{"report_id":"b863a3c2-bffd-41ca-82f5-ab2aa2d7c02e","version":0,"status":"done","tags":[],"date":"2026-10-03T16:51:14Z","url":{"schema":"http","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":0,"asn":9123,"as":"Jsc timeweb","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"title":"Скачать Instagram бесплатно - приложение социальной сети","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":0,"asn":9123,"as":"Jsc timeweb","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:51:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sync.adspend.space","ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-02-11","domain_rank":345453,"first_seen":"2022-10-20T06:12:42Z","last_seen":"2026-09-30T05:33:59.900574Z","alert_count":0,"request_count":2,"received_data":1141,"sent_data":1194,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"openrtb.skcrtxr.com","ip":{"addr":"62.84.119.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":785809,"first_seen":"2023-01-31T08:31:43Z","last_seen":"2026-09-30T05:34:00.106627Z","alert_count":0,"request_count":2,"received_data":235,"sent_data":1134,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cm.pxltag.com","ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-25","domain_rank":0,"first_seen":"2025-11-18T10:18:49.548967Z","last_seen":"2026-09-30T05:33:58.857149Z","alert_count":0,"request_count":3,"received_data":1119,"sent_data":1864,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.skcrtxr.com","ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":365796,"first_seen":"2022-04-18T12:16:45Z","last_seen":"2026-10-01T14:12:28.002674Z","alert_count":0,"request_count":5,"received_data":6353,"sent_data":2740,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.linkssp.ru","ip":{"addr":"89.248.193.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-18","domain_rank":431263,"first_seen":"2025-05-28T20:33:39.660871Z","last_seen":"2026-09-26T17:26:00.736243Z","alert_count":0,"request_count":1,"received_data":541,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ck.silvermob.com","ip":{"addr":"212.95.58.28","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-25","domain_rank":416424,"first_seen":"2025-03-13T10:51:02.742077Z","last_seen":"2026-09-28T16:40:07.686469Z","alert_count":0,"request_count":1,"received_data":854,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"bid.adx.com.ru","ip":{"addr":"83.222.96.198","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":269473,"first_seen":"2022-11-09T10:33:24Z","last_seen":"2026-09-29T22:31:15.738789Z","alert_count":0,"request_count":4,"received_data":1038,"sent_data":2200,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yandex.ru","ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-10-01T09:21:35.987931Z","alert_count":0,"request_count":1,"received_data":435596,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adserver.gear-hub.ru","ip":{"addr":"46.243.210.75","port":443,"asn":0,"as":"","country":"Sweden","country_code":"SE"},"domain_registered":"2025-08-02","domain_rank":0,"first_seen":"2026-08-05T15:11:36.505842Z","last_seen":"2026-09-30T05:33:57.777947Z","alert_count":0,"request_count":1,"received_data":611,"sent_data":630,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ia.box","ip":{"addr":"5.9.56.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-04-26","domain_rank":0,"first_seen":"2026-02-08T05:50:16.764804Z","last_seen":"2026-09-28T13:29:58.389385Z","alert_count":0,"request_count":2,"received_data":1102,"sent_data":1188,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-09-28T16:54:11.197351Z","alert_count":0,"request_count":10,"received_data":1580260,"sent_data":4968,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.upravel.com","ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-25","domain_rank":187521,"first_seen":"2017-05-29T09:13:46Z","last_seen":"2026-09-29T22:31:13.619157Z","alert_count":0,"request_count":12,"received_data":10145,"sent_data":8191,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"cdn1.moe.video","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-05-06","domain_rank":488400,"first_seen":"2022-05-06T11:57:48Z","last_seen":"2026-09-29T22:31:15.930324Z","alert_count":0,"request_count":5,"received_data":386582,"sent_data":2456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"otclick-adv.ru","ip":{"addr":"139.45.228.141","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"domain_registered":"2011-01-17","domain_rank":27130,"first_seen":"2015-09-17T11:20:30Z","last_seen":"2026-09-30T05:34:00.151641Z","alert_count":0,"request_count":5,"received_data":2745,"sent_data":2953,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.q-bid.