{"report_id":"b619d215-0498-4215-93e2-46acb75b430b","version":6,"status":"done","tags":[],"date":"2025-11-08T15:43:00Z","url":{"schema":"http","addr":"auth.yandex.cloud/oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https://datalens.ru/auth/callback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":0,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"title":"Yandex Cloud Auth","dom":{"size":52234,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15568)","md5":"256a138ec26f48b09f8ee0f4ab6fc62c","sha1":"78e6e2707f9c5151fd13d8dbad1a328b4fec7599","sha256":"5d23524d54ad566afcb1f7d8f2769770e27708d0cafb1eab6704a139a93a79c5","sha512":"b743ab28070028152b53930e70aa484beeae92e53f029768909c02e5a3cfc1eeea2cf447d2b7e2d123fd1f5a4a6834f4c64e94c797c4f6fc9ee274ec4f1bb210","ssdeep":"1536:ycr3kiwW4BM2sRlky4m08cgGZmLefoKZ6Qvv39dzBCUk8a+Jh:asRlky4m08cnoKZ6gF","tlshash":"df334c866610b12907a354b8e67f330ab37a51a75c0c8450f7aed9943ffbacb5213e4d","dom_hash":"domhash754e805db4e9f562435c107913ca88fc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"auth.yandex.cloud/oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https://datalens.ru/auth/callback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":0,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-13T15:43:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-08","alert":"Phishing - Generic/Spear Phishing","trigger":"storage.yandexcloud.net","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sso.passport.yandex.ru","ip":{"addr":"93.158.134.144","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":226615,"first_seen":"2019-03-24T22:28:42Z","last_seen":"2025-11-05T19:54:59.789899Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":952,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2025-11-03T04:07:58.478076Z","alert_count":0,"request_count":20,"received_data":1170797,"sent_data":9618,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"auth.cloud.yandex.ru","ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":2299311,"first_seen":"2020-09-29T06:20:05Z","last_seen":"2025-11-08T12:28:40.984185Z","alert_count":0,"request_count":1,"received_data":3800,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"auth.yandex.cloud","ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-04","domain_rank":2299610,"first_seen":"2024-02-16T13:35:04Z","last_seen":"2025-11-04T06:33:12.411852Z","alert_count":0,"request_count":4,"received_data":98331,"sent_data":4364,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"storage.yandexcloud.net","ip":{"addr":"213.180.193.243","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2018-08-03","domain_rank":0,"first_seen":"2019-02-25T14:07:50Z","last_seen":"2025-11-04T11:59:38.62134Z","alert_count":1,"request_count":1,"received_data":911,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"auth.cloud.yandex.com","ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":0,"first_seen":"2020-09-29T06:20:05Z","last_seen":"2025-11-04T06:33:12.405848Z","alert_count":0,"request_count":1,"received_data":3668,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/runtime.194ac533.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d79ebd24827141572a82cb17b9eb82a","sha1":"87e31dd2c4b25c26f2a3f440e5db5f17befa61b6","sha256":"79255fb9c2a83166c29294e941798e5ba1e51147c638a61239afd5793d06945d","sha512":"84be246f88c039b244356e398c230f2d587c09820fae22b05110f0454e7f6ef0d012d30143a871075c3f57fcfe99c4370c1b06c3eda02d9f7c8794ecf85d9e9a","ssdeep":"192:Xg29pTn0T52P8s+m/BSKNPxhSW23/3dW5r8aPd8RuRe:lHT0T5xs3phSW23I5rRawe","tlshash":"68e15c9a777cf8a26a7105806c6f81b9f604b4337a0cecc0a24bd87554b0ea24577ff2","size":6896,"data":"","first_seen":"2025-10-26T06:48:37.825419Z","last_seen":"2025-11-12T08:21:03.885408Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a993f07f8c88f368ac9d71f6f10c45a9","sha1":"64296ddbda667a55398f23cf222f9904f2f5ed41","sha256":"37981ab9ffe3ac4ebadd34ee36cf88a1efc4ba9ac7bb59b54a1de29375942ffe","sha512":"4d5cab96494deb153c9c98ed41deec3c6aaf36c47ddf7cf8013fe82010964f98dcee661c33d40d9775e70855e04bcc0e966167e16aeeb9231e6d9133b179216c","ssdeep":"","tlshash":"1ca01201040093500b100980a0177174f641605c05b44047d2002c1ef55234123c8070","size":76,"data":"","first_seen":"2024-12-13T08:04:33.892073Z","last_seen":"2025-12-07T09:16:48.921168Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5c8a764fc5b4192497e2a3cf31de594","sha1":"f28e543919c943489ba71958004129d4ab7b47cf","sha256":"bf1f37f49befbf010013cebe69619e279bb156e3b6725456e86562783b354ab1","sha512":"305708cb87ef5961e0527bd9ca5d6d6917418a2880ca4a444e0920cf96a268375dcbea046ccc5a46d9b301a069386797cdbdb9adbb09bb72afbcb488eed07d29","ssdeep":"","tlshash":"20900203450515b904e8418d465a6642b1653106425085a09184754aa74d562159e388","size":46,"data":"","first_seen":"2025-10-26T06:48:37.868862Z","last_seen":"2025-11-12T08:21:03.896116Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1a3ff0a7fe506f098ae27fc86bb6657","sha1":"56408ffed23cb62bf9522c95c78f5945f6fc0336","sha256":"5fe4b930c1b3690c92337c3f143ea5e1186d837ef09e1b6ad0a0815902e4167c","sha512":"e2380cbef4f88f44124f48aa6a2db03a69b01a365c300525390427c44398c630995e2a589d7b7f8944affa33488fdd091d2ec19b06d2204b2dbe409357d08b87","ssdeep":"","tlshash":"584188a68e4053751999b3b8fc83bf98493ccc37e814d312b6ca5c0c58d1be1191b757","size":2036,"data":"","first_seen":"2025-10-26T06:48:37.869562Z","last_seen":"2025-11-12T08:21:03.897021Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/8473.3f25a5d0.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2539a31bbc7bded4d0062de82a5275ba","sha1":"0f2200b32983d0495722f57fe1470a8540fcb254","sha256":"7863bb103ecac6ca972c4c57cdad5a50954d2acbdb91985ec9452cfb0b75d599","sha512":"966107c837c8a43e4eb661cec9c185186d3b2c9d868db8519481024bfc519d01ad26b9b3cf0defe93ccc2438d8ed878f40ecd803ca8e8343b92e0064520ab4ae","ssdeep":"6144:IJjoEsqBAbugjwPgchy5TCjW6HNHiAq2u6I+Cgq7l6NtBvwpvh1Prt5EyrAB9r5:CogR/bHgl8KvjPTCL","tlshash":"0ab45dc877c1b0a61be352f1003f150bf37e2925a85c5851f255ecda6cb984d92bbfa8","size":507211,"data":"","first_seen":"2025-10-26T06:48:37.833482Z","last_seen":"2025-12-07T09:16:48.872329Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6606950ca1eb9da2833a1c2537695d6d","sha1":"682470e98db94bb732239b0f80b85baf4141c2de","sha256":"bbca0edac97d8ae5aadfb9da2e48ce9e1fcabd6c3b01594eb1cdd3d11ab06314","sha512":"07ef63718080026bd53116e0e9a5a9367dc65b698cf54d2eb3d7cfaa357cf13b705b3f1bde480c1deee732a83f9f8ffbacc2525af76cf60eadf99dbfecd0eb26","ssdeep":"","tlshash":"64700080800028800030bc328203b280320a0080832a0c8880308a88aa0280b088aac0","size":24,"data":"","first_seen":"2025-10-26T06:48:37.870594Z","last_seen":"2026-06-03T23:00:53.986449Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/i18n.en.97cfc57f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c09a399bbc8d00b3525b88626ef4432","sha1":"ef5638aa1a250d35d7eda83bd9a1428c01ab612d","sha256":"c65ee1782b1b077c413aa96fadf5e75cae656745003ad486922346d9519b3d21","sha512":"08f97288b4225db386986f80387470b7d5279e1dc9adc07bcf14e663f5bd293fc8fd928dc5ae9801d1af12b42572f196fb3a489706be4e27c9ed35c0383d7532","ssdeep":"192:ci00wMZki8CkhN2t5PS5vp8W1ecGnxsIxJHQRxnGCwEkqBtkE8W6WD85:ci9wmhkemB8W1e9nxGXb8WW","tlshash":"cb32455e7f48799fab874d15e487b094e23b083800d32c2d42e0c66ed9ae651b7db772","size":11194,"data":"","first_seen":"2025-10-26T06:48:37.86Z","last_seen":"2025-11-12T08:21:03.886337Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/9978.6dfbe537.