{"report_id":"b119480b-c4ed-4bf1-980f-5a1e9d41d267","version":6,"status":"done","tags":[],"date":"2024-05-01T15:38:22Z","url":{"schema":"http","addr":"goo.su/Cw4mR6O","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"viidey.click/gfhfghtrgfnfg.html","fqdn":"viidey.click","domain":"viidey.click","tld":"click"},"title":"BOLUDO 🤏"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T18:04:49Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"viidey.click","ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":7767,"sent_data":960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"richinfo.co","ip":{"addr":"109.200.199.111","port":443,"asn":49544,"as":"i3D.net B.V","country":"Italy","country_code":"IT"},"domain_registered":"2019-06-20","domain_rank":285236,"first_seen":"2019-06-26 15:58:03","last_seen":"2024-04-09 09:00:45","alert_count":0,"request_count":1,"received_data":97059,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2024-05-01 03:58:46","alert_count":0,"request_count":2,"received_data":9576,"sent_data":877,"comment":"","tags":null,"fingerprints":null},{"fqdn":"enduresopens.com","ip":{"addr":"23.109.170.155","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-31","domain_rank":0,"first_seen":"2023-08-31 14:06:40","last_seen":"2024-04-18 01:17:38","alert_count":1,"request_count":1,"received_data":1484,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rtb.pushdom.co","ip":{"addr":"109.200.209.143","port":443,"asn":49544,"as":"i3D.net B.V","country":"United States","country_code":"US"},"domain_registered":"2018-12-28","domain_rank":244282,"first_seen":"2019-01-08 20:36:00","last_seen":"2024-03-22 10:05:08","alert_count":0,"request_count":1,"received_data":158,"sent_data":509,"comment":"","tags":null,"fingerprints":null},{"fqdn":"st.top100.ru","ip":{"addr":"81.19.89.18","port":443,"asn":24638,"as":"Rambler Internet Holding LLC","country":"Russia","country_code":"RU"},"domain_registered":"1999-09-30","domain_rank":27374,"first_seen":"2014-03-27 17:20:51","last_seen":"2024-04-30 18:11:48","alert_count":0,"request_count":2,"received_data":56436,"sent_data":800,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.videy.co","ip":{"addr":"104.21.235.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-09","domain_rank":0,"first_seen":"2022-10-28 04:09:08","last_seen":"2024-04-20 23:26:47","alert_count":0,"request_count":1,"received_data":27283,"sent_data":500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.dtscout.com","ip":{"addr":"141.101.120.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-01","domain_rank":11951,"first_seen":"2017-01-30 05:52:42","last_seen":"2024-04-30 21:30:22","alert_count":0,"request_count":2,"received_data":11582,"sent_data":984,"comment":"","tags":null,"fingerprints":null},{"fqdn":"waust.at","ip":{"addr":"104.26.4.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":38137,"first_seen":"2016-01-28 19:24:33","last_seen":"2024-04-29 11:48:32","alert_count":0,"request_count":1,"received_data":15460,"sent_data":386,"comment":"","tags":null,"fingerprints":null},{"fqdn":"goo.su","ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2019-06-14","domain_rank":377451,"first_seen":"2017-05-12 21:35:59","last_seen":"2024-04-18 08:40:20","alert_count":0,"request_count":7,"received_data":75419,"sent_data":8234,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2024-05-01 03:38:37","alert_count":0,"request_count":2,"received_data":36078,"sent_data":1059,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-05-01","alert":"Sinkholed","trigger":"enduresopens.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=viidey.click\u0026_ss=6k9ozhjf1d\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=xu4r\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"141.101.120.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84ea3e5918919dd493e64b11d5356dcf","sha1":"7f799c96004ed889f02b8704611823fdba6c8502","sha256":"78382dcc499576ceaefa7ff3608c6e00d570f3a674be364efe0e4e34228d0a67","sha512":"e041b251c18a00e6fb7afce116548a49ec0e76f02a9a875848e1247bc162e8c3f45d94ab8cf4edd5a549aaebfe1455d6b21f8f87034e56876f341885e835ec66","ssdeep":"","tlshash":"4590021d75d5d030afc8d54010b55b48a8711bd354c050518871454810057a0cd595a8","size":51,"data":"","first_seen":"2024-08-20T01:27:27.720132Z","last_seen":"2024-08-20T01:27:27.720132Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viidey.click/gfhfghtrgfnfg.html","fqdn":"viidey.click","domain":"viidey.click","tld":"click"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fviidey.click%2Fgfhfghtrgfnfg.html\u0026j=https%3A%2F%2Fgoo.su%2F","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"141.101.120.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51bd741af3fcc4984d1a753eebfa1141","sha1":"534664acf69cbbb5c9b97c96b63dd37bdc580da2","sha256":"3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c","sha512":"14958b02aed15cfa48facbdd8e8752ac7d1220631fb6af7658bcd5b804c0be52f9555a1d0ebe0bd68ee3a5f60164d97cbf020884d8757afaa3297d0768ab8886","ssdeep":"","tlshash":"8941951f71d8f02907a1042692bf3b2fb63259189c078890c2a6d85cfc785fa5272d66","size":2079,"data":"","first_seen":"2023-03-07T01:03:00Z","last_seen":"2025-11-28T22:34:42.368027Z","times_seen":7807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viidey.click/gfhfghtrgfnfg.html","fqdn":"viidey.click","domain":"viidey.click","tld":"click"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3861e8b05dc68b569ba36ae3ce1d70ef","sha1":"01d13b44061a8af9a473f58859c02011d3b7db01","sha256":"7cf20282fd5b1f52d035894ef5a5efc5448e648d8d294ef4d4c654643f65e339","sha512":"ee382ba47747f641d091e2926da35713c7118c2597b44943a0419922cdcd8cb5385fbd9bc1eea4460f2bace12573c81f688f7c1bc920e42b6d7a38d2d323f71f","ssdeep":"","tlshash":"bab0123d514f5d2b1a0b15011b2b3ab493fcc44920f021083708cd3c804f61c0941112","size":106,"data":"","first_seen":"2024-04-30T20:20:40Z","last_seen":"2024-08-20T01:38:04.616912Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/d.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.4.