:00 GMT","end":"Mon, 01 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4","sha256":"AB:0D:2D:02:34:6F:B5:08:58:FA:7A:F5:12:43:16:EF:56:12:7B:6F:99:CB:3F:AA:39:F3:0E:91:FE:43:FE:CF"}}},"request":{"raw":"GET /static/ubr__style.css HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error\r\nCookie: lng=eng\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:43 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 04 Oct 2013 10:02:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nETag: W/\"524e9233-25a0\"\r\nExpires: Fri, 29 Sep 2023 03:11:43 GMT\r\nCache-Control: max-age=604800\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (591), with CRLF line terminators","md5":"3ba04e290212b44bcca8f10a60a4e879","sha1":"a9b021c9019bdbb28250836039b2372a1b4d0f0f","sha256":"f618b1c7be10c3203620d44c6f323be5b61ac10e67588d96cb69988b3173c7d2","sha512":"e3bd31605e6fc62195a3b7372d23456ab192418758888b7eba73dd2c5f6cc145feab8ed478c0ddcf9e7660b0840ee6a91bf807ac5a90a323a5cc4c8978d7bc57","ssdeep":"192:82jAySjuE174K/B4kxWnInnHGYaN4OI56pYgp+:ejj2K/B4annc66pYgM","tlshash":"f012b672d29a202eb1afc0baf051fa9e3d54908bd4539775f96636b5cac10e53337708","first_seen":"2023-04-05T06:15:55Z","last_seen":"2023-10-14T14:45:24Z","times_seen":94,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"du0pud0sdlmzf.cloudfront.net/?dupud=997369","fqdn":"du0pud0sdlmzf.cloudfront.net","domain":"du0pud0sdlmzf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.211","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.642Z","timestamp":1695352303642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /?dupud=997369 HTTP/1.1\r\nHost: du0pud0sdlmzf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 117742\r\ndate: Fri, 22 Sep 2023 03:08:31 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: bnr_WwOo95uhLtTrNxxjl8rJMkVbKTxKFu29_0sA5EcfkHXOHHnHWw==\r\nage: 192\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117742,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (15948)","md5":"1c08c036ca41650b733ec1837af328fd","sha1":"99463eba24bd64945aa06b4dbb7f13d991a03e19","sha256":"f22ae22dedba7fac2d485ff7c71955be01240da3b253201ff74d33fa82192a97","sha512":"46d9124ccdfe6734f30636e357419e5e651305242bcf95aab3bea495d8c2da66423c35ef2ad54fe4fda7839441c533848540245376b4d199e5d338641c865ce3","ssdeep":"6144:WShLAyB2hrfVgl103N+wLShLAyB2hrfVOF:Wi0yYh7V+g0gi0yYh7Vy","tlshash":"f5743b89be523869836374b540ff124e723f4669b8084dd4b49ad4d16db8d0a43bffac","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":4,"receive":4,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/js/js__file_upload.js","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.604Z","timestamp":1695352303604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.upload.ee","organization":""},"issuer":{"commonName":"RapidSSL Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 02 Mar 2023 00:00:00 GMT","end":"Mon, 01 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4","sha256":"AB:0D:2D:02:34:6F:B5:08:58:FA:7A:F5:12:43:16:EF:56:12:7B:6F:99:CB:3F:AA:39:F3:0E:91:FE:43:FE:CF"}}},"request":{"raw":"GET /js/js__file_upload.js HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error\r\nCookie: lng=eng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 27351\r\nLast-Modified: Thu, 07 May 2020 19:13:28 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nETag: \"5eb45dd8-6ad7\"\r\nExpires: Fri, 29 Sep 2023 03:11:43 GMT\r\nCache-Control: max-age=604800\r\nVary: Accept-Encoding\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27351,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1853)","md5":"617f6d5a2744bc8c02e3d2c67544bd68","sha1":"f57c068257c8bc85644d3be1e845c36506cd4625","sha256":"62a3bb4d9d2b5a55b6d821a75d7b155fac47def3c241e4f1215d17e022f02658","sha512":"9ff6156bbd9bfda93a5b39322b72b0f6caeca3e0acc0b66319f5d429bf7fb5fe4ec87cd3711618029fea339a7b1ea7b548d468fad7c4e91ba4e82b7f0f0cc890","ssdeep":"768:c1vyzvE5keq96s7jR29qxFJuuGBs98dSx1yU+9acoR13knV96Qx8VDJR:b+qP7jR29eFJuuGBs98dSx1yU+9at6VM","tlshash":"98c2f893778684a489da157e259e03ca7634c4536d0ea840fc6ccce8ae74f89907bf7d","first_seen":"2023-03-09T23:09:39Z","last_seen":"2023-10-14T14:45:24Z","times_seen":96,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":30,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/images/dl_.png","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.609Z","timestamp":1695352303609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.upload.ee","organization":""},"issuer":{"commonName":"RapidSSL Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 02 Mar 2023 00:00:00 GMT","end":"Mon, 01 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4","sha256":"AB:0D:2D:02:34:6F:B5:08:58:FA:7A:F5:12:43:16:EF:56:12:7B:6F:99:CB:3F:AA:39:F3:0E:91:FE:43:FE:CF"}}},"request":{"raw":"GET /images/dl_.png HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error\r\nCookie: lng=eng\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1900\r\nLast-Modified: Thu, 01 Dec 2016 09:37:27 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nETag: \"583fef57-76c\"\r\nExpires: Fri, 29 Sep 2023 03:11:43 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 32, 8-bit colormap, non-interlaced\\012- data","md5":"f3e8f284a4e98cdb91b6abfc142d94a4","sha1":"fa9e618c2f56bea752ddd7e45a372c5539dadda9","sha256":"2f13919383f54ca21e5b87f5644df8a875b99815c821dcbbabea352d854c6882","sha512":"e3d0865ac754c5956d7636635dd87df016e893a20c3292b0918b26305e4ebe3515a7498cff2e1902155de884b9fcfca8ec7a01d8a5ab5053b6ad62c914781144","ssdeep":"","tlshash":"6241398ffcfc75dc437e002a1a943806266692c471a4a7382b5108be2d4270f4224e66","first_seen":"2023-04-30T19:35:34Z","last_seen":"2026-04-22T19:39:47.345276Z","times_seen":3575,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":69,"dns":1,"connect":30,"send":0,"wait":28,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/images/arrow.gif","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.632Z","timestamp":1695352303632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.upload.ee","organization":""},"issuer":{"commonName":"RapidSSL Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 02 Mar 2023 00:00:00 GMT","end":"Mon, 01 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4","sha256":"AB:0D:2D:02:34:6F:B5:08:58:FA:7A:F5:12:43:16:EF:56:12:7B:6F:99:CB:3F:AA:39:F3:0E:91:FE:43:FE:CF"}}},"request":{"raw":"GET /images/arrow.gif HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error\r\nCookie: lng=eng\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 59\r\nLast-Modified: Sun, 14 Apr 2013 07:15:01 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nETag: \"516a5775-3b\"\r\nExpires: Fri, 29 Sep 2023 03:11:43 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 9\\012- data","md5":"6675f814b94f13f91f1383707b250e36","sha1":"31452650e8fce2095613a2010799bdb7548bdd51","sha256":"061d01a0b85f948c6ec464870ecec4654c4bd2ff15cacda941bbbf16225ec411","sha512":"d232d7337ef45394ddeb09894a7aec31363ef026299bd047d49dc46975757da192136b03531ab7be451a4d28ce8e3250a9538f94c6ae38347537de00192e9c62","ssdeep":"","tlshash":"3fa0020295b4c144c80411761c58815056027226858e175736bc7722ec498a17152121","first_seen":"2023-04-30T19:35:34Z","last_seen":"2026-04-22T19:39:47.346755Z","times_seen":3575,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":46,"dns":1,"connect":30,"send":0,"wait":28,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:43.74474601Z","timestamp":1695352303744,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 22 Sep 2023 03:11:43 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"1d04b1c39a52ae81423392b3328cf91f","sha1":"53311c7b36bd1e229219f087085ec7b36643b06b","sha256":"39fd511387b1d969a8e34f6027e3acd55fe97adce73cf6fe2f2d3d4eb1423e06","sha512":"3cb5f604fa162cfca476205d2ddf20af42862d57da00769aa362e4f1edb30c61df326f165f3caf46b38d588d80e9aa0da362a52c52076aeb2b1a04b6b1643e3a","ssdeep":"","tlshash":"eff0540c0b7475d2ce0a61ac2fbc59b637407b860fbbc60a907048e2f7c01cb031460c","first_seen":"2023-09-21T18:06:31Z","last_seen":"2023-09-22T12:24:56Z","times_seen":492,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-6703115-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.639Z","timestamp":1695352303639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"E6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12","sha256":"31:8C:88:B2:F2:3A:CA:89:46:6A:03:A1:A7:BF:E0:54:61:71:D0:11:D9:00:D5:2A:60:78:1D:A2:83:16:9D:FC"}}},"request":{"raw":"GET /gtag/js?id=UA-6703115-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 22 Sep 2023 03:11:43 GMT\r\nexpires: Fri, 22 Sep 2023 03:11:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 51634\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51634,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2213)","md5":"351a869011be7e3d71a60210cdce9c82","sha1":"dc999c52d1b2e9c7ab98f60ca525cbe11207acbb","sha256":"1562705cdcacb05d81df793f7b8a2d47951bcb9d611c390a634cd33c9ea209f7","sha512":"3acb6786c3e9287524ae96f59eee02dbdb60c2010ccd6982ec64bb62c174a3360313fa0f4b5875cf12452c695f07c724e7ba1294da02a258533b4102b1b4c0ce","ssdeep":"3072:DbsvjQe7Ch8Masc0i4lWcAnSpI+3/aQ8LrmT:jIs8CUcFpI+3/a/2","tlshash":"4cd30ad9b3927126c3a3b4b8553f010bf17a6e91f84cdc94e246c9c02e7869a417bf6d","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":109,"dns":1,"connect":9,"send":0,"wait":21,"receive":12,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:43.852740593Z","timestamp":1695352303852,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 22 Sep 2023 03:11:43 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"1d04b1c39a52ae81423392b3328cf91f","sha1":"53311c7b36bd1e229219f087085ec7b36643b06b","sha256":"39fd511387b1d969a8e34f6027e3acd55fe97adce73cf6fe2f2d3d4eb1423e06","sha512":"3cb5f604fa162cfca476205d2ddf20af42862d57da00769aa362e4f1edb30c61df326f165f3caf46b38d588d80e9aa0da362a52c52076aeb2b1a04b6b1643e3a","ssdeep":"","tlshash":"eff0540c0b7475d2ce0a61ac2fbc59b637407b860fbbc60a907048e2f7c01cb031460c","first_seen":"2023-09-21T18:06:31Z","last_seen":"2023-09-22T12:24:56Z","times_seen":492,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wdownthreerfdfg.com/SVZvZ3NmaQwUThwTBwogJwQFAh8DbzswFz4DJy0wEA4XNhUcD0kTGi1rVl5EfWZXQQMgMlJWS28lGwYHPCVSVlUgOAkITm8gUlZdeXhdSUdvI1JWVT0mDgBOeHAfEwcla15RSnxlWlVAeWVWVkc","fqdn":"wdownthreerfdfg.com","domain":"wdownthreerfdfg.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.919Z","timestamp":1695352303919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wdownthreerfdfg.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 13 Sep 2023 06:26:23 GMT","end":"Tue, 12 Dec 2023 06:26:22 GMT"},"fingerprint":{"sha1":"01:C6:73:D9:51:19:6F:F8:8D:B0:27:C4:23:40:83:57:46:92:ED:67","sha256":"0D:80:28:7F:A7:86:C9:FB:3C:27:71:47:50:CC:D9:1B:00:70:8B:AF:FF:BC:5E:76:10:99:76:72:EB:FE:22:FE"}}},"request":{"raw":"GET /SVZvZ3NmaQwUThwTBwogJwQFAh8DbzswFz4DJy0wEA4XNhUcD0kTGi1rVl5EfWZXQQMgMlJWS28lGwYHPCVSVlUgOAkITm8gUlZdeXhdSUdvI1JWVT0mDgBOeHAfEwcla15RSnxlWlVAeWVWVkc HTTP/1.1\r\nHost: wdownthreerfdfg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 22 Sep 2023 03:11:43 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=cX6RoBAjkdLrTjXY7Nn61Eu4mpEoyiQ4R9z3Cqw8HL4c%2Fd7HocDzRvDhZt5MSDtFkBLs1awFLSrrll1XCdubqFYP8NV36DCphdh%2F9p25f7smtYwf0TNo6SjeO8f0M59glonhgnmd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80a75cba2ffc56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wdownthreerfdfg.com/MXhKVzUeRykkCGBKcyFWZRQyDwQAOw4fc1Uuehp4Uj4iNGRWOWwjXFVFc24CAk5zcUVYHHdmE0IMKyNAQkV7cVxfHiVqE0dFe3kGBVZ5YxsBXj9qBBcMOjZSDElsJ0FFFHdmAwhNeWIHAkh5bw0E","fqdn":"wdownthreerfdfg.com","domain":"wdownthreerfdfg.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.893Z","timestamp":1695352303893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wdownthreerfdfg.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 13 Sep 2023 06:26:23 GMT","end":"Tue, 12 Dec 2023 06:26:22 GMT"},"fingerprint":{"sha1":"01:C6:73:D9:51:19:6F:F8:8D:B0:27:C4:23:40:83:57:46:92:ED:67","sha256":"0D:80:28:7F:A7:86:C9:FB:3C:27:71:47:50:CC:D9:1B:00:70:8B:AF:FF:BC:5E:76:10:99:76:72:EB:FE:22:FE"}}},"request":{"raw":"GET /MXhKVzUeRykkCGBKcyFWZRQyDwQAOw4fc1Uuehp4Uj4iNGRWOWwjXFVFc24CAk5zcUVYHHdmE0IMKyNAQkV7cVxfHiVqE0dFe3kGBVZ5YxsBXj9qBBcMOjZSDElsJ0FFFHdmAwhNeWIHAkh5bw0E HTTP/1.1\r\nHost: wdownthreerfdfg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 22 Sep 2023 03:11:43 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=pqu5R8J5FPRRdkmOrUZVinD1ZE1wQBe%2F6W2ziOsSANmvpUNOblTk0BRIRyaUadOyDLywntGLF7njVI8kzm2qyLzbdcEJmPlcZAR7EEmFP7LOaOP6voMguJu0D93SXW33ETWzBcIN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80a75cba2ffb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":26,"dns":2,"connect":1,"send":0,"wait":117,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inuedidgmapla.com/cE44eHARLFsVTxFzWl4FAiIFXUI2awo+FAV+SA0UQD1cFB0KKBYbHB87XB4CHyBMVh4VOh1KNhMAUxxFKhluLjsyLXwvGzk7cC4YEwoLOjslf08pPCEhcztAKnh+EiE6K0EUOjQkCRAUJAB8PSUHJGo+JjQZUSEoMSJfKTkYLX8vMRQmfzk1OA0LNhY1HG4iPDUfdT4cMTt9HzUgH1E5IyE2eiAVGB9zMEFIPH4pIjEMeT49I39tLBQlInYwIRR8YD4pHgsLLjozH0AhPRcIeS4HKWsKPiEmAw45OD4tbhETJCptEyg1NnZIPzYcbjxCHARsPTE1KkBVRDEMVEgfKAhbEjI4KnEuJiUGXEgYMRhPIRg1DFs5JTMpeik2FDlcExglHU8iGDQIUC1WGj1XFgBNIWkUPR5+UyAnQgQ","fqdn":"inuedidgmapla.com","domain":"inuedidgmapla.com","tld":"com"},"ip":{"addr":"65.9.55.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.913Z","timestamp":1695352303913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inuedidgmapla.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Fri, 11 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"52:F1:1A:D5:BD:11:01:8A:F6:AD:36:16:5B:F7:77:F5:E9:CC:E4:FE","sha256":"D9:29:3B:7B:C4:26:27:A0:4B:FC:F5:48:A5:4B:B7:3B:44:25:69:60:CD:12:07:01:6E:D6:84:A1:5D:8E:6C:17"}}},"request":{"raw":"GET /cE44eHARLFsVTxFzWl4FAiIFXUI2awo+FAV+SA0UQD1cFB0KKBYbHB87XB4CHyBMVh4VOh1KNhMAUxxFKhluLjsyLXwvGzk7cC4YEwoLOjslf08pPCEhcztAKnh+EiE6K0EUOjQkCRAUJAB8PSUHJGo+JjQZUSEoMSJfKTkYLX8vMRQmfzk1OA0LNhY1HG4iPDUfdT4cMTt9HzUgH1E5IyE2eiAVGB9zMEFIPH4pIjEMeT49I39tLBQlInYwIRR8YD4pHgsLLjozH0AhPRcIeS4HKWsKPiEmAw45OD4tbhETJCptEyg1NnZIPzYcbjxCHARsPTE1KkBVRDEMVEgfKAhbEjI4KnEuJiUGXEgYMRhPIRg1DFs5JTMpeik2FDlcExglHU8iGDQIUC1WGj1XFgBNIWkUPR5+UyAnQgQ HTTP/1.1\r\nHost: inuedidgmapla.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1172\r\ndate: Fri, 22 Sep 2023 03:11:43 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1a8662d51ed58f0336021036df8bf88a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: WrEeduf0vkl3Jp0DLtKT224hmhN25H5u7ZHMZI_EDhoPJBXTVZTuaA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1172,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3017), with no line terminators","md5":"2fec6b26f7f0754c45a9004d81193b62","sha1":"b1c0922e2ce2055400846bfd3defd75a6d9bf5fc","sha256":"89452db8de559b0f50513718ce6dc9e7b016a67ee1944c6c20b0bf95c285bb24","sha512":"3cabbd6840de72f591173b0362fd7ae79f4cbab1ae63fe7bc7d2dca70fbc18bd90fb787a3a71cf5b89af19ea353d630a62856a5c4f22b8fe82bec1568614ea88","ssdeep":"","tlshash":"cf51008d34f3a08282b27064053bb59afa384aa1838cdb14863d97bcbd715dd6317f4c","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":119,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inuedidgmapla.com/amVTUk8LBzA/cAtYMXQ6GAlud30sQGEUKx9VIycrWhY3PiIQA30xIwUQNzQ9BQsnfCEPEXZgCRIzFzU3MFYwYRlbXREBDCg3BQQ/JQcCagk8VWorGgEsGhUcOyMGKBYrICQQeS43FicHATA3F30BLBUlPD0qP2oCOzcaZBgdHQQHGzwGBmM/LgY4Yx49DTxlHgYCHxU1PwESKwkpADQ1GjwwN2oeKycEByIOUxUUGSIqFRQpLwJqKgwNIDUGfSALEWMBOT9gPRo8MDA/GwI3BhwiPywQFyMiAwFiCzwdEioYWwoaByIwQGEQDlsBFAgODSQFYhUSJjR/CigtOggrPBI0Aiw7FWAEJDAJFTUJKCQ+OQVMDyA9IRpYMQM4LV0YOCkQ","fqdn":"inuedidgmapla.com","domain":"inuedidgmapla.com","tld":"com"},"ip":{"addr":"65.9.55.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.952Z","timestamp":1695352303952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inuedidgmapla.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Fri, 11 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"52:F1:1A:D5:BD:11:01:8A:F6:AD:36:16:5B:F7:77:F5:E9:CC:E4:FE","sha256":"D9:29:3B:7B:C4:26:27:A0:4B:FC:F5:48:A5:4B:B7:3B:44:25:69:60:CD:12:07:01:6E:D6:84:A1:5D:8E:6C:17"}}},"request":{"raw":"GET /amVTUk8LBzA/cAtYMXQ6GAlud30sQGEUKx9VIycrWhY3PiIQA30xIwUQNzQ9BQsnfCEPEXZgCRIzFzU3MFYwYRlbXREBDCg3BQQ/JQcCagk8VWorGgEsGhUcOyMGKBYrICQQeS43FicHATA3F30BLBUlPD0qP2oCOzcaZBgdHQQHGzwGBmM/LgY4Yx49DTxlHgYCHxU1PwESKwkpADQ1GjwwN2oeKycEByIOUxUUGSIqFRQpLwJqKgwNIDUGfSALEWMBOT9gPRo8MDA/GwI3BhwiPywQFyMiAwFiCzwdEioYWwoaByIwQGEQDlsBFAgODSQFYhUSJjR/CigtOggrPBI0Aiw7FWAEJDAJFTUJKCQ+OQVMDyA9IRpYMQM4LV0YOCkQ HTTP/1.1\r\nHost: inuedidgmapla.