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff225f52748a99c601996ac8206a2363","sha1":"3cd6b215a4c5ab9711284e8ae5addf722eaa9498","sha256":"a2e162c2831d82dfc03e88aac1de7e805a1c1a2013a70729993f1fda514a0958","sha512":"72083873609c3ab20d3ab8e2da0f9562c267391bf6cdacd2de924a27efc6bcd9b4d7397cd30ccea03e661eb4587ed218fd4ab10ecc3d19fd23e16dc2de2eda6c","ssdeep":"1536:Aysy0ymyF4ywzF7PMYtL5nT0y5vN3MC/DMkz4YurXnqhXc6XkAPruuysvu1omMHr:1pBjFd4F4k/cAa2uv5U14L8+u","tlshash":"46932ad67282b074d7eb4166906b401eb33a2b55740e4424b13ddcdd38a5de8e3a3fba","size":95406,"data":"","first_seen":"2025-10-26T06:48:37.823595Z","last_seen":"2025-12-07T09:16:48.889279Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/login.7d680db1.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab34ec962f22931098fc9f1c26e15996","sha1":"c4f3ebcd3ecdf0deafed6d845029dee6647279a9","sha256":"a394a51566f648080f73273c88adcaafddd18c19905eebe99a9ac3e103e9de9b","sha512":"50f33a681241ab9de4db2cdb86259c35e8390846ae5fae47d631475b5c7197a7756b534b068c2baeaea41954c3a155a6b7bc895dd6a23347f7261bf754d8be6b","ssdeep":"384:QOWQrQdQQ1gQEituUF3Fie2dQdbaod/QVLq081gijgbCF:DWykdg4Weks1Q92F","tlshash":"79b2fb9e3983f8e89bdb9898403f940ca27f0958780d5514faecc9d42c598c99737b9b","size":23411,"data":"","first_seen":"2025-10-26T06:48:37.856397Z","last_seen":"2025-11-12T08:21:03.877658Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/2700.9c4df0c5.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"645bdfa51abba40237ecf7854d6d3fd6","sha1":"d96db16ffb7544009fc56be1e6d96239a6628840","sha256":"47f5a7c2b54fff20927652a7b02002af7eddc0e0c2850493652d996599753abe","sha512":"4995084f0cdf24e5eff699130b3911df1d1d61c669b90a203671a84fef9a6c6519c0cefcaf023e9f18d79e5a658ab8d6e8789cf34511bb0f94fde2753c94a989","ssdeep":"384:ZVQUAZYqp6VLwhPEPfgW+7JRW5Ong0BXlavvxetM2GhoBu2cuzqoBVOxSYKa:QYqp6VLwhc4RW5SXlavpetzu2ulxt","tlshash":"d9a229a5f0c2b1eb9bf794c4606f200fb27b296cd80d54b0f671c4d416ad598a623f9d","size":21505,"data":"","first_seen":"2025-10-26T06:48:37.85541Z","last_seen":"2025-12-07T09:16:48.874712Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/4379.4b0481a2.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a85991d0aae09fa5f117c3327d35ce07","sha1":"16761cfc6c5b01c2b9e35a3ffb4466aa5d2fd394","sha256":"8062a3c18a8932c612f9e2e924f8cdb46a6b13d28794af91d8366e08f12275a0","sha512":"0cf39eba8247f7f5ff29bf6bdc898f910c3f748ebc5585cd7ee09d963752d4f647bd2caa8fe0d26db182663e73818ae0e747300e68b359fbc40ea873f0811b5d","ssdeep":"3072:mu06uEd8vMJ/KHpVo8O4bwNt/6E84UeDzP+4AvP6ZI4t/vd:mu0C8vBTo8LbwNtCEJUeDbbAnWVtHd","tlshash":"d5e3a4ea9320d7dc18a7dc9cef379859271fa4a9fb6b529081afc634b4839c4e507d10","size":144241,"data":"","first_seen":"2025-10-26T06:48:37.852297Z","last_seen":"2025-11-12T08:21:03.880835Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dff6982e03a598e600921150b9ce1ebe","sha1":"8620872d1bde6d1cc03f5341b6b43b82a5a8356c","sha256":"eee81150d5f652c578756167b77b1f109d6909194a689b08f4a4253f18d465ab","sha512":"c5e139d218125af9de1442fd2ebad56229e34f05f4bdc83fbf705b4f11f18e21b2cd16fc7c6e22c5cf5099df7364f476f279a7b5fc4bd36a8568820a40f45aef","ssdeep":"","tlshash":"138000000c08002002b03008232b3b0032a32030030020802b8c28af38a2083af802c0","size":28,"data":"","first_seen":"2024-02-16T15:05:44Z","last_seen":"2026-06-04T00:25:56.875164Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca010008b0021a3205b9a12f2e4cce94","sha1":"4d89805cc32cf9f846fcafea5f6be9ce312c81fa","sha256":"c302e86467c0942eff7d306b69af4378b727651b4550c6aa98a653fa4d02c107","sha512":"e3becd6b273394540d77f804ff2e149aef81eab5a8c5ada63009f35e37eddfcb73b9e26ece991ff61a14a5ed2358db11c3d99355d70e4ff1e42ed1456d824e41","ssdeep":"384:OAH+qVe3UqNiDkjLoB1Zi2/TI7+dBxmcWOg10Dw3X658DFQ+2jfqbM/1tEgO7HPy:OHLoPZ3M7+dBxzWOK0sODtWfX3C","tlshash":"92d2098ab750703a42e76039a2bf230aa37617922c0d4450776ad1d53e7d99f0763f9e","size":29325,"data":"","first_seen":"2025-11-08T15:43:03.182154Z","last_seen":"2025-11-08T15:43:03.182154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6aa6a73bd6671e8c9c20f5101f4c3625","sha1":"3961a405bdd18361a7567d5ea6dab9a88fc4a0b2","sha256":"a995f6d6de3fd5762b9359357fef483b737926ab913019d09aee4755b072040b","sha512":"30121d45149763a3b9f4611181486eca23c48b5fcd5dd8010450e245b46d180959e79438cadca03c4cb135eacdb618f75e90214032641d3ed2e87e4310d41b94","ssdeep":"","tlshash":"8ed08c2b307750714a1fe8af46739b9830b0312b2004fa283cac44400f39f447de29d0","size":195,"data":"","first_seen":"2024-02-16T15:05:45Z","last_seen":"2026-06-04T00:25:56.884389Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/9744.d073da14.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae3c64e275833bf752cf173987d4531","sha1":"2e98ec1e2177e61d30b5b985f3e77da18f79fce6","sha256":"7d782de02f2f070cb4f056eb6b4253bd3400a22ac41038beea0edeb07e5d6430","sha512":"dd4962446d23613ab52c419e58e10e6579e75ab8fb7a932933c2edbf54ab168ebd8d6e4d4c9aa8ba00101808b68cd2c79316ab93723d5a8c71511be9e278d6cd","ssdeep":"384:pQWRQ6QJSQDlpwBpwCeQNJzjAvGcWSA6B:pTv/KbwBpwjQNJgVWSN","tlshash":"bc82faf8b185b99ca65b24a9422f614d717f2624fa0d0530fcbfe9c814672c8f2137a9","size":17867,"data":"","first_seen":"2025-10-26T06:48:37.866556Z","last_seen":"2025-12-07T09:16:48.887122Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca2b40613bd96feb5f58350d69247afe","sha1":"cef007358d01b52435fda0002f164399b9d5ca8e","sha256":"01b07b4628485e5ae78e9569e0f34c12197db92bab46709cb955eacbb68906d8","sha512":"e7bb33876fd8a1bc168f8d97eee29e9d984cf499bbcf48255753f3a684ca348ae064e82c1d816ef88b25efdee05090da3397211eda3de754fa5c2d13a86b6306","ssdeep":"","tlshash":"01418e141a9750304077d22d5f8fa706263a00076c0ebd38ba8d85952f9eb3f59b2adc","size":2121,"data":"","first_seen":"2025-10-26T06:48:37.873564Z","last_seen":"2026-06-03T23:00:53.989345Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/6466.94a1a5bb.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e20d7fb1eaad1ed7df02eebe0d854e9","sha1":"16ecc896003227ecf2f9f82abe4bc4afc85cd62a","sha256":"4bdd52c6cd4c305fcb4d1e97b90569f5c5ed45f8b9fb93d74510aa87d53d06ca","sha512":"bf4bc8227436c3c22ed89a4c57e05bd92cdefcfadd87319cb2138569c00833a6ab096dd5895468022f9364eb49e6fd780d36529faf713ee3cbd95f7a61103b0d","ssdeep":"384:CFZ/32WLW/r9pcPkIFaHWPptSxJpVGPN/qaL2eU:CFZ/32WLW/xOknHWP+HpVGPN/qaLO","tlshash":"87a2e79eb156b5d83ac3807f116f008921bba44cfc1f006c77abd5e5aa656887353fb8","size":21369,"data":"","first_seen":"2025-10-26T06:48:37.818891Z","last_seen":"2025-12-07T09:16:48.884532Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-regular.