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cdedd658fa41770f607c0b117c1f82","sha1":"3f3c9c6c330ab649e27ec56a8d852e9d41b0edf4","sha256":"951feaddb6ad45bcc58fee7033004366978150e8f2927692781c3e2755c7c15c","sha512":"e54460aaca1fd6d98f678733f38f9deb08d27f7dd7bd499c06e4d6624a9dac97f055be05e66523d7de7c8e3bec67cbcaac794c9b2582c16125d7e9848b99369a","ssdeep":"384:JVex0tBnpi6+KtHcDyfmKVhlcIGbO9+kS:JVgsl+ANfmKVhmVbOwkS","tlshash":"0b626c612d400051c7d714aa12afff0870797a796a82e47ba0adecb8376cfc7514fb66","size":14706,"data":"","first_seen":"2023-03-08T14:22:06Z","last_seen":"2025-04-10T09:23:55.529459Z","times_seen":1874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"7f6846cc0a61c81e3f1ba3d94022b5e8","sha1":"d325221351321d528f55512de201e970c62649aa","sha256":"a99729d7d825f8d197bc61f30e4c6b4affa154da5e9ba8c8876613758e557619","sha512":"70a67f1dfcc6c14683026fe6a7db038f5b523cfbb4742b0c6d9b79e7b0f6b150ad31b4287ac5327830ee185481b1f86bd1f3c127b978868164a754d0bf40c36e","ssdeep":"","tlshash":"e5d09721c088e849318080dcf114ba70c003601cc32096eefcd00a36828f252e003288","size":236,"data":"","first_seen":"2024-08-20T01:27:27.72144Z","last_seen":"2024-08-20T01:27:27.72144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"goo.su/frontend/js/redirect.js?id=399eaf833ac5f607b305c4ace0c25eb5","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:57.896Z","timestamp":1714577877896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goo.su","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 01 Apr 2024 06:02:27 GMT","end":"Sun, 30 Jun 2024 06:02:26 GMT"},"fingerprint":{"sha1":"DE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60","sha256":"3A:4F:E8:D4:0E:7F:4C:C0:50:93:BD:99:B7:84:CF:3A:7B:F1:CD:B7:FF:AD:2C:0C:CC:AC:36:8C:E8:F6:70:9B"}}},"request":{"raw":"GET /frontend/js/redirect.js?id=399eaf833ac5f607b305c4ace0c25eb5 HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/Cw4mR6O\r\nCookie: XSRF-TOKEN=eyJpdiI6ImdKeVRkNGIwM0dhRnZqdXVGUCticnc9PSIsInZhbHVlIjoiRHN2Rk9iR25ZeXdpTFdBbDdwaXU1RFVWd0VaMkljN2krWGM4WVBaUm9Qc1E2SnQwTU9hMmRlbGRVWmQ5TWRnbzkwSXVqcTZZeGtiNXR0UHVuVWliNDZUcDZvRUlzUXVLZSsrWG1HdThFQnFydTRQaVUzcmp5Q3VvTkoxcVExcDYiLCJtYWMiOiI4MjlkOTM1NDBlNzY1NGU1MzJlNDhhZjhjMzFjMDMwN2M1NjA4NjI2YmIyZDkxY2MyYzRkMzFkYzE3MTdiY2ZhIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6IkVSRkRPbzd1VEkrcVNLdVJzQUxUREE9PSIsInZhbHVlIjoiNnludjhHTitaTFkzSkYvUXBNd1RGQXVZL3FrWGVZbE4raGNQSVlGbldCbUdpSmRjb2JzNzhuWlVlSnFQeUxidVM3OXVDWE1qTnhiYllUc1lHY1h5NTVrc3dOVkkrZnk5UEh3T0VzbWZsM1NqZDlyTEcrR3VRLytxSm5aSWdTeVEiLCJtYWMiOiI2OTIwMDE3MDE0NzRlYzM5ZDk0NjQxZjU3N2VkZWI0MGU3YmQ4ZmQ5NGViNWFiMGZkOGY2MjZjNDIxZDZkMjQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 01 May 2024 15:37:57 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=604800\r\ncf-bgj: minify\r\ncf-polished: origSize=87787\r\netag: W/\"65896ec2-156eb\"\r\nexpires: Tue, 07 May 2024 18:40:19 GMT\r\nlast-modified: Mon, 25 Dec 2023 12:00:02 GMT\r\ncf-cache-status: HIT\r\nage: 75458\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VAdD6440rqpXEMwY4KuTK%2FX98SK%2FyF2orcDdMH%2BZIJfBdVT8%2B7RqwBOpmeGKVHBxLbq5A2pLn64XIrDes%2FGfI2iYc6SpaG6sAQAnK%2Fpyh2DRWgADvOC2%2BzA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 87d0db18cd380afe-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32113,"size_decoded":87784,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f152f828206d2cf93e62818f9504e023","sha1":"182c57654b3f05537cd722545f8d8dd99a8e2652","sha256":"237a9a5d407ec860020474b01d73aaf1ca71ba2519c8ca92dba2ec81cf479d0b","sha512":"effc17c5e6bbf407d07e39bbc8767562b30f317035e76e63caf90133cbf56c4aef4b327c3ecd7c71e4fa846a2e09e1e2da92e48c98bca1d792efb04cc24af0e7","ssdeep":"1536:Eqeo1GzGM+7TWaxsZGSJRgO1vVakaGSUUMOE6MLBvhTut5TEm3/f3CfxYgPDK:ErfgOjaAv/TutVtAYgrK","tlshash":"728309ddb2cab06347a770ba407f550bf236199d684d8400f115e8e9bc78a4a923bf7d","first_seen":"2024-01-14T17:40:03Z","last_seen":"2025-01-27T13:24:35.40946Z","times_seen":99,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/Cw4mR6O","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-01T15:37:57.358Z","timestamp":1714577877358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"goo.su","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 01 Apr 2024 06:02:27 GMT","end":"Sun, 30 Jun 2024 06:02:26 GMT"},"fingerprint":{"sha1":"DE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60","sha256":"3A:4F:E8:D4:0E:7F:4C:C0:50:93:BD:99:B7:84:CF:3A:7B:F1:CD:B7:FF:AD:2C:0C:CC:AC:36:8C:E8:F6:70:9B"}}},"request":{"raw":"GET /Cw4mR6O HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 01 May 2024 15:37:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.13\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImdKeVRkNGIwM0dhRnZqdXVGUCticnc9PSIsInZhbHVlIjoiRHN2Rk9iR25ZeXdpTFdBbDdwaXU1RFVWd0VaMkljN2krWGM4WVBaUm9Qc1E2SnQwTU9hMmRlbGRVWmQ5TWRnbzkwSXVqcTZZeGtiNXR0UHVuVWliNDZUcDZvRUlzUXVLZSsrWG1HdThFQnFydTRQaVUzcmp5Q3VvTkoxcVExcDYiLCJtYWMiOiI4MjlkOTM1NDBlNzY1NGU1MzJlNDhhZjhjMzFjMDMwN2M1NjA4NjI2YmIyZDkxY2MyYzRkMzFkYzE3MTdiY2ZhIiwidGFnIjoiIn0%3D; expires=Thu, 02 May 2024 10:17:57 GMT; Max-Age=67200; path=/; secure; samesite=lax\ngoosu_session=eyJpdiI6IkVSRkRPbzd1VEkrcVNLdVJzQUxUREE9PSIsInZhbHVlIjoiNnludjhHTitaTFkzSkYvUXBNd1RGQXVZL3FrWGVZbE4raGNQSVlGbldCbUdpSmRjb2JzNzhuWlVlSnFQeUxidVM3OXVDWE1qTnhiYllUc1lHY1h5NTVrc3dOVkkrZnk5UEh3T0VzbWZsM1NqZDlyTEcrR3VRLytxSm5aSWdTeVEiLCJtYWMiOiI2OTIwMDE3MDE0NzRlYzM5ZDk0NjQxZjU3N2VkZWI0MGU3YmQ4ZmQ5NGViNWFiMGZkOGY2MjZjNDIxZDZkMjQ1IiwidGFnIjoiIn0%3D; expires=Thu, 02 May 2024 10:17:57 GMT; Max-Age=67200; path=/; httponly; samesite=lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=17stmjPOuAHRgZGE%2B6%2BTJeZAr6xqhJSx6Fwzl%2Fia2M4LsVZ5gfXgUj37TkGOLWoJD51rWvc5jsxecJou2CmBH%2BmkMrxX3DirJUYfQjt37AdDoI%2B%2FxUpUULM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 87d0db15983d56c5-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10311,"size_decoded":20801,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7391)","md5":"79e518d6e7f4d041a5413f1cbeb3d86c","sha1":"3ea3b37dbce9d1ce10cf10c0ae485cb9ea347097","sha256":"100b22847ea53faba52fb177b02c8ff1f2f1ecea3d42aca40e713fcfbe364bd1","sha512":"4990a3deac2b9e3a482cf5d538574eff9a63e58bcd38a0188ac2726faefc6135fb255ce3557dbdd1d4deb1f02868bdeb9270a1233cf592d0abdedb4c9b33e5cd","ssdeep":"384:bHexw+TAjLJK5NuJL14AvqDy6zfqaRuhgGNd9rYriB0riBSSq0Ohr+n6kQ1KNkt:bHexw+TAjLJKfuJCANQinhgMErs0rsvG","tlshash":"80925d670cc310219513186a53ffbb08643491539d06e8c5fbcea65c9fc5fe88e9a7ae","first_seen":"2024-08-20T01:27:27.707663Z","last_seen":"2024-08-20T01:27:27.707663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":181,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.172Z","timestamp":1714577878172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goo.su","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 