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1151\r\ndate: Fri, 22 Sep 2023 03:11:43 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1a8662d51ed58f0336021036df8bf88a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: fe3Trk5uYeZY7TNt31gEj5_GDvPanOrW8TWdG2JAmnL6iHI1nqsxLg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1151,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (2991), with no line terminators","md5":"de61afe380ff9cdb191046085d653c5b","sha1":"5794446c8438fbf85643bda68002a0d28e850fde","sha256":"f53bf6924f41c95ecdba64ebc2552d18f73957687d6268af87c4e946696e50f9","sha512":"2dd2d6984a4d5f47a4e6e60f465d5cb2dd79b70380db43cdb28681ab77c7265bca302c5e574c1e6502b09af3d9a666964549ad92a6ae534f07d4e7e94cfe8c6b","ssdeep":"","tlshash":"6751008d34f36082c2b27024412bb59afa289aa4934cdb54863d96bcbc715ed6317f4c","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wdownthreerfdfg.com/YlhHaFNNZyQbbgY1ficCNyADPz0OayFYHTU9dABlMDQ3XjA6CWEcOgZlflFkVmlzTiMLPHpZdREsJhwmEWV2TjoMPihVdRRldkZgVnZ0XH1SfjJVYkQsNwk0X2lhGCcWNHpZZVttdF1hUWh0UWdT","fqdn":"wdownthreerfdfg.com","domain":"wdownthreerfdfg.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.962Z","timestamp":1695352303962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wdownthreerfdfg.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 13 Sep 2023 06:26:23 GMT","end":"Tue, 12 Dec 2023 06:26:22 GMT"},"fingerprint":{"sha1":"01:C6:73:D9:51:19:6F:F8:8D:B0:27:C4:23:40:83:57:46:92:ED:67","sha256":"0D:80:28:7F:A7:86:C9:FB:3C:27:71:47:50:CC:D9:1B:00:70:8B:AF:FF:BC:5E:76:10:99:76:72:EB:FE:22:FE"}}},"request":{"raw":"GET /YlhHaFNNZyQbbgY1ficCNyADPz0OayFYHTU9dABlMDQ3XjA6CWEcOgZlflFkVmlzTiMLPHpZdREsJhwmEWV2TjoMPihVdRRldkZgVnZ0XH1SfjJVYkQsNwk0X2lhGCcWNHpZZVttdF1hUWh0UWdT HTTP/1.1\r\nHost: wdownthreerfdfg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 22 Sep 2023 03:11:43 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qtBqTjxzMYs5oXPyPf5%2BYpuOkCQ1vPsbEYMDn0cpy2gL3ZV8KozB2d4RMBjpmTwgLCYY8kpRrsfVaq5qVIZThlsiWG4WuiwQepntW1j5GQirE1o7pHlGGMWqvu6W8x%2BbXuKUg70S\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80a75cba681e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inuedidgmapla.com/Uzh6QUwyWhksczIFGGc5IVRHZH4VHUgHKCYICjQoY0seLSEpXlQiIDxNHic+PFYObyI2TF9zCmtrPTY0HQoRMw1iASgXJiR+LBA8AlssMgoRVEs0DjhyIwM2O2occXwlXjx4egFqHTUKPwk7BTtqcygUfB1cLDYUBE8dLA8kTygFDwpoPgAWA3MrKRgQVEs0CxZ+IwAiBn4rLQkScQ0pLgJPTisfOGotFw8GfClweBVyO3EZEWtDeB00fSkWfzt9KRAWCloseDYWVA51DRVQIAkIEXI7Ni8BWzwxORJuSzUUYHUpFn80XSg5BjJ7LHEOF1MedR4BFSsHGwAAMBQgJH8YF3lgeiwteQt5PwYbC1QwADswaDMTeQZtKxg7AGk0ORsbVB4JOzdoKhcJEh4QMiM9SEcPNhUMSQo+Il0ALTs1fw","fqdn":"inuedidgmapla.com","domain":"inuedidgmapla.com","tld":"com"},"ip":{"addr":"65.9.55.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:43.965Z","timestamp":1695352303965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inuedidgmapla.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Fri, 11 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"52:F1:1A:D5:BD:11:01:8A:F6:AD:36:16:5B:F7:77:F5:E9:CC:E4:FE","sha256":"D9:29:3B:7B:C4:26:27:A0:4B:FC:F5:48:A5:4B:B7:3B:44:25:69:60:CD:12:07:01:6E:D6:84:A1:5D:8E:6C:17"}}},"request":{"raw":"GET /Uzh6QUwyWhksczIFGGc5IVRHZH4VHUgHKCYICjQoY0seLSEpXlQiIDxNHic+PFYObyI2TF9zCmtrPTY0HQoRMw1iASgXJiR+LBA8AlssMgoRVEs0DjhyIwM2O2occXwlXjx4egFqHTUKPwk7BTtqcygUfB1cLDYUBE8dLA8kTygFDwpoPgAWA3MrKRgQVEs0CxZ+IwAiBn4rLQkScQ0pLgJPTisfOGotFw8GfClweBVyO3EZEWtDeB00fSkWfzt9KRAWCloseDYWVA51DRVQIAkIEXI7Ni8BWzwxORJuSzUUYHUpFn80XSg5BjJ7LHEOF1MedR4BFSsHGwAAMBQgJH8YF3lgeiwteQt5PwYbC1QwADswaDMTeQZtKxg7AGk0ORsbVB4JOzdoKhcJEh4QMiM9SEcPNhUMSQo+Il0ALTs1fw HTTP/1.1\r\nHost: inuedidgmapla.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1178\r\ndate: Fri, 22 Sep 2023 03:11:43 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1a8662d51ed58f0336021036df8bf88a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: yKeJrXW3NMH09HpXarteKilqcUVm4e0fimGG1u2cj23AYFO8PhqDSQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1178,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3024), with no line terminators","md5":"2bb17355f26b76b652864c4019eff66c","sha1":"b62437783a66b9266a2ca65f0dcd4d63bb70163a","sha256":"42820cbf51586f0b9827701464608065e51736864b812d2564596da660856401","sha512":"1aba79f6da212703ede809a469d4743e9d7252e35f94bacb8b22a4ab3ee16ed28730fb04b344cfdf6ff41c10c8aabd8b5a06c7caf92ab26cace6ba1d1fd61f97","ssdeep":"","tlshash":"6151008d34f36082c2f36064453bb59afa285a95834cdb14867c96bcbd715ee6317f4c","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.255Z","timestamp":1695352304255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"E6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12","sha256":"31:8C:88:B2:F2:3A:CA:89:46:6A:03:A1:A7:BF:E0:54:61:71:D0:11:D9:00:D5:2A:60:78:1D:A2:83:16:9D:FC"}}},"request":{"raw":"GET /gtag/js?id=G-LT9YQX0N49\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nexpires: Fri, 22 Sep 2023 03:11:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 85821\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85821,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3034)","md5":"c2ddb545c9a18bb834643a26d90fc11e","sha1":"55955ea9ad82ee6d02d490ea3cd4d3335f9b7201","sha256":"74e78e16229fe2b33139ca0d6de0f7976c1e2f0ed41d00cb07e6f1ba10628a78","sha512":"8316309f8d25edf3aed334537d56a39c0eb1089e940f82cfbda42e8a99bd06c276257a65119a43456bec5df17bd1811e87c3b9978ee2331c2105f3ec7ca6f2ac","ssdeep":"3072:WHrjhKJl+FPChIwFyPQL5uoHNYREMLaGreknNSvw6jOkrhUTqx55PJnWm+Xk:ufbFKhIwFyPne2/6knNSvwG7rOmxrPJ9","tlshash":"863408d9b3c3706682a7b479503f014ba57b6ca6b44ccc98e189c9d02e78a99513bf7c","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.upload.ee/favicon.ico","fqdn":"www.upload.ee","domain":"upload.ee","tld":"ee"},"ip":{"addr":"51.91.30.159","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.330Z","timestamp":1695352304330,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.upload.ee","organization":""},"issuer":{"commonName":"RapidSSL Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 02 Mar 2023 00:00:00 GMT","end":"Mon, 01 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4","sha256":"AB:0D:2D:02:34:6F:B5:08:58:FA:7A:F5:12:43:16:EF:56:12:7B:6F:99:CB:3F:AA:39:F3:0E:91:FE:43:FE:CF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.upload.ee\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error\r\nCookie: lng=eng\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 Sep 2023 03:11:44 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nLast-Modified: Tue, 16 Dec 2008 17:17:25 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nETag: \"4947e2a5-47e\"\r\nExpires: Fri, 29 Sep 2023 03:11:44 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\\012- data","md5":"f299cf2e651c19e48d27900ced493ccb","sha1":"c2d1086d517d7a26292e0d7b32da7c55b166c23b","sha256":"115c8eb4840245f7aed0cb2a17fa7e91b86f79bb2f223a25af8cc533e1dedff1","sha512":"b46341bfbac50f48afcd2a4e34910901d722ce72f9f34f809916103e01d7ebc11bce15a28bf6449efd49ab9dfef1f84a94e3ad775cbe52d5822996674124b104","ssdeep":"","tlshash":"6921fea2f747de24d05a027081978e195686ee563199204b711c7d6e782e5504435237","first_seen":"2023-04-30T19:35:34Z","last_seen":"2026-04-22T19:39:47.352104Z","times_seen":3622,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:44.414085317Z","timestamp":1695352304414,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 22 Sep 2023 03:11:44 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"7340032ec8d5c036030ae8748270d5d4","sha1":"da35b85467e9ad3e7abccb828a2706866ed39afa","sha256":"26d364948fbc9b83d52ca9520f09789cb32e0e8592808acd90c4163171048043","sha512":"e7484e4d7ae26e6bf46387eb270966c465526068754d969d7f55b2bbc82506a9e646a153e19feef1c96b3573179aa92893356d3776483fc71d2419d24633b941","ssdeep":"","tlshash":"f0f00e518af62411ed27a15e1ae01a2e384c680c4829164ff8352086c7123ca5204038","first_seen":"2023-09-21T18:11:36Z","last_seen":"2023-09-22T11:11:59Z","times_seen":124,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inuedidgmapla.com/utx?cb=TIV64Re2PVTS\u0026top=www.upload.ee\u0026tid=997369","fqdn":"inuedidgmapla.com","domain":"inuedidgmapla.com","tld":"com"},"ip":{"addr":"65.9.55.