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:38.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-regular.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yastatic.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41400\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-nginx-request-id: f42a6922f109e850\r\ncache-control: public, max-age=31556952\r\nlast-modified: Fri, 23 Sep 2022 09:05:41 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"1a3a8242666bc247a05759e43a0555e9\"\r\nexpires: Wed, 04 Nov 2026 00:05:58 GMT\r\nx-strm-log-split: 9\r\nx-request-id: 4bef9fcc749f0015\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41400, version 1.0","md5":"1a3a8242666bc247a05759e43a0555e9","sha1":"06b7d3bbf073fede6686ea3e48c5dc459ea1488f","sha256":"4512e1cb847e66924e999c9b1f6b549d6506a11491c2083f15d9c68125afbbfd","sha512":"f35bb23770318da7ce6b015f03e348df234564487f13ff96b6cb6ebb6a441f874956abef01239ff872a070259f1fe7fa9cc219f75cb44e0924f4d43786218b14","ssdeep":"768:z7Wsh9oR5eUnv3ql6rmjvdYVY5jFFF3vk5d2HGu/UyrPfdRhcFCtbLp8U:FO/eUilQCvdY65BFFc5d0GC7JT4CtB8U","tlshash":"9903f121aa8bb3ed941e9a7e88e8be4ed5890bc4d3a08f5f994f156505b62c70c3111f","first_seen":"2024-02-16T15:05:45Z","last_seen":"2026-06-04T00:25:56.865144Z","times_seen":191,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.cloud.yandex.ru/push/yc_device?nonce=05f908b4-cf12-42d0-839d-13b49003acff\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256","fqdn":"auth.cloud.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T15:42:36.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth.cloud.yandex.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Sep 2025 10:34:42 GMT","end":"Sun, 08 Mar 2026 20:59:59 GMT"},"fingerprint":{"sha1":"85:67:78:91:B0:24:79:5D:86:C9:19:88:C1:3D:DB:87:F3:CA:D9:2A","sha256":"59:B5:9B:F7:45:AC:2E:85:12:3C:C2:0B:3A:EA:94:B9:9D:5C:70:0E:C0:90:9F:8F:C9:A9:4B:87:0B:3F:CC:EB"}}},"request":{"raw":"GET /push/yc_device?nonce=05f908b4-cf12-42d0-839d-13b49003acff\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256 HTTP/1.1\r\nHost: auth.cloud.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gdpr=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 08 Nov 2025 15:42:36 GMT\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nlocation: https://auth.cloud.yandex.com/push/yc_device?nonce=05f908b4-cf12-42d0-839d-13b49003acff\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncontent-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; block-all-mixed-content;\r\ncontent-length: 0\r\nx-server-trace-id: f9809d376362069a:ebe3e07bd6f48d9b:e0d65737fb1df16f:1\r\nset-cookie: _yasc=sdodXIRTaWdMbtUpy/q9dVpfEOG116dyfk30eAWGE6BplrDX28Gi0sYU/6jHn4Y=; domain=.auth.cloud.yandex.ru; path=/; expires=Tue, 06 Nov 2035 15:42:36 GMT; secure\r\nserver: ycalb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2463,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":131,"dns":13,"connect":29,"send":0,"wait":41,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https%3A%2F%2Fdatalens.ru%2Fauth%2Fcallback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256\u0026yc_device=none","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T15:42:36.550Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https%3A%2F%2Fdatalens.ru%2Fauth%2Fcallback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256\u0026yc_device=none HTTP/1.1\r\nHost: auth.yandex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nonce=05f908b4-cf12-42d0-839d-13b49003acff; _yasc=CsJU4ZLb08sxy1ZQw4WiaLN6dZJa2bpM1Dku9YRoJA+Jelt6eOAr7WsAdQ4thw==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 08 Nov 2025 15:42:36 GMT\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncontent-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; block-all-mixed-content;\r\nlocation: https://sso.passport.yandex.ru/push?retpath=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26yc_device%3Dnone%26utm_referrer%3Dabout%253Ablank\u0026uuid=2537e4c0-2509-468a-80ca-b2c4251d42c2\r\ncontent-length: 0\r\nx-server-trace-id: 6d6c0d77368146e4:6385e0a64e08919b:5b10bb57629c64fa:1\r\nserver: ycalb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/runtime.194ac533.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/runtime.194ac533.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3099\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ntiming-allow-origin: *\r\netag: \"4c841e8a141b2b523074d118600876f8\"\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nexpires: Sun, 08 Nov 2026 15:42:38 GMT\r\ncache-control: immutable, max-age=31536000\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Oct 2025 09:07:32 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 2\r\nx-request-id: 17564f2867c8fcb8\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6896,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6896), with no line terminators","md5":"7d79ebd24827141572a82cb17b9eb82a","sha1":"87e31dd2c4b25c26f2a3f440e5db5f17befa61b6","sha256":"79255fb9c2a83166c29294e941798e5ba1e51147c638a61239afd5793d06945d","sha512":"84be246f88c039b244356e398c230f2d587c09820fae22b05110f0454e7f6ef0d012d30143a871075c3f57fcfe99c4370c1b06c3eda02d9f7c8794ecf85d9e9a","ssdeep":"192:Xg29pTn0T52P8s+m/BSKNPxhSW23/3dW5r8aPd8RuRe:lHT0T5xs3phSW23I5rRawe","tlshash":"68e15c9a777cf8a26a7105806c6f81b9f604b4337a0cecc0a24bd87554b0ea24577ff2","first_seen":"2025-10-26T06:48:37.825419Z","last_seen":"2025-11-12T08:21:03.885408Z","times_seen":20,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":106,"dns":0,"connect":13,"send":0,"wait":60,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/assets/datalens@1x.7cbc6555.webp","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:38.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/assets/datalens@1x.7cbc6555.webp HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20538\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Mon, 21 Jul 2025 09:30:42 GMT\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\naccess-control-allow-origin: *\r\ncache-control: immutable, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ntiming-allow-origin: *\r\netag: \"429cc11a943747531a64462f84fa7d24\"\r\nvary: Accept-Encoding\r\nx-strm-log-split: 0\r\nx-request-id: 974b05424c6615ab\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"429cc11a943747531a64462f84fa7d24","sha1":"3488f1195109bdbb8bf925de50190707819bfba2","sha256":"20c86727d0e5eecaeb14fc5410f3ce97e33690ece8648fc7b122e09426ed09e2","sha512":"d3e77c40ffa6ac93c3a9f10982837ca166b4c989c6d15af630f841a27d9d1f81b46ca27279d0d0a4293dc2964ee6977640f797824c1f79da262d86a3e496eb2e","ssdeep":"384:tclpvwNe7F7uCohc0J51Mh/d2vaP0rdDlLL609d8:Clpvv7F7ubL16waPaXLL60d8","tlshash":"3e92e1960a6d23e0f3ab9bfa120299fb1a0d70e37e518c4b5fcc4554b86835f0e2d5d8","first_seen":"2025-10-26T06:48:37.863549Z","last_seen":"2026-06-03T23:00:53.968082Z","times_seen":37,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/8473.3f25a5d0.