01 Apr 2024 06:02:27 GMT","end":"Sun, 30 Jun 2024 06:02:26 GMT"},"fingerprint":{"sha1":"DE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60","sha256":"3A:4F:E8:D4:0E:7F:4C:C0:50:93:BD:99:B7:84:CF:3A:7B:F1:CD:B7:FF:AD:2C:0C:CC:AC:36:8C:E8:F6:70:9B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImdKeVRkNGIwM0dhRnZqdXVGUCticnc9PSIsInZhbHVlIjoiRHN2Rk9iR25ZeXdpTFdBbDdwaXU1RFVWd0VaMkljN2krWGM4WVBaUm9Qc1E2SnQwTU9hMmRlbGRVWmQ5TWRnbzkwSXVqcTZZeGtiNXR0UHVuVWliNDZUcDZvRUlzUXVLZSsrWG1HdThFQnFydTRQaVUzcmp5Q3VvTkoxcVExcDYiLCJtYWMiOiI4MjlkOTM1NDBlNzY1NGU1MzJlNDhhZjhjMzFjMDMwN2M1NjA4NjI2YmIyZDkxY2MyYzRkMzFkYzE3MTdiY2ZhIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6IkVSRkRPbzd1VEkrcVNLdVJzQUxUREE9PSIsInZhbHVlIjoiNnludjhHTitaTFkzSkYvUXBNd1RGQXVZL3FrWGVZbE4raGNQSVlGbldCbUdpSmRjb2JzNzhuWlVlSnFQeUxidVM3OXVDWE1qTnhiYllUc1lHY1h5NTVrc3dOVkkrZnk5UEh3T0VzbWZsM1NqZDlyTEcrR3VRLytxSm5aSWdTeVEiLCJtYWMiOiI2OTIwMDE3MDE0NzRlYzM5ZDk0NjQxZjU3N2VkZWI0MGU3YmQ4ZmQ5NGViNWFiMGZkOGY2MjZjNDIxZDZkMjQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js\r\ncache-control: max-age=300, public\r\naccess-control-allow-origin: *\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y5CTNQ4aqKhesAYRh0ukSoQxFG3nL4hktYW5uhBA9Og2nPL8nAzIBG8yfl4UnowqfOM%2Fe3UzW1e0zuYBbCG0NnS1FKkiWHQT6s5d%2B0CXO4RxhFpFR%2Bdci0g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 87d0db1a9eef0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enduresopens.com/ttkXIvunodY/69489","fqdn":"enduresopens.com","domain":"enduresopens.com","tld":"com"},"ip":{"addr":"23.109.170.155","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:57.894Z","timestamp":1714577877894,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enduresopens.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 23:51:07 GMT","end":"Sun, 23 Jun 2024 23:51:06 GMT"},"fingerprint":{"sha1":"C4:F1:82:55:01:80:DE:E4:BA:76:D0:1C:20:FC:58:30:9D:43:C0:2B","sha256":"89:E7:C7:D2:18:AE:77:31:C1:42:68:3E:E6:37:1D:A6:D7:9D:A1:74:4A:BD:40:F0:AB:0E:4E:26:7A:5B:1F:7C"}}},"request":{"raw":"GET /ttkXIvunodY/69489 HTTP/1.1\r\nHost: enduresopens.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 01 May 2024 15:37:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://goo.su\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Thu, 02-May-2024 15:37:58 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Thu, 02-May-2024 15:37:58 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25,"size_decoded":5,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"5340000c00300000000000000000f000000c00000c000300c000000c00030c000c0000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-06T09:48:32.519208Z","times_seen":13696,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":274,"dns":86,"connect":17,"send":0,"wait":22,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-05-01","alert":"Sinkholed","trigger":"enduresopens.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.098Z","timestamp":1714577878098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 08 Apr 2024 07:31:57 GMT","end":"Mon, 01 Jul 2024 07:31:56 GMT"},"fingerprint":{"sha1":"93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33","sha256":"D6:3D:33:0B:E6:4E:91:7F:5C:A4:35:FB:EA:8F:18:E1:62:F8:E1:CE:9E:55:49:3E:3B:75:83:E3:E7:75:F1:EA"}}},"request":{"raw":"GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://goo.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Apr 2024 06:02:10 GMT\r\nexpires: Sat, 26 Apr 2025 06:02:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 11 May 2022 19:24:48 GMT\r\ncontent-type: font/woff2\r\nage: 466548\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15744,"size_decoded":15744,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15744, version 1.0","md5":"15d9f621c3bd1599f0169dcf0bd5e63e","sha1":"7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52","sha256":"f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615","sha512":"d35a47162fc160cd5f806c3bb7feb50ec96fdfc81753660ead22ef33f89be6b1bfd63d1135f6b479d35c2e9d30f2360ffc8819efca672270e230635bcb206c82","ssdeep":"384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/","tlshash":"8162e00158a163ade9b2327ed10b1b91c40660a27d2504e8c6e4fc95fe3d7ed5487b76","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-04-06T09:51:31.243417Z","times_seen":158495,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":86,"dns":1,"connect":10,"send":0,"wait":9,"receive":5,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.081Z","timestamp":1714577878081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 08 Apr 2024 07:31:57 GMT","end":"Mon, 01 Jul 2024 07:31:56 GMT"},"fingerprint":{"sha1":"93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33","sha256":"D6:3D:33:0B:E6:4E:91:7F:5C:A4:35:FB:EA:8F:18:E1:62:F8:E1:CE:9E:55:49:3E:3B:75:83:E3:E7:75:F1:EA"}}},"request":{"raw":"GET /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://goo.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18668\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Apr 2024 06:01:38 GMT\r\nexpires: Sat, 26 Apr 2025 06:01:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Dec 2023 02:00:39 GMT\r\ncontent-type: font/woff2\r\nage: 466580\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18668,"size_decoded":18668,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18668, version 1.0","md5":"8655d20bbcc8cdbfab17b6be6cf55df3","sha1":"90edbfa9a7dabb185487b4774076f82eb6412270","sha256":"e7af9d60d875eb1c1b1037bbbfdec41fcb096d0ebcf98a48717ad8b07906ced6","sha512":"47308de25bd7e4ca27f59a2ae681ba64393fe4070e730c1f00c4053bac956a9b4f7c0763c04145bc50a5f91c12a0bf80bdd4b03eecc2036cd56b2db31494cbaf","ssdeep":"384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa","tlshash":"8a82d08912e54211e0ca94393a4a0976ec9e3d8c0566f37d3c357392cdbe77156dbc29","first_seen":"2023-12-15T00:19:13Z","last_seen":"2026-04-06T08:13:30.290207Z","times_seen":15084,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":112,"dns":1,"connect":20,"send":0,"wait":11,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/cdn-cgi/challenge-platform/h/g/jsd/r/87d0db15983d56c5","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.428Z","timestamp":1714577878428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goo.su","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 01 Apr 2024 06:02:27 GMT","end":"Sun, 30 Jun 2024 06:02:26 GMT"},"fingerprint":{"sha1":"DE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60","sha256":"3A:4F:E8:D4:0E:7F:4C:C0:50:93:BD:99:B7:84:CF:3A:7B:F1:CD:B7:FF:AD:2C:0C:CC:AC:36:8C:E8:F6:70:9B"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/87d0db15983d56c5 HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 12141\r\nOrigin: https://goo.