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-03-13","domain_rank":0,"first_seen":"2025-11-23T13:51:24.988475Z","last_seen":"2026-09-30T05:34:00.467286Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1231,"comment":"","tags":null,"fingerprints":null},{"fqdn":"klkmdsync.site","ip":{"addr":"199.68.197.20","port":443,"asn":1426,"as":"LIGHTWAVENET","country":"United States","country_code":"US"},"domain_registered":"2026-07-31","domain_rank":0,"first_seen":"2026-08-05T09:54:15.186499Z","last_seen":"2026-09-30T05:33:59.560801Z","alert_count":0,"request_count":1,"received_data":442,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.lotus-dsp.ru","ip":{"addr":"213.171.19.207","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-12-05","domain_rank":395207,"first_seen":"2023-12-09T00:32:38Z","last_seen":"2026-09-30T05:33:58.081793Z","alert_count":0,"request_count":1,"received_data":565,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru","ip":{"addr":"185.115.93.201","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2023-02-28","domain_rank":0,"first_seen":"2026-10-03T16:51:21.388949Z","last_seen":"2026-10-03T16:51:21.388949Z","alert_count":0,"request_count":2,"received_data":854,"sent_data":1178,"comment":"","tags":null,"fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie:1.11.2","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}]},{"fqdn":"cdn-c.skcrtxr.com","ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":1421921,"first_seen":"2025-07-30T23:15:47.657918Z","last_seen":"2026-09-29T22:31:18.091112Z","alert_count":0,"request_count":4,"received_data":761944,"sent_data":1956,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.programmatica.com","ip":{"addr":"77.246.157.204","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2016-10-12","domain_rank":256275,"first_seen":"2022-12-17T01:18:07Z","last_seen":"2026-10-03T12:12:56.173035Z","alert_count":0,"request_count":3,"received_data":1643,"sent_data":1765,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"t.dsp.abdm.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-10-10","domain_rank":0,"first_seen":"2026-10-01T14:39:32.056359Z","last_seen":"2026-10-01T14:39:32.056359Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":603,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":8,"received_data":277200,"sent_data":4534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kimberlite.io","ip":{"addr":"37.0.127.86","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-16","domain_rank":17539,"first_seen":"2017-09-14T05:18:59Z","last_seen":"2026-09-29T18:38:59.507673Z","alert_count":0,"request_count":2,"received_data":1128,"sent_data":1109,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":24509,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssp.bidvol.com","ip":{"addr":"194.85.16.43","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"domain_registered":"2019-09-24","domain_rank":199701,"first_seen":"2020-02-22T12:37:29Z","last_seen":"2026-10-02T23:13:20.24738Z","alert_count":0,"request_count":2,"received_data":1370,"sent_data":1108,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dvgroup.com","ip":{"addr":"212.41.11.130","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-12","domain_rank":429256,"first_seen":"2024-09-03T12:22:07Z","last_seen":"2026-09-30T05:33:57.571592Z","alert_count":0,"request_count":2,"received_data":676,"sent_data":1157,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtb.moe.video","ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2015-05-06","domain_rank":556724,"first_seen":"2022-12-09T12:23:40Z","last_seen":"2026-09-30T05:33:59.949598Z","alert_count":0,"request_count":15,"received_data":2325,"sent_data":8889,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.adsp.io","ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2026-01-23T12:22:25.077202Z","last_seen":"2026-10-03T12:12:56.439272Z","alert_count":0,"request_count":6,"received_data":2096,"sent_data":3417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