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/8473.3f25a5d0.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 122695\r\nexpires: Sun, 08 Nov 2026 12:07:05 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\netag: \"087c56e922f56b5f07ab798b4057004c\"\r\nlast-modified: Mon, 06 Oct 2025 10:36:21 GMT\r\ncontent-encoding: br\r\ncache-control: immutable, max-age=31536000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 1\r\nx-request-id: e4fbf11e531faaa2\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":507211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2539a31bbc7bded4d0062de82a5275ba","sha1":"0f2200b32983d0495722f57fe1470a8540fcb254","sha256":"7863bb103ecac6ca972c4c57cdad5a50954d2acbdb91985ec9452cfb0b75d599","sha512":"966107c837c8a43e4eb661cec9c185186d3b2c9d868db8519481024bfc519d01ad26b9b3cf0defe93ccc2438d8ed878f40ecd803ca8e8343b92e0064520ab4ae","ssdeep":"6144:IJjoEsqBAbugjwPgchy5TCjW6HNHiAq2u6I+Cgq7l6NtBvwpvh1Prt5EyrAB9r5:CogR/bHgl8KvjPTCL","tlshash":"0ab45dc877c1b0a61be352f1003f150bf37e2925a85c5851f255ecda6cb984d92bbfa8","first_seen":"2025-10-26T06:48:37.833482Z","last_seen":"2025-12-07T09:16:48.872329Z","times_seen":35,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":127,"dns":1,"connect":30,"send":0,"wait":73,"receive":16,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/9744.d073da14.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/9744.d073da14.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5456\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Sun, 08 Nov 2026 12:07:05 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"83f03bce186d8fd3878c9e5586a5c638\"\r\nlast-modified: Mon, 21 Jul 2025 09:30:42 GMT\r\ncache-control: immutable, max-age=31536000\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nx-strm-log-split: 7\r\nx-request-id: fbcd27765da02835\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17867,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17759), with no line terminators","md5":"fae3c64e275833bf752cf173987d4531","sha1":"2e98ec1e2177e61d30b5b985f3e77da18f79fce6","sha256":"7d782de02f2f070cb4f056eb6b4253bd3400a22ac41038beea0edeb07e5d6430","sha512":"dd4962446d23613ab52c419e58e10e6579e75ab8fb7a932933c2edbf54ab168ebd8d6e4d4c9aa8ba00101808b68cd2c79316ab93723d5a8c71511be9e278d6cd","ssdeep":"384:pQWRQ6QJSQDlpwBpwCeQNJzjAvGcWSA6B:pTv/KbwBpwjQNJgVWSN","tlshash":"bc82faf8b185b99ca65b24a9422f614d717f2624fa0d0530fcbfe9c814672c8f2137a9","first_seen":"2025-10-26T06:48:37.866556Z","last_seen":"2025-12-07T09:16:48.887122Z","times_seen":35,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":103,"dns":0,"connect":31,"send":0,"wait":56,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.yandexcloud.net/cloud-www-assets/region-assets/ru/favicon/favicon-32x32.png","fqdn":"storage.yandexcloud.net","domain":"storage.yandexcloud.net","tld":""},"ip":{"addr":"213.180.193.243","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:38.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.storage-1.yandexcloud.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 18 Jul 2025 09:28:05 GMT","end":"Thu, 15 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"21:39:12:6A:C3:E5:BB:47:05:2F:36:33:D9:EF:B7:8C:32:C9:27:86","sha256":"8B:DF:CE:7D:02:10:73:C6:DD:55:C4:63:F1:2C:5A:11:F8:55:D2:BF:69:6A:2E:A4:AD:D5:47:1F:06:7D:4F:85"}}},"request":{"raw":"GET /cloud-www-assets/region-assets/ru/favicon/favicon-32x32.png HTTP/1.1\r\nHost: storage.yandexcloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 553\r\naccept-ranges: bytes\r\netag: \"4fc870efb0afb256969f6543136e6c03\"\r\nlast-modified: Mon, 16 May 2022 12:43:06 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-request-id: 8c68a01e02c7f9a6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"4fc870efb0afb256969f6543136e6c03","sha1":"cd9c4eb2ba4b15af07873fbf1721c05f88c22701","sha256":"82eb95e10aa5238ebd919a4aa3efb8a80dd621fc370fe6cbb24bc0d13d9d9732","sha512":"a082ef5bd6058cf77355b184dddd9d57afa5dff726bcdf264da5119c89a35798fd0193777fcc8b62eeb8b429d623395db6603c619c8f8a728f343e571e79ca82","ssdeep":"","tlshash":"06f0206e68900a6fa60e9793251f1c24bcd751ccb1a6b21ce22e45162ae71238984b22","first_seen":"2024-10-17T12:14:54.884749Z","last_seen":"2025-12-07T09:16:48.888412Z","times_seen":37,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":26,"connect":46,"send":0,"wait":57,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-08","alert":"Phishing - Generic/Spear Phishing","trigger":"storage.yandexcloud.net","verdict":"phishing","severity":"medium","comment":"Generic/Spear Phishing","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/css/5278.27bd276b.css","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/css/5278.27bd276b.css HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2352\r\ntiming-allow-origin: *\r\netag: \"4cb45d6f695b887fc4032d59e61eff9c\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: immutable, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\naccess-control-allow-origin: *\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Thu, 31 Jul 2025 13:39:14 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nx-strm-log-split: 4\r\nx-request-id: d50d9c7ad3dd9a5d\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10288)","md5":"453be328d0bae81c45306002d17e76e5","sha1":"2a2714248c7a176868edd831562d0df6feaf9d61","sha256":"6d1b3e9bcc47c8ee6c3e41183f6f11e1b18311ab4a812a7d4a0d8d89cc29eea5","sha512":"c80179a1414f8d162a8ad3093c16a7f287c48d5520829594aaac957781eb31a7648817d0b2db56bd1a9bc83840b65d35bdd6395a4298d76be50bea41092d9823","ssdeep":"192:0JqvCaq2ydS6W4DSlD9Iko+PstUSKKgl+asd5rm51koj4aFuTYngro4qaBiseImk:TmlqS8NYn","tlshash":"438210e2feb5916a6923dd35638df9b484402641ef13c7e5f181101068c6ab2ebe7f2d","first_seen":"2025-10-26T06:48:37.857253Z","last_seen":"2025-12-07T09:16:48.883954Z","times_seen":35,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":1,"connect":32,"send":0,"wait":53,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/css/1629.34eccfef.css","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/css/1629.34eccfef.css HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 304\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: immutable, max-age=31536000\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\netag: \"0df0b2612b76af656b968c6c91b87f93\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: Thu, 31 Jul 2025 13:39:14 GMT\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\nx-strm-log-split: 8\r\nx-request-id: 3cc06a93e3cbd1e6\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1209,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1209), with no line terminators","md5":"b649c2f7ce7b2a65f432bb9094d6ed25","sha1":"a39aca733ed36e1657a639f838b8ad144dc5841d","sha256":"9a56a7fc235276c5a6dfd0c8433a897fb2865ec42c82167c7f7215667704d92d","sha512":"172750c62ab7acf23ee15cb7b138a3cbc4ae59e5ec2b17ac6dd13cd5015b9acb42e3b72eb2b9e6c20eab2307f3e26ba21df91f28a81e2cf77d7729c1fb137858","ssdeep":"","tlshash":"ac21e794ad6454291452cf34dfc4edf4064cc642a711cbeef346108a4ac9b8967bffa9","first_seen":"2025-10-26T06:48:37.858346Z","last_seen":"2025-12-07T09:16:48.885517Z","times_seen":35,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":35,"send":0,"wait":56,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-medium.