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/Cw4mR6O\r\nCookie: XSRF-TOKEN=eyJpdiI6ImdKeVRkNGIwM0dhRnZqdXVGUCticnc9PSIsInZhbHVlIjoiRHN2Rk9iR25ZeXdpTFdBbDdwaXU1RFVWd0VaMkljN2krWGM4WVBaUm9Qc1E2SnQwTU9hMmRlbGRVWmQ5TWRnbzkwSXVqcTZZeGtiNXR0UHVuVWliNDZUcDZvRUlzUXVLZSsrWG1HdThFQnFydTRQaVUzcmp5Q3VvTkoxcVExcDYiLCJtYWMiOiI4MjlkOTM1NDBlNzY1NGU1MzJlNDhhZjhjMzFjMDMwN2M1NjA4NjI2YmIyZDkxY2MyYzRkMzFkYzE3MTdiY2ZhIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6IkVSRkRPbzd1VEkrcVNLdVJzQUxUREE9PSIsInZhbHVlIjoiNnludjhHTitaTFkzSkYvUXBNd1RGQXVZL3FrWGVZbE4raGNQSVlGbldCbUdpSmRjb2JzNzhuWlVlSnFQeUxidVM3OXVDWE1qTnhiYllUc1lHY1h5NTVrc3dOVkkrZnk5UEh3T0VzbWZsM1NqZDlyTEcrR3VRLytxSm5aSWdTeVEiLCJtYWMiOiI2OTIwMDE3MDE0NzRlYzM5ZDk0NjQxZjU3N2VkZWI0MGU3YmQ4ZmQ5NGViNWFiMGZkOGY2MjZjNDIxZDZkMjQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\nset-cookie: cf_clearance=DflsdVmiJqle.a7bywvXRXul59ZG4.uEsWlPhwiVj6w-1714577878-1.0.1.1-xGdWYSX5uTPI.8gTbXZa5d5jGI8zQFb.TsjpjtzD.SdMGvFXFNRDtsT_pY0V07aaWfGsbShO5dWtBdaPrGxb_w; path=/; expires=Thu, 01-May-25 15:37:58 GMT; domain=.goo.su; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bxI33LOqoNnP71orkY%2BBWyrbaw6KCzSs1Sbn2P%2BbtyEARgkOIL7AsQbyc5wMWjUCJzFEm0x775wgOW%2FckRFAkUz6IvXX8QgCtLJfWh2LCAtC5goOyUx74jc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 87d0db1c382c0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.pushdom.co/pb/st?sctp=content-locker\u0026m=ht\u0026pid=883146\u0026sid=330256\u0026dm=goo.su\u0026c1=https\u0026c2=1\u0026c3=https://rtb.pushdom.co/pb/st","fqdn":"rtb.pushdom.co","domain":"pushdom.co","tld":"co"},"ip":{"addr":"109.200.209.143","port":443,"asn":49544,"as":"i3D.net B.V","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.180Z","timestamp":1714577878180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.pushdom.co","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Apr 2024 18:28:04 GMT","end":"Sun, 30 Jun 2024 18:28:03 GMT"},"fingerprint":{"sha1":"12:C4:C5:EF:24:BE:28:31:C7:C1:45:E0:0F:F3:7E:9C:7F:5E:3E:30","sha256":"58:D3:B9:17:1E:96:0F:BD:17:43:F1:F8:A1:07:F7:58:A5:C0:D6:B1:99:15:8E:74:FF:63:2E:20:03:25:A1:6A"}}},"request":{"raw":"GET /pb/st?sctp=content-locker\u0026m=ht\u0026pid=883146\u0026sid=330256\u0026dm=goo.su\u0026c1=https\u0026c2=1\u0026c3=https://rtb.pushdom.co/pb/st HTTP/1.1\r\nHost: rtb.pushdom.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":335,"dns":140,"connect":85,"send":0,"wait":86,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/img/favicons/favicon-16x16.png","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.652Z","timestamp":1714577878652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goo.su","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 01 Apr 2024 06:02:27 GMT","end":"Sun, 30 Jun 2024 06:02:26 GMT"},"fingerprint":{"sha1":"DE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60","sha256":"3A:4F:E8:D4:0E:7F:4C:C0:50:93:BD:99:B7:84:CF:3A:7B:F1:CD:B7:FF:AD:2C:0C:CC:AC:36:8C:E8:F6:70:9B"}}},"request":{"raw":"GET /img/favicons/favicon-16x16.png HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/Cw4mR6O\r\nCookie: XSRF-TOKEN=eyJpdiI6ImdKeVRkNGIwM0dhRnZqdXVGUCticnc9PSIsInZhbHVlIjoiRHN2Rk9iR25ZeXdpTFdBbDdwaXU1RFVWd0VaMkljN2krWGM4WVBaUm9Qc1E2SnQwTU9hMmRlbGRVWmQ5TWRnbzkwSXVqcTZZeGtiNXR0UHVuVWliNDZUcDZvRUlzUXVLZSsrWG1HdThFQnFydTRQaVUzcmp5Q3VvTkoxcVExcDYiLCJtYWMiOiI4MjlkOTM1NDBlNzY1NGU1MzJlNDhhZjhjMzFjMDMwN2M1NjA4NjI2YmIyZDkxY2MyYzRkMzFkYzE3MTdiY2ZhIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6IkVSRkRPbzd1VEkrcVNLdVJzQUxUREE9PSIsInZhbHVlIjoiNnludjhHTitaTFkzSkYvUXBNd1RGQXVZL3FrWGVZbE4raGNQSVlGbldCbUdpSmRjb2JzNzhuWlVlSnFQeUxidVM3OXVDWE1qTnhiYllUc1lHY1h5NTVrc3dOVkkrZnk5UEh3T0VzbWZsM1NqZDlyTEcrR3VRLytxSm5aSWdTeVEiLCJtYWMiOiI2OTIwMDE3MDE0NzRlYzM5ZDk0NjQxZjU3N2VkZWI0MGU3YmQ4ZmQ5NGViNWFiMGZkOGY2MjZjNDIxZDZkMjQ1IiwidGFnIjoiIn0%3D; cf_clearance=DflsdVmiJqle.a7bywvXRXul59ZG4.uEsWlPhwiVj6w-1714577878-1.0.1.1-xGdWYSX5uTPI.8gTbXZa5d5jGI8zQFb.TsjpjtzD.SdMGvFXFNRDtsT_pY0V07aaWfGsbShO5dWtBdaPrGxb_w; adtech_uid=d6e9c416-d963-4df4-b329-660ddefb45a7%3Agoo.su; top100_id=t1.6673155.1061327371.1714577878501; t3_sid_6673155=s1.1395875033.1714577878503.1714577878503.1.1; last_visit=1714577878509%3A%3A1714577878509\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1567\r\nlast-modified: Sun, 24 Dec 2023 16:31:41 GMT\r\netag: \"65885ced-61f\"\r\nexpires: Tue, 07 May 2024 20:21:06 GMT\r\ncache-control: max-age=604800\r\ncf-cache-status: HIT\r\nage: 69412\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QeLJQhc33yMZSWUqjVkH1hJVHWF9xvLBR2f%2FQ5Opm%2ByG0vZVU6nX%2FjUM5coGuZLi0iIThED5JbOrV%2F8F1Wh8pTTeNYprqvOvIzMiqVnh0rP2lCwhp2Yq0Bw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 87d0db1d99460afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1567,"size_decoded":1567,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"2b201347b6d90e0ad2bbad3be209db73","sha1":"ae5de3e7f779cf33aefd5dc738f2126633bb7824","sha256":"df0a5932ec719656fd8f147bcc0c14312e53e52c2df13f5f815d72833de9c852","sha512":"577839e7493e86954bdf7e0fec853520b9cd1f714a9e560f9e9270a5ee118bd63907d8bdcc9f7f65bd11e01b2669908b78b550e6b77426d897431044523fc6b1","ssdeep":"","tlshash":"5831e7c9893cce18dc6b65ff21e202d978389ad311deaa3951df45197854eb0009d51d","first_seen":"2023-04-06T08:25:23Z","last_seen":"2026-04-06T07:44:36.770009Z","times_seen":935,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.190Z","timestamp":1714577878190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goo.su","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 01 Apr 2024 06:02:27 GMT","end":"Sun, 30 Jun 2024 06:02:26 