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.339Z","timestamp":1695352304339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inuedidgmapla.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Fri, 11 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"52:F1:1A:D5:BD:11:01:8A:F6:AD:36:16:5B:F7:77:F5:E9:CC:E4:FE","sha256":"D9:29:3B:7B:C4:26:27:A0:4B:FC:F5:48:A5:4B:B7:3B:44:25:69:60:CD:12:07:01:6E:D6:84:A1:5D:8E:6C:17"}}},"request":{"raw":"GET /utx?cb=TIV64Re2PVTS\u0026top=www.upload.ee\u0026tid=997369 HTTP/1.1\r\nHost: inuedidgmapla.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.upload.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.upload.ee\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Fri, 22 Sep 2023 03:12:44 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1a8662d51ed58f0336021036df8bf88a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: qafszxeRuWbhLCZYLuZpvP2XlhRM9q-CRAUWhTmgD0ixuFZcMGLMwA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inuedidgmapla.com/utx?cb=8BbPFEqD8mzz\u0026top=www.upload.ee\u0026tid=997414","fqdn":"inuedidgmapla.com","domain":"inuedidgmapla.com","tld":"com"},"ip":{"addr":"65.9.55.123","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.345Z","timestamp":1695352304345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inuedidgmapla.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Fri, 11 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"52:F1:1A:D5:BD:11:01:8A:F6:AD:36:16:5B:F7:77:F5:E9:CC:E4:FE","sha256":"D9:29:3B:7B:C4:26:27:A0:4B:FC:F5:48:A5:4B:B7:3B:44:25:69:60:CD:12:07:01:6E:D6:84:A1:5D:8E:6C:17"}}},"request":{"raw":"GET /utx?cb=8BbPFEqD8mzz\u0026top=www.upload.ee\u0026tid=997414 HTTP/1.1\r\nHost: inuedidgmapla.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.upload.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.upload.ee\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Fri, 22 Sep 2023 03:12:44 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1a8662d51ed58f0336021036df8bf88a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: qYYLyJsCWmujup5bbikA8xG1Ybe0b_IRpHDUhzu5NO4quBQ-uA7mTQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:44.4626915Z","timestamp":1695352304462,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 22 Sep 2023 03:11:44 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"7340032ec8d5c036030ae8748270d5d4","sha1":"da35b85467e9ad3e7abccb828a2706866ed39afa","sha256":"26d364948fbc9b83d52ca9520f09789cb32e0e8592808acd90c4163171048043","sha512":"e7484e4d7ae26e6bf46387eb270966c465526068754d969d7f55b2bbc82506a9e646a153e19feef1c96b3573179aa92893356d3776483fc71d2419d24633b941","ssdeep":"","tlshash":"f0f00e518af62411ed27a15e1ae01a2e384c680c4829164ff8352086c7123ca5204038","first_seen":"2023-09-21T18:11:36Z","last_seen":"2023-09-22T11:11:59Z","times_seen":124,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.319Z","timestamp":1695352304319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:23:05 GMT","end":"Mon, 06 Nov 2023 08:23:04 GMT"},"fingerprint":{"sha1":"75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D","sha256":"36:E2:44:19:D9:3E:F0:E9:93:5D:3F:17:21:9F:57:11:A5:68:F6:2D:C6:24:D2:68:12:21:E7:6F:0E:8F:84:75"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:nzkwEOhx-K9_MwksPfoP5Ym9Wfbz8g:esqXPPbVGdeh8f27; Expires=Sun, 21-Sep-2025 03:11:44 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AYZoVhcF1Tq9eYOjBwFBOr35EHeATNu0dVej-U2gXmpt2bYjMJqlfFZj1IubSKip30jccNbNEAjbfA\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-SbbfKTmbEKFrcha7p5TXZw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":146,"dns":0,"connect":7,"send":0,"wait":29,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.323Z","timestamp":1695352304323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:23:05 GMT","end":"Mon, 06 Nov 2023 08:23:04 GMT"},"fingerprint":{"sha1":"75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D","sha256":"36:E2:44:19:D9:3E:F0:E9:93:5D:3F:17:21:9F:57:11:A5:68:F6:2D:C6:24:D2:68:12:21:E7:6F:0E:8F:84:75"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:yLi3-zawsRs_EOje8DabIAMLdW0juA:6E_b9wXTksovjf3F; Expires=Sun, 21-Sep-2025 03:11:44 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AYZoVheTYxAcCuxHh04n7HL3ja4__Z_PZJSLLW8Y1oDpioVQkXYyTJb0hYZQ25kGEjYYUjXua7CbGg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-jofb0-85Ea_Ljhip-v2N1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":193,"dns":0,"connect":7,"send":0,"wait":33,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:44.566221711Z","timestamp":1695352304566,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 22 Sep 2023 03:11:44 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"592a801b77f88de399f499779ecea360","sha1":"458c4e9b9125d81b343ba4bf7c34e7d6bcd141ef","sha256":"cfbe885789fa7031cf494c91dccc4a6524c01223f358392a70010c488a1e7ec6","sha512":"4bc6cf1581c82345d3ca559856eeb19038540415dfa5160c76574a876f64438b3934f611d768cf89ad1475a53f18ef829f975dfcf4478e97dbe4688ecf9436f9","ssdeep":"","tlshash":"f4f0dc8249fa2d81cbbf443c16bae12036a036cd2e68164a38bd9b44425a2771b9021c","first_seen":"2023-09-21T18:37:14Z","last_seen":"2023-09-22T12:22:19Z","times_seen":576,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"du0pud0sdlmzf.cloudfront.net/xVDgxZ3c3V18BSCBRVVpObQ8FV09yUkIIGSQFUzYAEwB6DREuHkUdE2kIFwsWOl8MQRI6WwxWUTVcU1pDck1QWho7QlgLGzUdAyFCeggUVUd8QABWUmd6FFVHOFFfEg9xCgEfT2JnB1NSZ3oUVUcmThRUNmUICElHfR0DVxAxW1oIUmZ+A1dGZAgAV0ZxCg-EBHiZdVwgPcQp3VkZlFgFBAmkJ","fqdn":"du0pud0sdlmzf.cloudfront.net","domain":"du0pud0sdlmzf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.211","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:44.590327167Z","timestamp":1695352304590,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /xVDgxZ3c3V18BSCBRVVpObQ8FV09yUkIIGSQFUzYAEwB6DREuHkUdE2kIFwsWOl8MQRI6WwxWUTVcU1pDck1QWho7QlgLGzUdAyFCeggUVUd8QABWUmd6FFVHOFFfEg9xCgEfT2JnB1NSZ3oUVUcmThRUNmUICElHfR0DVxAxW1oIUmZ+A1dGZAgAV0ZxCg-EBHiZdVwgPcQp3VkZlFgFBAmkJ HTTP/1.1\r\nHost: du0pud0sdlmzf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inuedidgmapla.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 192\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: 4E1JiOdRMSWHtyvIvLINrmH3uuLF-F1QKnDlio8GoTCYrX7g7EWQIg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":192,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"65a07494624004b585145a64ab2d29b4","sha1":"cef93c18637380a85cc4fecc523907f120095679","sha256":"b4f3684112bd9d54d61b677603a08dd104b8607fe4d0c6c95e8f3a2a83c84fe4","sha512":"1416602b17bba8d5db99f0f4916b1010f6554bf621a27f4f008a96ffba7b19f65dd2083e4cb8453d2635590f8bce8f9fa89b9dbc34e04bf32f7b10e824aef234","ssdeep":"","tlshash":"68d022be371113e00ce108c1b325708953eee2ed0880c204b9132f923e08c0ada9c31a","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"du0pud0sdlmzf.cloudfront.net/cNkd5ZWVVKBcDWkIuHVhcD3BKU1wQLQoKC0Z6FjQJeylJDj1hdTNDEUwjRFVDWiYXAlgQIhcGWAdhGAEHC3NfERVZLEQMFlAuEgEPQiASQxBXehQKH18rFQRABAFMS1UTdUlNHQd2XFYnE3VJCQxYMgFAVwY/QVM6AHNcVicTdUkXExN0OFRVD2lJTEAEdx-4ABl0oXFcjBHdIVVUHd0hAVwYhEBcAUCgBQFdwdkhUSwZhDFhU","fqdn":"du0pud0sdlmzf.cloudfront.net","domain":"du0pud0sdlmzf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.211","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:44.597265364Z","timestamp":1695352304597,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /cNkd5ZWVVKBcDWkIuHVhcD3BKU1wQLQoKC0Z6FjQJeylJDj1hdTNDEUwjRFVDWiYXAlgQIhcGWAdhGAEHC3NfERVZLEQMFlAuEgEPQiASQxBXehQKH18rFQRABAFMS1UTdUlNHQd2XFYnE3VJCQxYMgFAVwY/QVM6AHNcVicTdUkXExN0OFRVD2lJTEAEdx-4ABl0oXFcjBHdIVVUHd0hAVwYhEBcAUCgBQFdwdkhUSwZhDFhU HTTP/1.1\r\nHost: du0pud0sdlmzf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inuedidgmapla.