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:38.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-medium.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yastatic.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49400\r\nx-nginx-request-id: 6d40961c7f1841d9\r\nexpires: Sun, 08 Nov 2026 20:43:46 GMT\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31556952\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Fri, 23 Sep 2022 09:05:40 GMT\r\netag: \"b9cbf8a5e84f0f710c514d5f8b603b91\"\r\nx-strm-log-split: 7\r\nx-request-id: ff42c5e3f3e949a6\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49400, version 1.0","md5":"b9cbf8a5e84f0f710c514d5f8b603b91","sha1":"3d841699ff6f4128a918bc4d041a4bbf62557b8d","sha256":"75864616551848309e49d1e414b7c3435e5b856482a7688e24e7082eafe5534b","sha512":"d7eb06ff91ceaad343503a77b47a6e8309ecc4a2284273128a2a4d65d59ef2f1e1e130ba73ee14ed351b1a7f6332b82b47a3f285598245f0dff84c88d2284b9a","ssdeep":"768:yivxI49ay+x9qZGiCuQgFbfVfBV/TliKmzUFEVo0sFvyyHstpm6WP0yqDA5vuE1y:f/9DTGiNlZTliKhFEVoayMjm6pD","tlshash":"8c2302bb0c83b50e3182c3b1858f97b387407fa016acd5da474f9e1aa0957a2b55be19","first_seen":"2024-02-16T15:05:45Z","last_seen":"2026-06-04T00:25:56.792555Z","times_seen":180,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/i18n.en.97cfc57f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/i18n.en.97cfc57f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2625\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Mon, 06 Oct 2025 10:36:20 GMT\r\nexpires: Sun, 08 Nov 2026 15:42:38 GMT\r\netag: \"47c7b561c887af7085a1c8171a9c9567\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: immutable, max-age=31536000\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nx-strm-log-split: 0\r\nx-request-id: 52b06763c11e8a3f\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11198,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11171), with no line terminators","md5":"7c09a399bbc8d00b3525b88626ef4432","sha1":"ef5638aa1a250d35d7eda83bd9a1428c01ab612d","sha256":"c65ee1782b1b077c413aa96fadf5e75cae656745003ad486922346d9519b3d21","sha512":"08f97288b4225db386986f80387470b7d5279e1dc9adc07bcf14e663f5bd293fc8fd928dc5ae9801d1af12b42572f196fb3a489706be4e27c9ed35c0383d7532","ssdeep":"192:ci00wMZki8CkhN2t5PS5vp8W1ecGnxsIxJHQRxnGCwEkqBtkE8W6WD85:ci9wmhkemB8W1e9nxGXb8WW","tlshash":"cb32455e7f48799fab874d15e487b094e23b083800d32c2d42e0c66ed9ae651b7db772","first_seen":"2025-10-26T06:48:37.86Z","last_seen":"2025-11-12T08:21:03.886337Z","times_seen":20,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":113,"dns":0,"connect":15,"send":0,"wait":135,"receive":1,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/2700.9c4df0c5.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/2700.9c4df0c5.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7318\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlast-modified: Mon, 06 Oct 2025 10:36:20 GMT\r\nexpires: Sun, 08 Nov 2026 15:42:38 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"519410444da042d115438a800965312d\"\r\ncache-control: immutable, max-age=31536000\r\nx-strm-log-split: 2\r\nx-request-id: 5d96a0a63c03709f\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21505,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21497), with no line terminators","md5":"645bdfa51abba40237ecf7854d6d3fd6","sha1":"d96db16ffb7544009fc56be1e6d96239a6628840","sha256":"47f5a7c2b54fff20927652a7b02002af7eddc0e0c2850493652d996599753abe","sha512":"4995084f0cdf24e5eff699130b3911df1d1d61c669b90a203671a84fef9a6c6519c0cefcaf023e9f18d79e5a658ab8d6e8789cf34511bb0f94fde2753c94a989","ssdeep":"384:ZVQUAZYqp6VLwhPEPfgW+7JRW5Ong0BXlavvxetM2GhoBu2cuzqoBVOxSYKa:QYqp6VLwhc4RW5SXlavpetzu2ulxt","tlshash":"d9a229a5f0c2b1eb9bf794c4606f200fb27b296cd80d54b0f671c4d416ad598a623f9d","first_seen":"2025-10-26T06:48:37.85541Z","last_seen":"2025-12-07T09:16:48.874712Z","times_seen":35,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":91,"dns":0,"connect":35,"send":0,"wait":61,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/css/8166.83a205e9.css","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/css/8166.83a205e9.css HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1964\r\ncache-control: immutable, max-age=31536000\r\nvary: Accept-Encoding\r\netag: \"f955aa2551a35c4e70ef6f16545c6778\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nlast-modified: Mon, 06 Oct 2025 10:36:18 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ntiming-allow-origin: *\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 5\r\nx-request-id: f9cc640f0cc59742\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11660,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11660), with no line terminators","md5":"2ba944b7984e0fbb8b18b60ed964e1a3","sha1":"4ac228443723ffc203e8629939b5b813f915ce9d","sha256":"2405918e082013f37503098a9f57eae935e9fb6277b3ad7d52607606e07302a1","sha512":"08a4d5820b4ce20684df5994b5f6107e007bdd610db87aba1fa520f4c956de64f96cd4f1e4cb5328a7be4a01a52c5ff89b67dc5cc2fcaf409d5bc856628e3a2c","ssdeep":"192:jEpHl0tMsqXbx/qP7BBzA1n94+qAh+Fs2kF51wOpGHGLWjxFCwu:6rke94+qAh+F2wOpGAv","tlshash":"9c3220c07de4626d7c17f2a6d788ba6cc920ac8099729bddf609025504c3bf25bb772d","first_seen":"2025-10-26T06:48:37.849195Z","last_seen":"2025-12-07T09:16:48.910356Z","times_seen":35,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":61,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/login.7d680db1.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/login.7d680db1.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6508\r\nlast-modified: Tue, 14 Oct 2025 10:19:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\ncache-control: immutable, max-age=31536000\r\netag: \"848680e75e888bb36e26b1eff62b5798\"\r\nexpires: Sun, 08 Nov 2026 15:42:38 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nx-strm-log-split: 4\r\nx-request-id: 1f6bc8ab19fcacde\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23411,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23411), with no line terminators","md5":"ab34ec962f22931098fc9f1c26e15996","sha1":"c4f3ebcd3ecdf0deafed6d845029dee6647279a9","sha256":"a394a51566f648080f73273c88adcaafddd18c19905eebe99a9ac3e103e9de9b","sha512":"50f33a681241ab9de4db2cdb86259c35e8390846ae5fae47d631475b5c7197a7756b534b068c2baeaea41954c3a155a6b7bc895dd6a23347f7261bf754d8be6b","ssdeep":"384:QOWQrQdQQ1gQEituUF3Fie2dQdbaod/QVLq081gijgbCF:DWykdg4Weks1Q92F","tlshash":"79b2fb9e3983f8e89bdb9898403f940ca27f0958780d5514faecc9d42c598c99737b9b","first_seen":"2025-10-26T06:48:37.856397Z","last_seen":"2025-11-12T08:21:03.877658Z","times_seen":20,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/assets/images/datalens@1x.e4381e0f.jpg","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:38.