GMT"},"fingerprint":{"sha1":"DE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60","sha256":"3A:4F:E8:D4:0E:7F:4C:C0:50:93:BD:99:B7:84:CF:3A:7B:F1:CD:B7:FF:AD:2C:0C:CC:AC:36:8C:E8:F6:70:9B"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImdKeVRkNGIwM0dhRnZqdXVGUCticnc9PSIsInZhbHVlIjoiRHN2Rk9iR25ZeXdpTFdBbDdwaXU1RFVWd0VaMkljN2krWGM4WVBaUm9Qc1E2SnQwTU9hMmRlbGRVWmQ5TWRnbzkwSXVqcTZZeGtiNXR0UHVuVWliNDZUcDZvRUlzUXVLZSsrWG1HdThFQnFydTRQaVUzcmp5Q3VvTkoxcVExcDYiLCJtYWMiOiI4MjlkOTM1NDBlNzY1NGU1MzJlNDhhZjhjMzFjMDMwN2M1NjA4NjI2YmIyZDkxY2MyYzRkMzFkYzE3MTdiY2ZhIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6IkVSRkRPbzd1VEkrcVNLdVJzQUxUREE9PSIsInZhbHVlIjoiNnludjhHTitaTFkzSkYvUXBNd1RGQXVZL3FrWGVZbE4raGNQSVlGbldCbUdpSmRjb2JzNzhuWlVlSnFQeUxidVM3OXVDWE1qTnhiYllUc1lHY1h5NTVrc3dOVkkrZnk5UEh3T0VzbWZsM1NqZDlyTEcrR3VRLytxSm5aSWdTeVEiLCJtYWMiOiI2OTIwMDE3MDE0NzRlYzM5ZDk0NjQxZjU3N2VkZWI0MGU3YmQ4ZmQ5NGViNWFiMGZkOGY2MjZjNDIxZDZkMjQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\ncache-control: max-age=14400, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XbW7clnX0jhk%2BD2aV8Tda5oxcvdCci7U7CxbB0znN1aYIm2VaPixYbfxOfGe3pJwBNF%2FdN3D7NWMaQbjAI0jWhPgfupxgWkx4cT5wNYhOFEg%2BM2Q3q74Ny8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 87d0db1abf060afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14709,"size_decoded":7845,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7845), with no line terminators","md5":"ab45ae31c708f8ba289b146be4c923e4","sha1":"82ea8d7e302148a29f008640a186953e11fdf004","sha256":"132cd20619b5c18089516d8a5f136e09f4d5d9666eae19df26ae7a78df9ae9b9","sha512":"356c224824060045eeb3ec8e7816aa65c8dde94d5152f276f52cc24a8daba195aa0e4e5e9d15601ba4573543cbf54480db9083e7be50ee88fdc319cc4e68d277","ssdeep":"192:bVGB5PLnjBD95dvZxarlM2ku+XmIelsZUxA:bVGfDnjBD95dhkou4mI0WN","tlshash":"b4f1e8da7b8675124272acb6008f7c93744daf9374189ca3e51084d8bf3738196eeec5","first_seen":"2024-08-20T01:27:27.711751Z","last_seen":"2024-08-20T01:27:27.711751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.top100.ru/top100/top100.js","fqdn":"st.top100.ru","domain":"top100.ru","tld":"ru"},"ip":{"addr":"81.19.89.18","port":443,"asn":24638,"as":"Rambler Internet Holding LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.123Z","timestamp":1714577878123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.top100.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 Feb 2024 08:25:42 GMT","end":"Mon, 17 Mar 2025 08:25:41 GMT"},"fingerprint":{"sha1":"67:1D:AC:E1:B4:A0:6A:53:F1:28:8C:9E:68:9F:77:67:A2:55:01:F3","sha256":"B2:11:27:B7:FB:B3:E7:58:D8:DE:FB:1C:66:31:B3:35:09:D3:B6:9B:07:FC:9D:8B:E3:23:7D:82:F0:E5:F2:69"}}},"request":{"raw":"GET /top100/top100.js HTTP/1.1\r\nHost: st.top100.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-obs-request-id: 0000018F34C611E4A80426EE81E6EEF9\r\netag: W/\"0e29947931decab2f885d8d5c6de8f32\"\r\nlast-modified: Fri, 26 Apr 2024 10:03:47 GMT\r\nx-obs-meta-s3cmd-attrs: atime:1714125662/ctime:1714125825/gid:0/gname:root/md5:0e29947931decab2f885d8d5c6de8f32/mode:33188/mtime:1714125662/uid:0/uname:root\r\nx-obs-tagging-count: 0\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSPjgBLVzMjtOCZx7y+3c0P/LjnTelhv\r\nexpires: Wed, 01 May 2024 16:37:58 GMT\r\ncache-control: max-age=3600\r\nset-cookie: proto_uid=1CIAANZhMmatvh2VAa2g0wB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/\r\np3p: CP=\"NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40165,"size_decoded":40165,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix","md5":"1b08c67a2f3662946cfb2f89105e7c5c","sha1":"32448cd92f058c147b9de58070e423148525b1e1","sha256":"8fb78a54b6117725011a331b116457e5051ce3c3e3b5567ff49c412f91c9d021","sha512":"16ee13674e237df7b02f1249cd6577e059f42822d280be335a2e5c7260ceb9294b24d0807d5b0891274c355e4ba909990ab959e38f0d982f911199a91fe65c91","ssdeep":"768:Yg1swE7nM+ntOS8X/t2IMmghBWiq/9bH2CENWKJOKxt6uWe1uuBt:L1sFwYA12IMThBWiqpW9vt6uMuL","tlshash":"8103f18ad153b398a76b4bd1866f9d94c1865d72052bf52bfde2d06dfc87cc012e808e","first_seen":"2024-08-20T01:27:27.712673Z","last_seen":"2024-08-20T01:27:27.712673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":174,"dns":21,"connect":40,"send":0,"wait":83,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viidey.click/gfhfghtrgfnfg.html","fqdn":"viidey.click","domain":"viidey.click","tld":"click"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-01T15:38:03.136Z","timestamp":1714577883136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viidey.click","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 May 2024 13:14:51 GMT","end":"Tue, 30 Jul 2024 13:14:50 GMT"},"fingerprint":{"sha1":"61:82:93:76:76:FA:7E:E0:0B:CD:58:1C:30:7D:FC:B2:D0:E8:58:AD","sha256":"2D:27:EE:38:17:6E:96:D9:43:49:F7:1E:CE:5C:DB:AD:01:84:CE:B1:7F:DB:BE:C4:E6:36:5C:66:D4:DF:5D:6E"}}},"request":{"raw":"GET /gfhfghtrgfnfg.html HTTP/1.1\r\nHost: viidey.click\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 01 May 2024 15:05:33 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"66325a3d-a42\"\r\nexpires: Wed, 01 May 2024 15:48:03 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 18B0:32B785:F1A8A1:F7F7AF:663261DA\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 01 May 2024 15:38:03 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1714577883.331733,VS0,VE123\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 528314b7c3875d5c971f3b282649dd2daf19808a\r\ncontent-length: 1159\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1159,"size_decoded":2626,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7c3f1c896d07a6062583f06a7e411f01","sha1":"808a4d86b548f46eff59aad3ebe4d5a38b8aefb5","sha256":"9650dbcd45d15bcad20baeef3f7f1da20e1f983812f6e6f4e5a17ef3d34cf3fc","sha512":"d99c9fc98b7c6c2c9561bc8c55fe795278b0add548a1c0c9da5773e4393e900ca5073d734e5a9af4c6dda2fcb8a5e67e8798dcb5869250bc12fadfed2eb2d1ba","ssdeep":"","tlshash":"cb51468e68d3011864932164bff5ab1851618057515edd683e4fd3e19f4c19988bb7ca","first_seen":"2024-08-20T01:27:27.713474Z","last_seen":"2024-08-20T01:27:27.713474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":173,"dns":1,"connect":26,"send":0,"wait":150,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.videy.co/bihmApzp.mp4","fqdn":"cdn.videy.co","domain":"videy.co","tld":"co"},"ip":{"addr":"104.21.235.