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 608\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: WNgwiWrWYl1GCMJBabY1S3FFv6u53K_zkKG05MxXvO-XvSvyLlX3DQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":608,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (863), with no line terminators","md5":"aa1cbd029a0be41e75b10db6d2ece293","sha1":"8cde014a6497240f2ff755e6639a4c9ea14ae2aa","sha256":"ac803fdd0c91b2b1c27dcce1f11edfc00abfef55ef7a8bb7fce764f3e4a366be","sha512":"610941c9d2a8ea0d63a7f1ebeb4080612b7c9a79f54c68c630a5b52a4445c6fc2bbb4813beb2455dfd612311c976b1154ea46261e4b74fb0003410532bb8e1df","ssdeep":"","tlshash":"0e1152f668394555b9a7b29323f7f46e868931cd18f2434979139212ff04c0fc6c9328","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"du0pud0sdlmzf.cloudfront.net/8SGwxN2krA19RVjwFVQpQcVsFBl1uBkJYBzhRf00vfF96RRgtFl1ADw9KRU0NdVwXWwgmCwwRDCYPDAZPKQhTCl1uGEFYAnUFQlEAIwhbQw4jSkRWVCUDS14FJA0UBS99QgESW3hESQZYbV9zElt4AFhZHDBJAwcRcFpuAV1tX3MSW3geRxJaCV0BDkd4RR-QFWS8JUlwGbV53BVl5XAEGWXlJAwcPIR5UUQYwSQNxWHldHwdPPVEA","fqdn":"du0pud0sdlmzf.cloudfront.net","domain":"du0pud0sdlmzf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.211","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-22T03:11:44.607443115Z","timestamp":1695352304607,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /8SGwxN2krA19RVjwFVQpQcVsFBl1uBkJYBzhRf00vfF96RRgtFl1ADw9KRU0NdVwXWwgmCwwRDCYPDAZPKQhTCl1uGEFYAnUFQlEAIwhbQw4jSkRWVCUDS14FJA0UBS99QgESW3hESQZYbV9zElt4AFhZHDBJAwcRcFpuAV1tX3MSW3geRxJaCV0BDkd4RR-QFWS8JUlwGbV53BVl5XAEGWXlJAwcPIR5UUQYwSQNxWHldHwdPPVEA HTTP/1.1\r\nHost: du0pud0sdlmzf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inuedidgmapla.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 576\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: p4407BqSSqxL8lbyyXBcTRTEoOtXDlmHJxAVCXkQh-HrTizOHeUFJQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":576,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (798), with no line terminators","md5":"f501a4be78d3fc505ece1564da50e028","sha1":"72b845243fce9799cd45114748430ce2e8724f82","sha256":"7b5388ce912963d5ada2a627e4e5398a6728f9760f937bce1f628ad0daa6f2d0","sha512":"a39a49941f78173d0d6ec75e0af3fe0973b244d6db89124d3d16c2dbc4f18497f6643527a2782a3c04b6d5838cedb589e3b66ded9207991b21ee42efb4b0e6ae","ssdeep":"","tlshash":"e50170b42a2a5854f8a3764203fbf45edaaa318d24f303153a131662ab05c4fc28832d","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AYZoVhcF1Tq9eYOjBwFBOr35EHeATNu0dVej-U2gXmpt2bYjMJqlfFZj1IubSKip30jccNbNEAjbfA","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.530Z","timestamp":1695352304530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:23:05 GMT","end":"Mon, 06 Nov 2023 08:23:04 GMT"},"fingerprint":{"sha1":"75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D","sha256":"36:E2:44:19:D9:3E:F0:E9:93:5D:3F:17:21:9F:57:11:A5:68:F6:2D:C6:24:D2:68:12:21:E7:6F:0E:8F:84:75"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AYZoVhcF1Tq9eYOjBwFBOr35EHeATNu0dVej-U2gXmpt2bYjMJqlfFZj1IubSKip30jccNbNEAjbfA HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.upload.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:QhmetfD7WP4zsOMmBG3ehVNkCdfTQg:v962lukptcfNnkv5;Path=/;Expires=Sun, 21-Sep-2025 03:11:44 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhftrYBM7EsVfvfi9g4qrJY1IUHxl05-kIcJIM8LI8ZoBFcpFgoNg0ZyylXRPc6WtwwWh-Hhqg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S2064003721%3A1695352304345994\u0026theme=glif\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-khN-XPFikH8_0E8oupgm9w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 403\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":403,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (395)","md5":"124f8f8bca46bd2aa4a76874f06a5d75","sha1":"dc8211f40d1a94e9e99cdd42318107d4a6f11f93","sha256":"20a2db0d9dc30cf28a37253585d1bec28dd1d558c2ba99f9d614f17088f1af2c","sha512":"b0ab718390095b8b5e05c3faf301bea4b72138b6695d50feeb8d4cc0f022602cd1976cfb213c53e92b57ddbcbd21870b50c2b267a11cda307a06ca3052c44c5f","ssdeep":"","tlshash":"ebf0c06f0c45009de96324e5a018b1dc5464385879e994a871faa72d04c6d2b21536f3","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AYZoVheTYxAcCuxHh04n7HL3ja4__Z_PZJSLLW8Y1oDpioVQkXYyTJb0hYZQ25kGEjYYUjXua7CbGg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.560Z","timestamp":1695352304560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:23:05 GMT","end":"Mon, 06 Nov 2023 08:23:04 GMT"},"fingerprint":{"sha1":"75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D","sha256":"36:E2:44:19:D9:3E:F0:E9:93:5D:3F:17:21:9F:57:11:A5:68:F6:2D:C6:24:D2:68:12:21:E7:6F:0E:8F:84:75"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AYZoVheTYxAcCuxHh04n7HL3ja4__Z_PZJSLLW8Y1oDpioVQkXYyTJb0hYZQ25kGEjYYUjXua7CbGg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.upload.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:HR9yMwKpsuHx60pv2NiKZZui597MbA:9CHZ4PBq53WNd6_S;Path=/;Expires=Sun, 21-Sep-2025 03:11:44 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhdC6Qoas0BHQv4O2f3ZQ9KH2u-Vzaotn3aDKlkv9Vm-GDaGnvpobkeHTmgzGwEKSWvUY_b1rg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1745305461%3A1695352304406342\u0026theme=glif\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-BlvPtHoRLKSYCfeacvtaWg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 406\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":406,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (399)","md5":"715637af43c0d04b44c1ab3bb5f4a157","sha1":"7feab4dc014b7a486eed55a135ac703b509d3425","sha256":"ec766d0e1b5dfdcd612de7cd56f4ad189dd113524fa873da0767569610a172b0","sha512":"38c181451ccdebd5e580a69a7cba6f899e82f994393d900288ea1cd733a185150efc02232733e1a8b445da0cd6e610393dc876dead00138d6edd3e207812adb0","ssdeep":"","tlshash":"d6f0c0fe488600dd558364f56024a49c143574ad7ed3b4f9b1faa70511acd1b21122f3","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhdC6Qoas0BHQv4O2f3ZQ9KH2u-Vzaotn3aDKlkv9Vm-GDaGnvpobkeHTmgzGwEKSWvUY_b1rg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1745305461%3A1695352304406342\u0026theme=glif","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.803Z","timestamp":1695352304803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E","sha256":"44:0C:58:51:4C:73:7C:67:DA:A2:72:29:81:68:CD:FC:51:B5:79:65:66:F0:55:FA:55:C4:45:30:BB:DD:09:82"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhdC6Qoas0BHQv4O2f3ZQ9KH2u-Vzaotn3aDKlkv9Vm-GDaGnvpobkeHTmgzGwEKSWvUY_b1rg\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1745305461%3A1695352304406342\u0026theme=glif HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.upload.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-LrFko4jrG2aSpLtEfxTk2Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":2599,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, Unicode text, UTF-8 text, with very long lines (1656)","md5":"76507c614d3dfb2fe8008557a5915d43","sha1":"58f14aa6fd373d561bf3b548e5a25e0a1ccf44f0","sha256":"93a49a441b68c75e518d2e2ede24e760d2a321355b0fbb473376110a71f5b353","sha512":"a970950b7450fcb90216662df603c4d8246d17ee7bc21a56c368073bf3ab53051a731cd412abaf32f12adca8a42f991b973b55dae7e50cd8f6745e77f2f27151","ssdeep":"192:A8kMmEXVKNzFzZz4zpzs17H1z+L8z+LCz+Lbz+LUz+LeClN:n5mEFKFdhkxstt+E+m+T+8+hT","tlshash":"a602f998d75e713227a4d86616ff31cca00d9671d903ede969abdc7bb0ef73a0490808","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhftrYBM7EsVfvfi9g4qrJY1IUHxl05-kIcJIM8LI8ZoBFcpFgoNg0ZyylXRPc6WtwwWh-Hhqg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S2064003721%3A1695352304345994\u0026theme=glif","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.597Z","timestamp":1695352304597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E","sha256":"44:0C:58:51:4C:73:7C:67:DA:A2:72:29:81:68:CD:FC:51:B5:79:65:66:F0:55:FA:55:C4:45:30:BB:DD:09:82"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhftrYBM7EsVfvfi9g4qrJY1IUHxl05-kIcJIM8LI8ZoBFcpFgoNg0ZyylXRPc6WtwwWh-Hhqg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S2064003721%3A1695352304345994\u0026theme=glif HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.upload.