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/assets/images/datalens@1x.e4381e0f.jpg HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https://datalens.ru/auth/callback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T15:42:36.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth.yandex.cloud","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Sep 2025 10:22:24 GMT","end":"Sun, 08 Mar 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D7:A4:53:29:42:4B:67:27:E2:15:F2:27:96:28:AD:C8:49:BD:FF:25","sha256":"A5:23:CC:CF:70:E9:39:72:C0:58:C4:57:90:95:20:29:34:EF:87:44:2D:86:59:A9:64:6C:18:08:8B:85:B8:D8"}}},"request":{"raw":"GET /oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https://datalens.ru/auth/callback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256 HTTP/1.1\r\nHost: auth.yandex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 08 Nov 2025 15:42:36 GMT\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncontent-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; block-all-mixed-content;\r\nlocation: https://auth.cloud.yandex.ru/push/yc_device?nonce=05f908b4-cf12-42d0-839d-13b49003acff\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256\r\ncontent-length: 0\r\nx-server-trace-id: 04adc76fec5492fe:7468102d8a75da04:3483cc05ebd3d9e0:1\r\nset-cookie: nonce=05f908b4-cf12-42d0-839d-13b49003acff; SameSite=Lax\n_yasc=CsJU4ZLb08sxy1ZQw4WiaLN6dZJa2bpM1Dku9YRoJA+Jelt6eOAr7WsAdQ4thw==; domain=.auth.yandex.cloud; path=/; expires=Tue, 06 Nov 2035 15:42:36 GMT; secure\r\nserver: ycalb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2463,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":134,"dns":6,"connect":30,"send":0,"wait":42,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.cloud.yandex.com/push/yc_device?nonce=05f908b4-cf12-42d0-839d-13b49003acff\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256","fqdn":"auth.cloud.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T15:42:36.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth.cloud.yandex.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Sep 2025 10:34:42 GMT","end":"Sun, 08 Mar 2026 20:59:59 GMT"},"fingerprint":{"sha1":"85:67:78:91:B0:24:79:5D:86:C9:19:88:C1:3D:DB:87:F3:CA:D9:2A","sha256":"59:B5:9B:F7:45:AC:2E:85:12:3C:C2:0B:3A:EA:94:B9:9D:5C:70:0E:C0:90:9F:8F:C9:A9:4B:87:0B:3F:CC:EB"}}},"request":{"raw":"GET /push/yc_device?nonce=05f908b4-cf12-42d0-839d-13b49003acff\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256 HTTP/1.1\r\nHost: auth.cloud.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gdpr=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 08 Nov 2025 15:42:36 GMT\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nlocation: https://auth.yandex.cloud/oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https%3A%2F%2Fdatalens.ru%2Fauth%2Fcallback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256\u0026yc_device=none\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncontent-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; block-all-mixed-content;\r\ncontent-length: 0\r\nx-server-trace-id: 54e2da578d5abd3e:35b5bb5f30a0d663:05a8b0e8ba95ae29:1\r\nset-cookie: _yasc=iZoR2zWArcvb50DbJzvrgJwmT9YyeIU0aH/TI6ZJ0Usb924el8hjUnhoFuS6sw==; domain=.auth.cloud.yandex.com; path=/; expires=Tue, 06 Nov 2035 15:42:36 GMT; secure\r\nserver: ycalb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2463,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":101,"dns":14,"connect":29,"send":0,"wait":41,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/9978.6dfbe537.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/9978.6dfbe537.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 28799\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: immutable, max-age=31536000\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Mon, 06 Oct 2025 10:36:21 GMT\r\nexpires: Sun, 08 Nov 2026 15:42:38 GMT\r\nvary: Accept-Encoding\r\netag: \"f269b2aa41df811fc6223013f4a2e1e4\"\r\ntiming-allow-origin: *\r\nx-strm-log-split: 5\r\nx-request-id: b81de1807b807508\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95406,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"ff225f52748a99c601996ac8206a2363","sha1":"3cd6b215a4c5ab9711284e8ae5addf722eaa9498","sha256":"a2e162c2831d82dfc03e88aac1de7e805a1c1a2013a70729993f1fda514a0958","sha512":"72083873609c3ab20d3ab8e2da0f9562c267391bf6cdacd2de924a27efc6bcd9b4d7397cd30ccea03e661eb4587ed218fd4ab10ecc3d19fd23e16dc2de2eda6c","ssdeep":"1536:Aysy0ymyF4ywzF7PMYtL5nT0y5vN3MC/DMkz4YurXnqhXc6XkAPruuysvu1omMHr:1pBjFd4F4k/cAa2uv5U14L8+u","tlshash":"46932ad67282b074d7eb4166906b401eb33a2b55740e4424b13ddcdd38a5de8e3a3fba","first_seen":"2025-10-26T06:48:37.823595Z","last_seen":"2025-12-07T09:16:48.889279Z","times_seen":35,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":107,"dns":1,"connect":31,"send":0,"wait":68,"receive":20,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/6466.94a1a5bb.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/6466.94a1a5bb.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5639\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"038598331201c4382036926b5a8704fb\"\r\naccess-control-allow-origin: *\r\nexpires: Sun, 08 Nov 2026 15:42:38 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Tue, 14 Oct 2025 10:19:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncache-control: immutable, max-age=31536000\r\nx-strm-log-split: 8\r\nx-request-id: a989cdf022e22072\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21369,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21369), with no line terminators","md5":"4e20d7fb1eaad1ed7df02eebe0d854e9","sha1":"16ecc896003227ecf2f9f82abe4bc4afc85cd62a","sha256":"4bdd52c6cd4c305fcb4d1e97b90569f5c5ed45f8b9fb93d74510aa87d53d06ca","sha512":"bf4bc8227436c3c22ed89a4c57e05bd92cdefcfadd87319cb2138569c00833a6ab096dd5895468022f9364eb49e6fd780d36529faf713ee3cbd95f7a61103b0d","ssdeep":"384:CFZ/32WLW/r9pcPkIFaHWPptSxJpVGPN/qaL2eU:CFZ/32WLW/xOknHWP+HpVGPN/qaLO","tlshash":"87a2e79eb156b5d83ac3807f116f008921bba44cfc1f006c77abd5e5aa656887353fb8","first_seen":"2025-10-26T06:48:37.818891Z","last_seen":"2025-12-07T09:16:48.884532Z","times_seen":35,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/css/4825.850fb605.css","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/css/4825.850fb605.css HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10221\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\ncache-control: immutable, max-age=31536000\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\netag: \"e005fe055a31fb422ef8e0d33e9f7336\"\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nlast-modified: Mon, 06 Oct 2025 10:36:20 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\nx-strm-log-split: 