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://viidey.click/gfhfghtrgfnfg.html","date":"2024-05-01T15:38:03.894Z","timestamp":1714577883894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.videy.co","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 01 Sep 2023 00:00:00 GMT","end":"Fri, 30 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"AA:09:42:65:EF:00:EB:69:FD:D6:8C:E9:49:CD:E1:9F:C9:7E:68:E1","sha256":"6F:2D:19:6A:5B:7C:0E:64:A0:59:C7:5C:EC:EB:A9:CC:87:F2:7C:95:42:6C:F2:94:E3:44:27:7C:7C:18:50:CC"}}},"request":{"raw":"GET /bihmApzp.mp4 HTTP/1.1\r\nHost: cdn.videy.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2129920-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viidey.click/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 01 May 2024 15:38:03 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 26532\r\netag: \"0461dd05812d1428d888eb6feae5c56a\"\r\nlast-modified: Sun, 28 Apr 2024 22:15:09 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 8\r\ncontent-range: bytes 2129920-2156451/2156452\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7XvrDY7W0TeDa1qH9rd6TQD%2FZdGu7M7S7eQvW6EEF1PoxBWwEKAUa6BdV6%2FrCisABXT4T9jD36G4MaimyXkIIxkFDA8MwM3EteVTKRVIXWtqy9Fe%2FB9jcq12JSBOFlc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 87d0db3e6e936421-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":26532,"size_decoded":26532,"mime_type":"video/mp4","magic":"data","md5":"c900c4df397792d557b55cf7de1723a2","sha1":"c8de878e7da05676945242735d19f245d09d179e","sha256":"4915294a211e55cb37d583dda7fee7686e916bbc4a427b7231162aba57bebf9e","sha512":"cd918bd0611e526764c5913e81c2e4bf0c5b8d1c31cc2dde4b655a723dc790bb83ddb00a0aab7a5e5588a9f74ab5be028cf555afef23a0dfc65f817acd5f8a70","ssdeep":"384:ZRTT++elymawLkYCYMlZopzJl5RXrj4nosSmAkeau9:ZB6MmrL6UVR/yopkeau9","tlshash":"4ec23a6b73eb2c0ee12327b294a1331ff636ec951ac6424a3587539b1c5219c5fc069e","first_seen":"2024-08-20T01:27:27.71412Z","last_seen":"2024-08-20T01:27:27.71412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viidey.click/favicon.ico","fqdn":"viidey.click","domain":"viidey.click","tld":"click"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viidey.click/gfhfghtrgfnfg.html","date":"2024-05-01T15:38:04.038Z","timestamp":1714577884038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viidey.click","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 May 2024 13:14:51 GMT","end":"Tue, 30 Jul 2024 13:14:50 GMT"},"fingerprint":{"sha1":"61:82:93:76:76:FA:7E:E0:0B:CD:58:1C:30:7D:FC:B2:D0:E8:58:AD","sha256":"2D:27:EE:38:17:6E:96:D9:43:49:F7:1E:CE:5C:DB:AD:01:84:CE:B1:7F:DB:BE:C4:E6:36:5C:66:D4:DF:5D:6E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: viidey.click\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viidey.click/gfhfghtrgfnfg.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1A64:36C0D4:F1A2D9:F7F5CC:663261DC\r\naccept-ranges: bytes\r\ndate: Wed, 01 May 2024 15:38:04 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1714577884.060351,VS0,VE156\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 178de8c6a62f0ad5320b053885e777f96f9481e4\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":5254,"size_decoded":9379,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-04-06T09:59:53.515092Z","times_seen":15029,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fviidey.click%2Fgfhfghtrgfnfg.html\u0026j=https%3A%2F%2Fgoo.su%2F","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"141.101.120.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viidey.click/gfhfghtrgfnfg.html","date":"2024-05-01T15:38:03.761Z","timestamp":1714577883761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 17 Mar 2024 14:35:30 GMT","end":"Sat, 15 Jun 2024 14:35:29 GMT"},"fingerprint":{"sha1":"69:9E:FB:2A:E2:0B:6B:60:8A:15:AF:4F:5A:3D:94:5B:68:70:F4:21","sha256":"8D:53:6A:43:44:85:4B:97:C5:56:20:83:23:F7:C0:87:D7:ED:91:C4:21:22:B3:7E:7A:E5:B7:62:C8:A6:E2:11"}}},"request":{"raw":"GET /i/?l=https%3A%2F%2Fviidey.click%2Fgfhfghtrgfnfg.html\u0026j=https%3A%2F%2Fgoo.su%2F HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viidey.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 01 May 2024 15:38:04 GMT\r\ncontent-type: application/javascript\r\nx-s: mtl1\r\nset-cookie: m=1; Domain=dtscout.com; Expires=Wed, 01-May-2024 17:01:23 GMT; Max-Age=5000; Path=/; SameSite=None; Secure\noa=1; Domain=dtscout.com; Expires=Wed, 01-May-2024 19:38:03 GMT; Max-Age=14400; Path=/; SameSite=None; Secure\ndf=1714577883; Domain=dtscout.com; Expires=Fri, 09-Aug-2024 15:38:03 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure\r\nx-t: 0.254\r\nexpires: Wed, 01 May 2024 15:38:02 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1Pteravo%2Fk6jJS%2F60mR3B%2BvLnu2P6hA6XbQFyVCTAlKz%2Ba6Wvv6MxlvHv5hDhtIw4U2c7f9FwxyB5xgPQcYSf4WNjKsN7MJX0oOCwMmdq%2F8kU1RIGoz%2BXYT8NoX5R8k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 87d0db3dde1a8d8c-HEL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9938,"size_decoded":2079,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2077)","md5":"51bd741af3fcc4984d1a753eebfa1141","sha1":"534664acf69cbbb5c9b97c96b63dd37bdc580da2","sha256":"3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c","sha512":"14958b02aed15cfa48facbdd8e8752ac7d1220631fb6af7658bcd5b804c0be52f9555a1d0ebe0bd68ee3a5f60164d97cbf020884d8757afaa3297d0768ab8886","ssdeep":"","tlshash":"8941951f71d8f02907a1042692bf3b2fb63259189c078890c2a6d85cfc785fa5272d66","first_seen":"2023-03-07T01:03:00Z","last_seen":"2025-11-28T22:34:42.368027Z","times_seen":7807,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":50,"dns":4,"connect":14,"send":0,"wait":249,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richinfo.co/richpartners/push/js/rp-cl-ob.js?pubid=883146\u0026siteid=330256\u0026niche=33","fqdn":"richinfo.co","domain":"richinfo.co","tld":"co"},"ip":{"addr":"109.200.199.111","port":443,"asn":49544,"as":"i3D.net B.V","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:57.893Z","timestamp":1714577877893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richinfo.co","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 13:05:17 GMT","end":"Sun, 23 Jun 2024 13:05:16 GMT"},"fingerprint":{"sha1":"25:29:37:EE:41:C6:34:D2:D5:4C:10:A7:3F:D7:C5:E4:2E:7D:3B:2D","sha256":"97:85:DB:17:7C:3B:8B:E0:10:2D:C4:B2:15:75:AB:21:5E:E8:81:7C:A5:84:73:F4:0F:A1:44:AF:DC:6A:66:48"}}},"request":{"raw":"GET /richpartners/push/js/rp-cl-ob.js?pubid=883146\u0026siteid=330256\u0026niche=33 HTTP/1.1\r\nHost: richinfo.