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-XXXa-r9OgyLO7P52lcxcoQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":177774,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"959d429c8e06e2cb59bd273e28f998a0","sha1":"da66bc531cc9bb47b3f8d5c41915234323df48ab","sha256":"b17c5e93b2882c3bfdc4ca2403b11340aadca4a39d6d22ef40f81776ef7ac23c","sha512":"b0f4f13229527b7130f97d74deeef487721c70c8b7c34c54217ce37d09b15305294d1db76af3405b07e0eca659069765c656c372cbdfb8f2d1267d1246a8b3b5","ssdeep":"3072:b4J+03jL5TCOauTwDhFdnCVQNLa98HrHevC2eYCLaISE92oa:L0zEOQR+iLa98Hr4reYCvSE9K","tlshash":"b10418d57b8e381787a632a980ff014ef17dd2f6a1094874f09894a06db8a1d13b7f6d","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:45.293Z","timestamp":1695352305293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\naccept-ranges: bytes\r\netag: \"2943849315\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 1147\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 236632424\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1147,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with CRLF line terminators","md5":"83d96c15e4e8c47d21932e12fd4ea19c","sha1":"e37d7968f226fb8951bd263a7ef42afb83421833","sha256":"7b7b5866f37a6abf0f2540177b360babbeec231a53124d11395361f475824fcc","sha512":"b14ca0c71d6e4e988c693f1236c14bb22d2ca3ea49a02b2b4bd023ddb091762887f6c31ce88c68a9f96aa40281d4a93f5d0ee5696e423e21317c91e0bcc9dec6","ssdeep":"","tlshash":"7c211e262c825d14827022b198fab00dd425ea53d38dc810b1f5ac67bff8756c992be8","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/88aaba9d-21d4-4917-a28e-6b74dc2b94c7/Dermedic_baneriai-09-EE_300x250-EE.jpg","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:45.303Z","timestamp":1695352305303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/88aaba9d-21d4-4917-a28e-6b74dc2b94c7/Dermedic_baneriai-09-EE_300x250-EE.jpg HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\netag: \"1263002368\"\r\nlast-modified: Mon, 28 Aug 2023 07:26:35 GMT\r\ncontent-length: 59365\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 235331597\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59365,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x250, components 3\\012- data","md5":"ff1cb03a3640a2fd0c82896d9bbf78bf","sha1":"8e2634c530229c9dbc15cff2b96fb0793200321e","sha256":"da23af6135a48509298eaf9d3289ba082ba97feae4f6a25085a086747936d604","sha512":"ead7d92ea1c24a7df81f90ab84ebcfb3939b652e3e8d31f7e784fb9b41b16b668f9300b9fa376eafb65c1acf761bcafeaa9a701c64dbce1d96c890199991e87a","ssdeep":"","tlshash":"","first_seen":"2023-09-02T13:20:04Z","last_seen":"2023-09-22T17:57:23Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/files/close-gray.png","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:45.350Z","timestamp":1695352305350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /files/close-gray.png HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\netag: \"2525417386\"\r\nlast-modified: Fri, 08 Apr 2022 18:07:56 GMT\r\ncontent-length: 1497\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 231235966\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1497,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\\012- data","md5":"41d9676ab94bece3f7a549b4769ddbe2","sha1":"521f14490fc57fea51e2e5bf00e2299dce51561b","sha256":"c2f89787bda82263fceb9ec11d398fa83a5f22abf248956df29bdee2987d2f34","sha512":"9988bd18d13f38d3bfe107d116c28f896b9965de6ca0949905f47901965a356d621c1ec4b1a573dfb0ed753ccc270015419b24729b767de2d5210a73b2c3daaf","ssdeep":"","tlshash":"5d31f7f3e40c4ba3d57313928a6a7184ada3d5f230014014fcc9a90c966cf0eeaee253","first_seen":"2023-04-30T19:35:34Z","last_seen":"2024-08-21T09:18:42.702606Z","times_seen":112,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1c1Q_oZal1e6S8K5uXvdoK2DBgzUh9UnQKlVkQ2SFpFwxy4xIFiCU4gdcxv6w9o47a5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g","fqdn":"serving.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:45.343Z","timestamp":1695352305343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /event?key=FYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1c1Q_oZal1e6S8K5uXvdoK2DBgzUh9UnQKlVkQ2SFpFwxy4xIFiCU4gdcxv6w9o47a5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g HTTP/1.1\r\nHost: serving.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nCookie: bepolite_id=1d8d91fe2d2431b3bf6b4c6c50d7bdf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\ndate: Fri, 22 Sep 2023 03:11:30 GMT\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 236632430\r\nage: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wdownthreerfdfg.com/popunder.gif","fqdn":"wdownthreerfdfg.com","domain":"wdownthreerfdfg.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.564Z","timestamp":1695352304564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wdownthreerfdfg.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 13 Sep 2023 06:26:23 GMT","end":"Tue, 12 Dec 2023 06:26:22 GMT"},"fingerprint":{"sha1":"01:C6:73:D9:51:19:6F:F8:8D:B0:27:C4:23:40:83:57:46:92:ED:67","sha256":"0D:80:28:7F:A7:86:C9:FB:3C:27:71:47:50:CC:D9:1B:00:70:8B:AF:FF:BC:5E:76:10:99:76:72:EB:FE:22:FE"}}},"request":{"raw":"GET /popunder.gif HTTP/1.1\r\nHost: wdownthreerfdfg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\ncontent-type: image/gif\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=604800, immutable\r\ncf-cache-status: HIT\r\nage: 23541\r\nlast-modified: Thu, 21 Sep 2023 20:39:23 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=6G4NJIoR7He15kywKhEl7o2vMs%2B1GC8B2Mb6%2BhZbW7ZfzbG6dPqTdPh1HpHQgGwivRvH5pkEKcM8KiPAVnJcqP0ADuTyKsur7eDFctYG6zXT42c2efIx675BtXQEPjEzwKdZ8l6i\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 80a75cbe2e3cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33772,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"d5d738201812beb401fa990e75035d81","sha1":"6e6bf5218fb1aa383e1a2bc455739083ebd6732a","sha256":"10be777775fe0fa1411a482b220da7cfb61cf7ecd5d81972f54bc8e103c7832a","sha512":"f88c0598f62570006b706da0967a258ac72b7906075b97fd96241c763bcdc3f5d068a3c1639709902c176e0c1ec8f84b5173bb12efb582efb434a206bd92559d","ssdeep":"","tlshash":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index_edge.js","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.618Z","timestamp":1695352305618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index_edge.js HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\netag: \"363011113\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 2331\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 237373613\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2331,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1950), with CRLF line terminators","md5":"033232ccfc3988ea75e56fc5a3ba647c","sha1":"cc8a5830f95942bdebe409fdc04868bd055480dc","sha256":"2886b24ee4dfc3bd83aa79daceb23f6205acb3b67e94aff4ebfd35885c3ee102","sha512":"e3fe43ead89fe8673602c9ff1a29cb49f7339e09c065c04ae52ae650270a700baebe7736892dd6dae7259331d8f1a6c9e1b944b16b8e3576a3d501d3a5cd6ce5","ssdeep":"","tlshash":"b84111524dc692526699f0979f1b14de0045bc1bebac4ff7f5c02c0afb532a1cb86722","first_seen":"2023-09-22T05:12:02Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index_edge.js","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.618Z","timestamp":1695352305618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index_edge.js HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\netag: \"2361199666\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 2331\r\ndate: Fri, 22 Sep 2023 03:11:12 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 237373625\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2331,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1950), with CRLF line terminators","md5":"033232ccfc3988ea75e56fc5a3ba647c","sha1":"cc8a5830f95942bdebe409fdc04868bd055480dc","sha256":"2886b24ee4dfc3bd83aa79daceb23f6205acb3b67e94aff4ebfd35885c3ee102","sha512":"e3fe43ead89fe8673602c9ff1a29cb49f7339e09c065c04ae52ae650270a700baebe7736892dd6dae7259331d8f1a6c9e1b944b16b8e3576a3d501d3a5cd6ce5","ssdeep":"","tlshash":"b84111524dc692526699f0979f1b14de0045bc1bebac4ff7f5c02c0afb532a1cb86722","first_seen":"2023-09-22T05:12:02Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/bg.jpg","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.666Z","timestamp":1695352305666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/bg.jpg HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\netag: \"1258772253\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 36158\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 214048621\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x400, components 3\\012- data","md5":"9606d46f8ff8eeeab12a35a699e90f7c","sha1":"7c5ad4de6e5127e7058263fc02e18adbd837b001","sha256":"f613d52f7aa894c5fb86dbd70191b31617da9ea5c823be392665bbed75fb25a0","sha512":"7f46e689a5c6269714058998e5fe2bd891df8b50154e0975bd9558f607913c02382763d12dbad45e9c6af8290956823c0f71f0c6e91054166ad8356e8ed0f86e","ssdeep":"","tlshash":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/logod.png","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.671Z","timestamp":1695352305671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/logod.png HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\netag: \"901359608\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 1935\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 198538974\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 400, 8-bit colormap, non-interlaced\\012- data","md5":"d504a965b26d720f066ceebc2745aaa1","sha1":"a2d6baebc0fbdd857f3121c53f4874412c703e53","sha256":"d73a93170ecf7557473091056cea5cfd3aad37674d268d8c83b8a0f1f7358009","sha512":"cacb4a77d069fe7fe411886ce81671b89cf67e77deac4f92693c4393fd2e7672e24c0a8b33958c64f9ef4c3491598351cf74a833cc012fd3c61dfa34b45bea1e","ssdeep":"","tlshash":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/mce_logo.png","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.675Z","timestamp":1695352305675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/mce_logo.png HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\netag: \"1433775955\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 3243\r\ndate: Fri, 22 Sep 2023 03:03:46 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 214048624\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 400, 8-bit colormap, non-interlaced\\012- data","md5":"1a1dbe232ef2985aba17bd0e4c061af5","sha1":"0dfc5c01e9d5bf0a5a6965a3289b9c70b33d3f1f","sha256":"d654583ab6fa4a225642c4e97b029aa268a915bb2a4b7573baced1b32ec94a4c","sha512":"35eec49872543e5eac7d28ec33e78a085b7d30563980d13452bcb4433d9773ebd7623612079dd46b61c84e916a81fda737d8f0945c78521ee5bed0366bd659ca","ssdeep":"","tlshash":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/asd100.bin","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.335Z","timestamp":1695352304335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.upload.ee/\r\nOrigin: https://www.upload.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://www.upload.ee\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 291\r\nlast-modified: Fri, 22 Sep 2023 03:06:53 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=5%2BD4jUWwNwef9DqAVAxPGvGlwiDiDI8npmEhW%2BQ4Ds%2FNgtQ9rcWNtbPpI9V%2FsV1VVXR8YsHvoXGITDW7SVGa5hAxI4xH9TPUjX%2BAD598NBDebK%2FRniVVkTKly630BaBx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 80a75cbd0b140b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104448,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"9a09384e0bfae23e663c0c8f7d3cebf2","sha1":"6afadd7145f442f78513aee9e7b385f918979956","sha256":"5486e2365acd17b577254ff9c4d5b291aa7ab20cd5e36541a3fc5093e41e4540","sha512":"88ef4bd6d09d989135c586b6e6dc2dd1dfc658e461a793df9731769e6abc0d729554c7ebad95dae2f00b217e37e2de921eea2a87f2ce0ee07d77d94c4c3da56d","ssdeep":"48:Li3lPBdz5aX05ZjUDa7CX+PFrSVB/kziZ:+3lPX8X05ZjUaOO5S4ziZ","tlshash":"26a309b1c328e700d28f87b24d61d471d664bc95ac8269ddc14178bdee7308a8a2f4db","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":45,"dns":0,"connect":1,"send":0,"wait":19,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/t12.png","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.682Z","timestamp":1695352305682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/t12.png HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\netag: \"2939934334\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 1257\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 214048627\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1257,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 400, 4-bit colormap, non-interlaced\\012- data","md5":"c561b9e1b4e6a638814604e83d349254","sha1":"d913b86b7f8fa90cc66988404719cc62b58d7ecd","sha256":"106667f88af66a96060db1fe902965c433fcfc1623ee58264fb47c555203c0c7","sha512":"ef359addfa940c2514912f76818f5c3af32090570bdf631b493845ea3b479f358a78f9c6faf991ee222e668274bf51e02b74161a1c7557f85fc105dd36d6c1c6","ssdeep":"","tlshash":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/mull.png","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.685Z","timestamp":1695352305685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/mull.png HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\netag: \"4122624961\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 1431\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 236923662\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 117, 8-bit colormap, non-interlaced\\012- data","md5":"1d601fa17114da42767bc0a6c93e4e52","sha1":"9264a3db8d2d53ef63e883deb0086e88a70972b3","sha256":"93d71fd429d3f03e46cf8f71147dc43588e8cf3151d0c4d32d54b915a171b56d","sha512":"3b90d253fdc961c5ba2fcc79ee616cec711cf00f658ac335dc4db141419f3030d164ae16fc800dadc18486751867afae6d3df17fd5940c532c67d81d6516054a","ssdeep":"","tlshash":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g","fqdn":"serving.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:46.285Z","timestamp":1695352306285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /event?key=FYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g HTTP/1.1\r\nHost: serving.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nCookie: bepolite_id=1d8d91fe2d2431b3bf6b4c6c50d7bdf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\ndate: Fri, 22 Sep 2023 03:11:31 GMT\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 237114227\r\nage: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnPQFkqynusZJvi-LzBjp4mA","fqdn":"serving.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:47.794Z","timestamp":1695352307794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /event?key=FYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnPQFkqynusZJvi-LzBjp4mA HTTP/1.1\r\nHost: serving.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nCookie: bepolite_id=1d8d91fe2d2431b3bf6b4c6c50d7bdf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\ndate: Fri, 22 Sep 2023 03:03:48 GMT\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 236886756\r\nage: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/scripts/saresponsive.js","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:45.121Z","timestamp":1695352305121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /scripts/saresponsive.js HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\netag: \"2445274911\"\r\nlast-modified: Sun, 17 Sep 2023 21:45:34 GMT\r\ncontent-length: 176967\r\ndate: Fri, 22 Sep 2023 03:03:45 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 236632421\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":176967,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":32,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.342Z","timestamp":1695352304342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.upload.ee/\r\nOrigin: https://www.upload.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=215746507612607@1@1695352304; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://www.upload.ee\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=hFqrQDXZU1NpUo0TayQXMACbZ5f3n8ZEPGDtfcRqD9uMpKTfunuGL5rY7L%2F8swUENZjiu6FhOx00Vqi5J74AHzCbVdHmeaWna20Oee8fRZn2sZCVQBEwSJxr7udGx4ah\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80a75cbd4b200b45-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1dac48f7b331d4193807c5bc54fa112d","sha1":"b69c093c8c8d872cdd99fe22b610a9c8f7f19987","sha256":"90282ef9608e688498998d311bd1264569a72f00e620d8db30e9bb6e58118360","sha512":"70145e64b4e67af385b4f60cf7c4f33b75f579576061b3c548fcf6598582327616a44da950e9dc6218daa7d4f6ce7323ffaa8087a2fc3bcc357674cfcc366c9f","ssdeep":"","tlshash":"07800000a02088cb880a2083002800282002280200c0c208223aaf8080382a820220a8","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":75,"dns":17,"connect":4,"send":0,"wait":119,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/t11.png","fqdn":"static.