4\r\nx-request-id: ed9b55e470304d04\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":144631,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"a3e29222e44265fafa56fde66382f900","sha1":"31d140824f69c812fe0ed563821352b1e37c3df2","sha256":"2b855081721be8ab69ac644f24e23b2d5e5b340c0d7ad3ed9885ef1a37eb8fe3","sha512":"d28713b14b903b03a5e3c1fb3741f7ff209c13b0bce39943725ad44bf133afb70ac1646e9214a334f9789a3d42cfe841448d1b41d150f77c9bf5be3b9b2084e7","ssdeep":"1536:PMax5E+Lp38pNvUdYggZ3H80FBUrLkEqK+TgrHBinQZjJa4uXqgWT03S+nD4Zjyf:xht+nRmLk","tlshash":"bae391a6fcd64123562b547fdbc5aa3788c02ce88b0d6f95f65c904228c5abf12fe315","first_seen":"2025-10-26T06:48:37.820851Z","last_seen":"2025-12-07T09:16:48.882767Z","times_seen":35,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":57,"receive":1,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https%3A%2F%2Fdatalens.ru%2Fauth%2Fcallback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256\u0026yc_device=none\u0026utm_referrer=about%3Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T15:42:37.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth.yandex.cloud","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Sep 2025 10:22:24 GMT","end":"Sun, 08 Mar 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D7:A4:53:29:42:4B:67:27:E2:15:F2:27:96:28:AD:C8:49:BD:FF:25","sha256":"A5:23:CC:CF:70:E9:39:72:C0:58:C4:57:90:95:20:29:34:EF:87:44:2D:86:59:A9:64:6C:18:08:8B:85:B8:D8"}}},"request":{"raw":"GET /oauth/authorize?response_type=code\u0026client_id=yc.oauth.datalens\u0026scope=openid\u0026redirect_uri=https%3A%2F%2Fdatalens.ru%2Fauth%2Fcallback\u0026state=bEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL\u0026code_challenge=xlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM\u0026code_challenge_method=S256\u0026yc_device=none\u0026utm_referrer=about%3Ablank HTTP/1.1\r\nHost: auth.yandex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yndx.auth.yandex.cloud/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nonce=05f908b4-cf12-42d0-839d-13b49003acff; _yasc=CsJU4ZLb08sxy1ZQw4WiaLN6dZJa2bpM1Dku9YRoJA+Jelt6eOAr7WsAdQ4thw==; Session_id=noauth:1762616556; sessar=1.1299404.CiDj3i27OyMGEup1lFcBiA9KkdE6AFy3WWOhJE9MQ0lZAw.yy6DXThItwr5-MhG-q2paKMkFDYMJWLhDGZTazyW70s; yandex_login=; ys=c_chck.275828802; i=K/vE5qPSTd8MD6Fm/A9ntPTYhwONwgV5zisiDiwss4+OuD+77k/KuIblnLa1+S9f7lQk8WO5dYL1zoXT7tZUdyn5MoA=; yandexuid=4694811141762616556; mda2_beacon=1762616556757; sso_status=sso.passport.yandex.ru:synchronized\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 08 Nov 2025 15:42:37 GMT\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: DENY\r\ncontent-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; block-all-mixed-content;\r\nlocation: https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank\r\ncontent-length: 0\r\nx-server-trace-id: f777c9ffe46c33df:1ccd58132a03d866:b52fb07499b88f71:1\r\nserver: ycalb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44520,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/js/4379.4b0481a2.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/js/4379.4b0481a2.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://auth.yandex.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 22889\r\nexpires: Sun, 08 Nov 2026 15:42:38 GMT\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncache-control: immutable, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"ccfaf1921184ee2d58e72f854e383b10\"\r\nlast-modified: Fri, 19 Sep 2025 11:06:39 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-strm-log-split: 8\r\nx-request-id: fc3329350c34c030\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144241,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a85991d0aae09fa5f117c3327d35ce07","sha1":"16761cfc6c5b01c2b9e35a3ffb4466aa5d2fd394","sha256":"8062a3c18a8932c612f9e2e924f8cdb46a6b13d28794af91d8366e08f12275a0","sha512":"0cf39eba8247f7f5ff29bf6bdc898f910c3f748ebc5585cd7ee09d963752d4f647bd2caa8fe0d26db182663e73818ae0e747300e68b359fbc40ea873f0811b5d","ssdeep":"3072:mu06uEd8vMJ/KHpVo8O4bwNt/6E84UeDzP+4AvP6ZI4t/vd:mu0C8vBTo8LbwNtCEJUeDbbAnWVtHd","tlshash":"d5e3a4ea9320d7dc18a7dc9cef379859271fa4a9fb6b529081afc634b4839c4e507d10","first_seen":"2025-10-26T06:48:37.852297Z","last_seen":"2025-11-12T08:21:03.880835Z","times_seen":20,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":59,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/css/9674.4029175a.css","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/css/9674.4029175a.css HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 96\r\ncache-control: immutable, max-age=31536000\r\naccess-control-allow-origin: *\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nlast-modified: Thu, 31 Jul 2025 13:39:14 GMT\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"204d2acab2d2c75547e019e0c82d1157\"\r\nx-strm-log-split: 0\r\nx-request-id: ba97079ea319b6ee\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"de73441f0f087188a492f0f9a5687a65","sha1":"f376c046c256087e43f85b824ed1db31d2bf8b2c","sha256":"de639e1a381ca4f577ee6e5268f5745547792a848310b7065f282b2019ce85a0","sha512":"d55fdce97e0e5469bec76c23480cca12645231543214c24cf3a88fedea721583a999e2bed47521b7ec581503c10f763826d22d65626c1fc83a7a210319858209","ssdeep":"","tlshash":"aac022c38c8047ae030793a11017c82cf24811e0cd92b8ec1482c0ee08f4e42b60a01a","first_seen":"2025-10-26T06:48:37.859237Z","last_seen":"2026-06-03T23:00:53.970374Z","times_seen":38,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":36,"send":0,"wait":60,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/css/3650.87b8fa29.css","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/css/3650.87b8fa29.css HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 487\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 31 Jul 2025 13:39:14 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\netag: \"b38ef838e2852bf7e244e61ba333c9f0\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: immutable, max-age=31536000\r\nx-strm-log-split: 2\r\nx-request-id: a6a774f7aa43347a\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1950,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1950), with no line terminators","md5":"fbb2496ab58e86940504a55105392bae","sha1":"1a98609d5c68a5666cbdf3e3f19eefbb695ed6cd","sha256":"8e21774a22ecb1d34e86af8c4bfaeac05592bd76310882ea1e90c5981f0b5b41","sha512":"d806dd81677411341a1dcc73490f6718737c16d8ed7d13a25e004751170dd113ec38f6512e409106b8bce8952509400ca006e8c8ccbd8a4cc115d5422faf21ee","ssdeep":"","tlshash":"2f41b0c93a58ff371c27911aaf9af53d811c9722a721cfadb462215e0fd73a607c1624","first_seen":"2025-10-26T06:48:37.861081Z","last_seen":"2025-12-07T09:16:48.876705Z","times_seen":35,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso.passport.yandex.ru/push?retpath=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26yc_device%3Dnone%26utm_referrer%3Dabout%253Ablank\u0026uuid=2537e4c0-2509-468a-80ca-b2c4251d42c2","fqdn":"sso.passport.