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: application/x-javascript\r\nx-amz-id-2: o7IYAWzPbAyyrswvuYzNP+bGi6jsPgdkc19ZLzTOfog/gvCo9wRkmXRoN/cjoKF3BU5wW2CB4U0=\r\nx-amz-request-id: KC00K89KBCFTQ0XP\r\nlast-modified: Wed, 10 Apr 2024 13:16:50 GMT\r\netag: W/\"48e0c66e13f063ffe401a275add23665\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96639,"size_decoded":96639,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":134,"dns":28,"connect":45,"send":0,"wait":46,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/d.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.4.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viidey.click/gfhfghtrgfnfg.html","date":"2024-05-01T15:38:03.635Z","timestamp":1714577883635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 04 Jun 2023 00:00:00 GMT","end":"Mon, 03 Jun 2024 23:59:59 GMT"},"fingerprint":{"sha1":"A4:3D:6E:A9:C7:6B:CD:4B:7B:04:51:4F:D1:D7:10:2D:12:92:F9:58","sha256":"6D:AE:6A:81:9B:48:0E:DD:B3:FB:10:56:69:1D:65:6C:E3:7F:D1:9D:9A:D1:E3:3B:4A:2A:10:83:45:28:C2:A3"}}},"request":{"raw":"GET /d.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viidey.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 01 May 2024 15:38:03 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 12 Jan 2023 17:19:30 GMT\r\netag: W/\"63c04122-3972\"\r\nexpires: Thu, 02 May 2024 14:40:35 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3448\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XsF7BtLJ0U2mCFzf6%2Bpfqq9eUcy2QDngH%2FF59Q2R0qFfWjjWTFhD5mephO28M4cBv1yr5oTOrnQoVwltIcVzybZAtR1Q5upDWEka6g5gzfUdE1Rs6NOScOum\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 87d0db3cdbb8b523-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14706,"size_decoded":14706,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (14706), with no line terminators","md5":"38cdedd658fa41770f607c0b117c1f82","sha1":"3f3c9c6c330ab649e27ec56a8d852e9d41b0edf4","sha256":"951feaddb6ad45bcc58fee7033004366978150e8f2927692781c3e2755c7c15c","sha512":"e54460aaca1fd6d98f678733f38f9deb08d27f7dd7bd499c06e4d6624a9dac97f055be05e66523d7de7c8e3bec67cbcaac794c9b2582c16125d7e9848b99369a","ssdeep":"384:JVex0tBnpi6+KtHcDyfmKVhlcIGbO9+kS:JVgsl+ANfmKVhmVbOwkS","tlshash":"0b626c612d400051c7d714aa12afff0870797a796a82e47ba0adecb8376cfc7514fb66","first_seen":"2023-03-08T14:22:06Z","last_seen":"2025-04-10T09:23:55.529459Z","times_seen":1874,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":19,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=viidey.click\u0026_ss=6k9ozhjf1d\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=xu4r\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"141.101.120.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viidey.click/gfhfghtrgfnfg.html","date":"2024-05-01T15:38:04.090Z","timestamp":1714577884090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 17 Mar 2024 14:35:30 GMT","end":"Sat, 15 Jun 2024 14:35:29 GMT"},"fingerprint":{"sha1":"69:9E:FB:2A:E2:0B:6B:60:8A:15:AF:4F:5A:3D:94:5B:68:70:F4:21","sha256":"8D:53:6A:43:44:85:4B:97:C5:56:20:83:23:F7:C0:87:D7:ED:91:C4:21:22:B3:7E:7A:E5:B7:62:C8:A6:E2:11"}}},"request":{"raw":"GET /pv/?_a=v\u0026_h=viidey.click\u0026_ss=6k9ozhjf1d\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=xu4r\u0026_cb=_dtspv.c HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viidey.click/\r\nCookie: m=1; oa=1; df=1714577883\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 01 May 2024 15:38:04 GMT\r\ncontent-type: application/javascript\r\nx-t: 0.163\r\nx-c: 0\r\nexpires: Wed, 01 May 2024 15:38:03 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TD63f9RIOWiEoX2jmGG9fHI%2FFaiht0aVem5SoP9Vgj2SSBZ%2ByrSQFECiD5M7DHbu%2F6bPrZpXmS9ol1JX699mODr%2Fys2dkg3Gs50cbeVROQNzYxcT17PVBSunAQ3oLxY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 87d0db3f9f3c8d8c-HEL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51,"size_decoded":51,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"59eb026efdcf8225f2a5b35d0a4b68a7","sha1":"892a44feb107bc90b5a83303f8fbcbe6e081833a","sha256":"431e7b9a1cac013caa375bf216a70c78fbda278c27d822eeef0cebcb5a0915be","sha512":"e2a967d0779929ef95fd16bfa9f8d187f73da39a15c919c4d0875b80980b75c79c11417eb26f7034d3266abbee264befe540c23f1183b567b0fe72656695d7d6","ssdeep":"","tlshash":"7390021d71d5d030afc8d54010755b48a8711bd354c050518871444410057a0cd595a8","first_seen":"2024-08-20T01:27:27.716746Z","last_seen":"2024-08-20T01:27:27.716746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open%20Sans:400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:57.888Z","timestamp":1714577877888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 08 Apr 2024 07:32:03 GMT","end":"Mon, 01 Jul 2024 07:32:02 GMT"},"fingerprint":{"sha1":"5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50","sha256":"59:6C:CD:43:78:D1:79:E9:BB:C2:84:C1:06:79:8C:F3:64:F0:AE:45:42:2C:EB:68:CE:FF:F8:47:2F:B8:76:C1"}}},"request":{"raw":"GET /css?family=Open%20Sans:400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 01 May 2024 15:37:57 GMT\r\ndate: Wed, 01 May 2024 15:37:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5996,"size_decoded":5996,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6096), with no line terminators","md5":"7e18a097b51eb70d0d781735844b6897","sha1":"bee01b4d68b934b8a85650c2edd6e0b51fd961b8","sha256":"4eadd38b698cc5058bc6909316f68e23ad7784bcde595476b27b47a652ff83f0","sha512":"f1726e74c513f263fdcac429aeb7935c13c8ff65b1f6737ad2535e92ad66f7676916cd259eca3b60a9df81ce9cdc90ee66a10e6f33fad08b7d3978a8bd44e5f6","ssdeep":"96:JbHFZ919yhZcyJzV+zmnTubqGIFui9Vc+uqNF:JB19uyhbqGIwipf","tlshash":"2ac1ed814413541496471ee637dfba34ee0fab21606090326bfd8b9b9ecbda4737436d","first_seen":"2024-02-09T04:25:57Z","last_seen":"2024-10-15T23:57:52.143498Z","times_seen":827,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":59,"dns":0,"connect":8,"send":0,"wait":24,"receive":5,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:57.891Z","timestamp":1714577877891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 08 Apr 2024 07:32:03 GMT","end":"Mon, 01 Jul 2024 07:32:02 GMT"},"fingerprint":{"sha1":"5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50","sha256":"59:6C:CD:43:78:D1:79:E9:BB:C2:84:C1:06:79:8C:F3:64:F0:AE:45:42:2C:EB:68:CE:FF:F8:47:2F:B8:76:C1"}}},"request":{"raw":"GET /css?family=Roboto:400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 01 May 2024 15:37:57 GMT\r\ndate: Wed, 01 May 2024 15:37:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2316,"size_decoded":2316,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2379), with no line terminators","md5":"03278c047a3192f4a25c4644284d910b","sha1":"61fc733be8553b3e6d9847d43b4bef84b5ae947d","sha256":"d5e8a5e5b7bfea2764abadded25ab112a034543a2315c942bb9fd3cbe7ece8fb","sha512":"0fb96ba722f81f0c94d5ba85bfd09764c6cedf745c56ed96c529829cb85848562ae5ce0da60d6e6c90a4b30f008962b05db8e2c416044c25fc36eba391d4df0d","ssdeep":"","tlshash":"49416881541b6004eb430ed633cf7635b90f2b2560b282369bfd58ba9cdbd222364b5d","first_seen":"2024-02-09T16:06:58Z","last_seen":"2024-08-20T09:58:24.241454Z","times_seen":707,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":83,"dns":1,"connect":9,"send":0,"wait":19,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.top100.ru/top100/3.16.5/usability.js","fqdn":"st.top100.ru","domain":"top100.ru","tld":"ru"},"ip":{"addr":"81.19.89.18","port":443,"asn":24638,"as":"Rambler Internet Holding LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.534Z","timestamp":1714577878534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.top100.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 14 Feb 2024 08:25:42 GMT","end":"Mon, 17 Mar 2025 08:25:41 GMT"},"fingerprint":{"sha1":"67:1D:AC:E1:B4:A0:6A:53:F1:28:8C:9E:68:9F:77:67:A2:55:01:F3","sha256":"B2:11:27:B7:FB:B3:E7:58:D8:DE:FB:1C:66:31:B3:35:09:D3:B6:9B:07:FC:9D:8B:E3:23:7D:82:F0:E5:F2:69"}}},"request":{"raw":"GET /top100/3.16.5/usability.js HTTP/1.1\r\nHost: st.top100.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-obs-request-id: 0000018F34CD616DB027CE4DBC7F5802\r\netag: W/\"c01593ee181ba9c66dea9fda43185a3a\"\r\nlast-modified: Fri, 26 Apr 2024 10:03:47 GMT\r\nx-obs-meta-s3cmd-attrs: atime:1714125662/ctime:1714125825/gid:0/gname:root/md5:c01593ee181ba9c66dea9fda43185a3a/mode:33188/mtime:1714125662/uid:0/uname:root\r\nx-obs-tagging-count: 0\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSy2/febEV8/FU7IVjcqF66+4CwArrG/\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nset-cookie: proto_uid=1CIAANZhMmatvh2VAbug0wB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/\r\np3p: CP=\"NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14616,"size_decoded":14616,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14616), with no line terminators","md5":"c01593ee181ba9c66dea9fda43185a3a","sha1":"81ab1b96d42c79b86b3274d4ab9672c9949af26b","sha256":"999b77df76fb3335febe10f6926ef846882e1b9c669322ae3b3f6e314c6f022d","sha512":"b7a92e3ecaf4ac68d3963c0cea57df04a66e1f36ab9ac288405246d0b534f8e4e5cfbace8fb689d1afaf2e00edde82cf67e4a1c8d3d12a4f2889d8f954f45ae8","ssdeep":"384:yIJiaifIHW8ylZ//NNowiTTWPrQFs3758wsj:2zPyveZ7k","tlshash":"6262ce88b9b1f0664363b0f1411f100aa33f655ce4aca56cb189e4f56cf945e9627f7c","first_seen":"2024-04-29T17:26:25Z","last_seen":"2024-08-20T01:58:38.485255Z","times_seen":16,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/img/favicons/apple-touch-icon.png","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"172.67.139.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/Cw4mR6O","date":"2024-05-01T15:37:58.649Z","timestamp":1714577878649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goo.su","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 01 Apr 2024 06:02:27 GMT","end":"Sun, 30 Jun 2024 06:02:26 GMT"},"fingerprint":{"sha1":"DE:C6:4D:AF:DC:06:3A:ED:C6:AF:B6:FD:D7:3A:E7:C4:A6:AB:A2:60","sha256":"3A:4F:E8:D4:0E:7F:4C:C0:50:93:BD:99:B7:84:CF:3A:7B:F1:CD:B7:FF:AD:2C:0C:CC:AC:36:8C:E8:F6:70:9B"}}},"request":{"raw":"GET /img/favicons/apple-touch-icon.png HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/Cw4mR6O\r\nCookie: XSRF-TOKEN=eyJpdiI6ImdKeVRkNGIwM0dhRnZqdXVGUCticnc9PSIsInZhbHVlIjoiRHN2Rk9iR25ZeXdpTFdBbDdwaXU1RFVWd0VaMkljN2krWGM4WVBaUm9Qc1E2SnQwTU9hMmRlbGRVWmQ5TWRnbzkwSXVqcTZZeGtiNXR0UHVuVWliNDZUcDZvRUlzUXVLZSsrWG1HdThFQnFydTRQaVUzcmp5Q3VvTkoxcVExcDYiLCJtYWMiOiI4MjlkOTM1NDBlNzY1NGU1MzJlNDhhZjhjMzFjMDMwN2M1NjA4NjI2YmIyZDkxY2MyYzRkMzFkYzE3MTdiY2ZhIiwidGFnIjoiIn0%3D; goosu_session=eyJpdiI6IkVSRkRPbzd1VEkrcVNLdVJzQUxUREE9PSIsInZhbHVlIjoiNnludjhHTitaTFkzSkYvUXBNd1RGQXVZL3FrWGVZbE4raGNQSVlGbldCbUdpSmRjb2JzNzhuWlVlSnFQeUxidVM3OXVDWE1qTnhiYllUc1lHY1h5NTVrc3dOVkkrZnk5UEh3T0VzbWZsM1NqZDlyTEcrR3VRLytxSm5aSWdTeVEiLCJtYWMiOiI2OTIwMDE3MDE0NzRlYzM5ZDk0NjQxZjU3N2VkZWI0MGU3YmQ4ZmQ5NGViNWFiMGZkOGY2MjZjNDIxZDZkMjQ1IiwidGFnIjoiIn0%3D; cf_clearance=DflsdVmiJqle.a7bywvXRXul59ZG4.uEsWlPhwiVj6w-1714577878-1.0.1.1-xGdWYSX5uTPI.8gTbXZa5d5jGI8zQFb.TsjpjtzD.SdMGvFXFNRDtsT_pY0V07aaWfGsbShO5dWtBdaPrGxb_w; adtech_uid=d6e9c416-d963-4df4-b329-660ddefb45a7%3Agoo.su; top100_id=t1.6673155.1061327371.1714577878501; t3_sid_6673155=s1.1395875033.1714577878503.1714577878503.1.1; last_visit=1714577878509%3A%3A1714577878509\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 01 May 2024 15:37:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 10926\r\nlast-modified: Sun, 24 Dec 2023 16:31:41 GMT\r\netag: \"65885ced-2aae\"\r\nexpires: Tue, 07 May 2024 20:54:43 GMT\r\ncache-control: max-age=604800\r\ncf-cache-status: HIT\r\nage: 67395\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ULvV9zmHawQJs%2FKs%2FbJ%2FxfK5v%2FOtrmer%2B%2B5C0kCWCjJyy3Lgsjqx9nldwE6ssKgnc1iD820iZ2%2FS%2B5UT%2FesuuXkyVSf8QD7c3VzhuaODhmGxWgQWqc112yc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 87d0db1d99440afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10926,"size_decoded":10926,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"dc1648f034a8879145ce2db071bdc305","sha1":"28dfdc4f3f97f00e54528685427a83974cb04a81","sha256":"7c51dc3139a5a8a07e00884f6558ed62511359803bcb4123668b8e0ccab896c7","sha512":"48c659196c00e9464bd764d50c670ad0b5b663fec53b0506ad70413cd0c5521a792350510a53ef6bc24bcddcc6ca3606b7126533eb19baf7d3980c9605852d38","ssdeep":"192:W5V2ejIAELnyaW5IvcbdNTeUjWkou4G/ryGMKMMedq//JDKb+pwxnHESxqL9:WtfueIidNTeuWkj46FMMee/JDWxG","tlshash":"0032bfaf00f58ca4ea3681ae2c13414c54121f8744db2feb18d7d89856caf1479f123d","first_seen":"2023-04-06T08:25:23Z","last_seen":"2026-04-06T07:44:36.760898Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}