tms.gpmdata.ru","ip":{"addr":"62.105.142.42","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2021-03-12","domain_rank":572397,"first_seen":"2024-09-23T08:23:01Z","last_seen":"2026-10-01T10:00:18.455115Z","alert_count":0,"request_count":1,"received_data":790,"sent_data":698,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ads.tds.bid","ip":{"addr":"89.219.34.76","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"domain_registered":"2022-07-21","domain_rank":0,"first_seen":"2026-04-29T08:23:12.412099Z","last_seen":"2026-09-30T05:34:00.837322Z","alert_count":0,"request_count":1,"received_data":324,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.qtarget.tech","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-12-26","domain_rank":701462,"first_seen":"2023-01-28T17:26:52Z","last_seen":"2026-09-30T05:33:59.576498Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":577,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ss7rr5.moe.video","ip":{"addr":"155.212.215.87","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2015-05-06","domain_rank":0,"first_seen":"2026-05-22T23:34:17.143744Z","last_seen":"2026-09-15T02:51:30.099815Z","alert_count":0,"request_count":1,"received_data":483,"sent_data":672,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"sync.techdsp.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-09","domain_rank":660524,"first_seen":"2024-11-01T12:08:52Z","last_seen":"2026-09-30T05:34:00.146786Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":566,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssp.al-adtech.com","ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-01-16","domain_rank":164448,"first_seen":"2024-01-30T10:38:38Z","last_seen":"2026-09-27T09:21:08.903756Z","alert_count":0,"request_count":5,"received_data":1485,"sent_data":3553,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.ohmy.bid","ip":{"addr":"37.0.127.200","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-06-09","domain_rank":283479,"first_seen":"2023-05-23T09:17:10Z","last_seen":"2026-09-29T15:38:51.140918Z","alert_count":0,"request_count":2,"received_data":1080,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"catsnetwork.ru","ip":{"addr":"194.186.91.196","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":54005,"first_seen":"2020-03-11T05:53:05Z","last_seen":"2026-09-29T22:31:15.757491Z","alert_count":0,"request_count":4,"received_data":2324,"sent_data":2287,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.new-programmatic.com","ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":172258,"first_seen":"2020-02-18T20:50:06Z","last_seen":"2026-09-30T05:34:00.09522Z","alert_count":0,"request_count":1,"received_data":254,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"asnbnhznoe.com","ip":{"addr":"76.223.67.189","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-08-31","domain_rank":2176195,"first_seen":"2023-08-31T13:32:23Z","last_seen":"2026-10-03T16:50:02.099382Z","alert_count":0,"request_count":1,"received_data":102,"sent_data":493,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.digitalcaramel.com","ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2017-09-17","domain_rank":589179,"first_seen":"2019-02-17T17:30:06Z","last_seen":"2026-10-02T23:13:17.855429Z","alert_count":0,"request_count":2,"received_data":23019,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"statistics.adsource.pro","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-01T14:39:32.073242Z","last_seen":"2026-10-01T14:39:32.073243Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":576,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssp.bidster.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-13","domain_rank":430502,"first_seen":"2023-08-04T01:03:10Z","last_seen":"2026-09-28T16:36:21.982025Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":564,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.adspector.io","ip":{"addr":"213.171.19.191","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2026-10-01T16:39:23.592349Z","alert_count":0,"request_count":1,"received_data":507,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"instagram-my.ru","ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2017-11-15","domain_rank":0,"first_seen":"2019-11-20T08:31:43Z","last_seen":"2026-10-02T23:13:20.144583Z","alert_count":46,"request_count":23,"received_data":878998,"sent_data":11562,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ContentViews","description":"ContentViews