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"93.158.134.144","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T15:42:36.598Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /push?retpath=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26yc_device%3Dnone%26utm_referrer%3Dabout%253Ablank\u0026uuid=2537e4c0-2509-468a-80ca-b2c4251d42c2 HTTP/1.1\r\nHost: sso.passport.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gdpr=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","fqdn":"auth.yandex.cloud","domain":"yandex.cloud","tld":"cloud"},"ip":{"addr":"185.206.167.48","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-08T15:42:37.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth.yandex.cloud","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Sep 2025 10:22:24 GMT","end":"Sun, 08 Mar 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D7:A4:53:29:42:4B:67:27:E2:15:F2:27:96:28:AD:C8:49:BD:FF:25","sha256":"A5:23:CC:CF:70:E9:39:72:C0:58:C4:57:90:95:20:29:34:EF:87:44:2D:86:59:A9:64:6C:18:08:8B:85:B8:D8"}}},"request":{"raw":"GET /login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank HTTP/1.1\r\nHost: auth.yandex.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yndx.auth.yandex.cloud/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _yasc=CsJU4ZLb08sxy1ZQw4WiaLN6dZJa2bpM1Dku9YRoJA+Jelt6eOAr7WsAdQ4thw==; Session_id=noauth:1762616556; sessar=1.1299404.CiDj3i27OyMGEup1lFcBiA9KkdE6AFy3WWOhJE9MQ0lZAw.yy6DXThItwr5-MhG-q2paKMkFDYMJWLhDGZTazyW70s; yandex_login=; ys=c_chck.275828802; i=K/vE5qPSTd8MD6Fm/A9ntPTYhwONwgV5zisiDiwss4+OuD+77k/KuIblnLa1+S9f7lQk8WO5dYL1zoXT7tZUdyn5MoA=; yandexuid=4694811141762616556; mda2_beacon=1762616556757; sso_status=sso.passport.yandex.ru:synchronized\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ycalb\r\ndate: Sat, 08 Nov 2025 15:42:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-request-id: d8e5e5c1-905e-4d8e-bf4c-6ca8d5802dc2\r\nx-trace-id: e12bda3322487011\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nsurrogate-control: no-store\r\ncache-control: no-store, max-age=0, must-revalidate, proxy-revalidate\r\ncontent-security-policy: report-to default-group; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-4f+/7fl4MC17OkEIken4eQ==' yastatic.net yastat.net mc.yandex.ru mc.webvisor.com mc.webvisor.org mc.yandex.cloud 'strict-dynamic' abt.s3.yandex.net; style-src 'self' 'unsafe-inline' yastatic.net yastat.net storage.yandexcloud.net; font-src 'self' yastatic.net yastat.net storage.yandexcloud.net; img-src 'self' data: yastatic.net yastat.net mc.webvisor.com mc.webvisor.org mc.yandex.ru mc.yandex.cloud mc.admetrica.ru avatars.mds.yandex.net storage.yandexcloud.net mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.yandex.ua; frame-src 'self' blob: mc.yandex.ru mc.yandex.md mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.yandex.ua; child-src 'self' blob: mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.yandex.ua; connect-src 'self' yandexmetrica.com:* mc.webvisor.com mc.webvisor.org mc.yandex.ru mc.yandex.cloud mc.admetrica.ru https://yandex.ru https://yandex.com mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.yandex.ua uaas.yandex.ru yastatic.net; media-src yastatic.net yastat.net storage.yandexcloud.net; frame-ancestors webvisor.com *.webvisor.com http://webvisor.com http://*.webvisor.com 'self' *.yandex.ru *.yandex.com *.cloud.yandex.ru *.cloud.yandex.com *.yandex.cloud sourcecraft.dev datalens.ru *.datalens.ru; default-src 'self'; style-src-elem 'self' 'unsafe-inline' yastatic.net storage.yandexcloud.net; style-src-attr 'unsafe-inline'; report-uri https://csp.yandex.net/csp?yandexuid=4694811141762616556\u0026from=auth.ext-prod\u0026project=cloud;\r\nreport-to: {\"group\":\"default-group\",\"endpoints\":[{\"url\":\"https://csp.yandex.net/csp?yandexuid=4694811141762616556\u0026from=auth.ext-prod\u0026project=cloud\"}],\"max_age\":1800,\"include_subdomains\":true}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: gzip\r\nx-server-trace-id: e12bda3322487011:4c7c1b61275c0c29:5ef10dc901fdd358:1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44520,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15568)","md5":"e32182f5de7d8f5de2c8c59acc833502","sha1":"9eb302b291ac6833a68aaa05879c2d0d3aa6e790","sha256":"35c3e866f78152831fc18169cff1a0f95536ccfe79c547d17363b0135a945984","sha512":"1096bf2463b39d2348fff5c8e2c9a909d9ba49eda1f8d8148eeeed7421cc210b6d6d9ddd03aff6205acac1f8ddc2b63af7ae826323ab1233bdd0b31ea8dbd160","ssdeep":"768:AvCSVDeMLT6rIuEdIUlnZfjVpZFGZmLefpjAHLoPZ3M7+dBxzWOK0sODtWfX3Y7q:AvCSVDZLT6MpdIUlnhjVpZFGZmLefpjs","tlshash":"3a132b466a10703506a36078a2bf730aa37941531c0cc865b7afd9d87fba6cf0653f9e","first_seen":"2025-11-08T15:43:03.175056Z","last_seen":"2025-11-08T15:43:03.175056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/cloud/auth/static/freeze/css/2729.6e9328cc.css","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth.yandex.cloud/login?client_id=yc.oauth.datalens\u0026redirectUrl=https%3A%2F%2Fauth.yandex.cloud%2Foauth%2Fauthorize%3Fresponse_type%3Dcode%26client_id%3Dyc.oauth.datalens%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fdatalens.ru%252Fauth%252Fcallback%26state%3DbEczUPadVBfQo6dHHV0hHpunzKbvWInva49LkHL%26code_challenge%3DxlAocRMyDU0jTa9wEFyCLe1kOXHOagXJd82WuSQ00PM%26code_challenge_method%3DS256%26utm_referrer%3Dabout%253Ablank","date":"2025-11-08T15:42:37.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/cloud/auth/static/freeze/css/2729.6e9328cc.css HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth.yandex.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Nov 2025 15:42:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1947\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\ncache-control: immutable, max-age=31536000\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"dfc02c1896ca2251986a947296441581\"\r\nexpires: Sun, 08 Nov 2026 12:28:17 GMT\r\nlast-modified: Thu, 31 Jul 2025 13:39:14 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\nx-strm-log-split: 1\r\nx-request-id: 91315ef40cb02a14\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14833,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14833), with no line terminators","md5":"c9b84e497d22d12a9f12601c3dbde9f3","sha1":"f3963fff250b91846e56f451af422ae84e796157","sha256":"65a85889bb3067f92753b8f43c5418149a2f28d0ca1ad4e56aa969bc643340aa","sha512":"3d485a1f4ccae3ae04d975ce50c28c7eae05ff9a03f380f86676094b607b8b84751d9233adc8060e40edd6dc8570980fc9799060dd8ce68cdd55ad69df0eafd8","ssdeep":"192:w45ohcJxMWLiVMKLiB42fYxLKBQincpC781lUqz/k1Teel1L+zWPWjO7mnGU5AJO:6ycI4CdJzqT4VR4lB/H2SVPwYk84SEu","tlshash":"2562abe5eeb4f52ab463553a9f0cfa7999146445cf12cbe4f8aa41084dc2fbb27c1702","first_seen":"2025-10-26T06:48:37.853195Z","last_seen":"2025-12-07T09:16:48.889813Z","times_seen":35,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":60,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