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"212.47.222.22","port":443,"asn":3327,"as":"CITIC Telecom CPC Netherlands B.V.","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.679Z","timestamp":1695352305679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /banners/e24984c5-9029-4e3a-8853-4c5b157e624f/t11.png HTTP/1.1\r\nHost: static.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\netag: \"3434959153\"\r\nlast-modified: Tue, 19 Sep 2023 12:36:35 GMT\r\ncontent-length: 2048\r\ndate: Fri, 22 Sep 2023 03:11:12 GMT\r\ncache-control: must-revalidate, private\r\nexpires: -1\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 231235978\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 400, 4-bit colormap, non-interlaced\\012- data","md5":"fd8ffa986dabf8e55ea16ad84efb51d9","sha1":"a2ab76837f5733d4b6165c3e7629d0f418bf6089","sha256":"778e56b34bf74e451b073e9c19b9a89cf0a71f7a63ab2e53217dbbc98665ea62","sha512":"7bf2685586849d95b2843547eefa15d2b85f4d931e1f0e04a5955fcb0e12012b6b591bce865f59155a6c0ec8da66d47eb8ec449b44a4a3bc11be4727a5c38767","ssdeep":"","tlshash":"","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.337Z","timestamp":1695352304337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.upload.ee/\r\nOrigin: https://www.upload.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 Sep 2023 03:11:44 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=1313722665609564@1@1695352304; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://www.upload.ee\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ZsUMS9a1vMw4SZwBFvWmte31p5pF%2FP26GeniyBpVMmHbgyN7lQZnZ%2B90R%2BAnSHF5ewt5MpHaQG8X%2FbiBWg%2BoHhOwRZEhkOaXF8K%2BmEJRtsdId6rFV1FxgnJCRcNZtI%2F3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80a75cbd6b270b45-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"816d1d87f9ef84432e31b850ff5a2abe","sha1":"ad3f55fe622fbb6173ab67a8566ca4706dbf1e4d","sha256":"11afdf5e0326268a222d83d026205f7aea42c0e174946c5a12da3b197ecc1805","sha512":"75473a45e91c1146d385bbcbafdc802aa55d0564b07aee5b9181a68b9237a037cc2e2cfcdf719053746ed5768fa7a155155f4d90a8c29433bde53461d59b8afc","ssdeep":"","tlshash":"9080002200a2080380c20a83c20232203228208008e28300ba388f3838a22a8202c0a8","first_seen":"2023-09-22T05:12:03Z","last_seen":"2023-09-22T05:12:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":99,"dns":21,"connect":5,"send":0,"wait":115,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serving.bepolite.eu/script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c\u0026type=direct\u0026page_id=3949550\u0026screen_width=1280\u0026screen_height=1024\u0026os=Linux%20x86_64\u0026refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F15711713%2F7288fe0425531d939f77%2FClient.exe\u0026pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F15711713%2FClient.exe.html%3Fmsg%3Dsess_error\u0026rnd=1695352303852","fqdn":"serving.bepolite.eu","domain":"bepolite.eu","tld":"eu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.upload.ee/files/15711713/Client.exe.html?msg=sess_error","date":"2023-09-22T03:11:44.848Z","timestamp":1695352304848,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bepolite.eu","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 21:06:47 GMT","end":"Sun, 03 Dec 2023 21:06:46 GMT"},"fingerprint":{"sha1":"B7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD","sha256":"E6:B8:D8:CD:C4:AF:99:B8:FE:AA:BC:4E:7A:2B:BA:32:A0:C0:A7:49:70:CE:35:CA:6C:01:D2:B9:1A:97:CD:30"}}},"request":{"raw":"GET /script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c\u0026type=direct\u0026page_id=3949550\u0026screen_width=1280\u0026screen_height=1024\u0026os=Linux%20x86_64\u0026refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F15711713%2F7288fe0425531d939f77%2FClient.exe\u0026pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F15711713%2FClient.exe.html%3Fmsg%3Dsess_error\u0026rnd=1695352303852 HTTP/1.1\r\nHost: serving.bepolite.eu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.upload.ee/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, must-revalidate, max-age=0\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/plain;charset=ISO-8859-1\r\ndate: Fri, 22 Sep 2023 03:11:30 GMT\r\nset-cookie: bepolite_id=1d8d91fe2d2431b3bf6b4c6c50d7bdf3; Max-Age=7776000; Expires=Thu, 21-Dec-2023 03:11:31 GMT; SameSite=None; Secure\r\np3p: CP='BePolite does not have a P3P policy'\r\nx-varnish: 236632418\r\nage: 0\r\naccept-ranges: bytes\r\ncontent-length: 1793\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":66,"dns":0,"connect":13,"send":0,"wait":89,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"animate.adobe.com/runtime/6.0.0/edge.6.0.0.min.js","fqdn":"animate.adobe.com","domain":"adobe.com","tld":"com"},"ip":{"addr":"23.33.119.17","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://static.bepolite.eu/banners/e24984c5-9029-4e3a-8853-4c5b157e624f/index.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Fwww.telia.ee%252Fera%252Ftv%252Ftelia-tv%252F%253Futm_campaign%253Db2c-autumn-08-2023%2526utm_medium%253Dbanner%2526utm_source%253Dsmartad%2526utm_content%253Dbillboard-masterchef-est\u0026dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF3SgSfcipiZk62t38iMWfmnRIh10-ijUTr0XrNvCqysri5ka39RipfQflSFM5FVpULh9Bf5_ZLhYg9WjLAPa9rYPwxuouGe3gzfpHaIPmNenBs_1Hi5z7tkkAAd-tJPmMWizcgAGSchAar6ZytFzjJrzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3-3xCX_lXsqyZNn_7hcVQJ514npkAnxarNlTgaMDIvNjegzlxAAsRkaNGwd7ZK7Cfa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D\u0026f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fe24984c5-9029-4e3a-8853-4c5b157e624f%2Findex.html\u0026clink=https%3A%2F%2Fwww.telia.ee%2Fera%2Ftv%2Ftelia-tv%2F%3Futm_campaign%3Db2c-autumn-08-2023%26utm_medium%3Dbanner%26utm_source%3Dsmartad%26utm_content%3Dbillboard-masterchef-est\u0026banner_id=68c169a10d8940bab7f6188bb0b30ecb50dd7b0f4105441f8f6018cc3fcb090c\u0026bg=transparent\u0026w=1000\u0026h=400\u0026locale=Display%20Estonia-EST\u0026info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner","date":"2023-09-22T03:11:45.415Z","timestamp":1695352305415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adobe.com","organization":"Adobe Inc"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Thu, 12 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"B3:50:FB:1E:83:AF:74:EA:87:64:38:E3:6B:C4:7C:4E:DF:39:EE:6B","sha256":"E3:5C:84:E1:2B:21:D7:42:1C:24:37:BF:5A:F9:1E:93:C1:AA:EF:4B:B8:E7:36:D9:DB:07:DE:58:7D:57:85:15"}}},"request":{"raw":"GET /runtime/6.0.0/edge.6.0.0.min.js HTTP/1.1\r\nHost: animate.adobe.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.bepolite.eu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Apache\r\nlast-modified: Tue, 05 May 2015 12:17:26 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=900\r\nexpires: Fri, 22 Sep 2023 03:26:45 GMT\r\ndate: Fri, 22 Sep 2023 03:11:45 GMT\r\ncontent-length: 33737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (561)","md5":"7e639ab33ff27a85b48e43fa6a9c49a1","sha1":"11ae1b30653f3d90b8a01d38fb2ae6c89866365c","sha256":"4338ef4782c1cc60e27fb10ff29ef635553887f154aeaeaa547c8f492919898d","sha512":"8552c3e6d06ce719dd63503934178ac7de779551eae67ca287e0400432e2b24422069a521c52a87df9a0cacad6a2ceb6bf596e97027839e7a77b05ca178e3ad9","ssdeep":"1536:sFxOwN5uDaBSsrZkrOOdegrUAWCpP0DqkvXdFce5wtqmPxGynu6txuFhir8SOfd3:hU7rZGOOtrUdge5CGmu6txuXBSON","tlshash":"67a34bc573917015925b61b992ef210b713e581bb41888ecb6a8c4e67e7ae5c01fff38","first_seen":"2023-03-08T14:37:37Z","last_seen":"2026-03-16T20:52:11.76491Z","times_seen":15,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":7,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}