is a lightweight and user-friendly WordPress Plugin, crafted specifically for efficient content management and display. This plugin offers seamless integration with Widgets and enables users to showcase their posts, pages, or custom post types in a highly responsive grid, list, or timeline layout.","website":"https://wordpress.org/plugins/content-views-query-and-display-post-page/","common_platform_enumeration":"","icon":"ContentViews.svg","categories":["Widgets","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]},{"fqdn":"cdn-v.skcrtxr.com","ip":{"addr":"151.236.89.224","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":827781,"first_seen":"2025-03-06T05:51:25.781558Z","last_seen":"2026-09-30T05:33:57.763106Z","alert_count":0,"request_count":4,"received_data":13781,"sent_data":2296,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"csync.skcrtxr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-04-12","domain_rank":0,"first_seen":"2025-10-14T18:19:49.979598Z","last_seen":"2026-10-02T04:28:12.78576Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":990,"comment":"","tags":null,"fingerprints":null},{"fqdn":"worker.sttsmntz.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-07-25","domain_rank":787994,"first_seen":"2022-07-28T17:31:37Z","last_seen":"2026-09-28T07:03:01.9024Z","alert_count":0,"request_count":2,"received_data":248,"sent_data":984,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/js/swiper.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dbc7c098c7ec9306dd8bb5e4e9e9343","sha1":"a01d40dea1d1240404fe3510c9d28353efd470bc","sha256":"7481ca08ab9f3cba9123f51023007c2132b1b31c09009c0a9dca77c1c2c98631","sha512":"0725f8bf116c387c1c4e8ab4c253439f277cf89c1ab169f416038e8f1cbdfac3bfdb5fb1cae2edd442748c0e5352bcf95a6bc1d06514c11626b4f84fb89b8316","ssdeep":"1536:WApNsiJ532VXrtnTN0K8V7wluJTryZjk5PuFzLlvp0XvH7WcWUwcPqYbsE8EtOb2:mVXrfX67F2mgLlufH7WcWUwcPquza2","tlshash":"40c31849b35071d551e72256539ed601a3b62805b90ac1a831b2dcdbacbde8c03bfefd","size":124711,"data":"","first_seen":"2023-03-10T12:16:22Z","last_seen":"2026-10-03T16:51:28.423198Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/q2w3_fixed_widget-js-extra","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffcdf9ae82e545e9105090fff73d80d7","sha1":"064e8c4fd08b5882202dc34de68befe46cb4648f","sha256":"563554a7bfe876c611aeb562294f1cf8c73feb4a8da5497aa4489382340de1f1","sha512":"a67ffb6d6e717068e911e9077b511e3019ab577ee18d0f32bcc035b7856ddb34ff6b2ffab45d163cdbfc9e9654d743f29fcd0d83697959828af365c619a91369","ssdeep":"","tlshash":"06f02b9dd2943c9556835e7300df483604ed6c9cca50e5c6cddf10e48de5e86e3625e6","size":501,"data":"","first_seen":"2026-10-02T23:13:34.043636Z","last_seen":"2026-10-03T16:51:28.463583Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"23c5624132b1a8afe5f387e871be44ff","sha1":"97c8fb8023d89a0209738586eb26e889dd432c65","sha256":"3bdbd987461189b2fd719ea9659879929970cc478d16d2172bb4e4c1709ddf95","sha512":"8a628600000e1406259c5e69e3739520b192cc3df0d48a3419e3116d17636a9a5f03d2f5686a33784cd51d08e866811e6f6c164809c4a57918b91bd4d61c889c","ssdeep":"","tlshash":"a8800080aebca00000c08288a2e0280a00b0aa2c8f0c080280282e2a30a82c208c022c","size":28,"data":"","first_seen":"2023-03-07T12:03:49Z","last_seen":"2026-10-03T16:51:28.464439Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8bae6b8c2253dc2614d1235cee88214","sha1":"13ac41674020682f9b6ef79d8fa3f0adf56cda1d","sha256":"e030bfd3f4423147c293c2e00491732891b796c1bc4c21e3fac3875492c1eaa2","sha512":"e60f9fdbf8aa8c5a667a699bd1eaec8124ec03ccae0a174236da8efd937228ea60d6145bd94ccee056ae49b0cf5aad7b8966cb8d9954768a1d8a296e7e73f796","ssdeep":"","tlshash":"1cb0125b44940b26d050c8c00d30d5fb66309925ae58a812a30500d3421c8414d01051","size":89,"data":"","first_seen":"2023-03-10T19:42:15Z","last_seen":"2026-10-03T16:51:28.465274Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-10-03T20:59:11.335076Z","times_seen":15736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"033d7b6bdef40eddbcba9408e210551d","sha1":"57cb6d9253db3078dbdbb2b3f316b2b27b4a3c51","sha256":"f0b85cb26a57e7e20b7d8b88575d17a42d6aa3acfdd808f6c16ca5560964a838","sha512":"bd0d8505d118b122f6fd0a98f694f4550907150d3279dec7c7b5f14c5cbf07db6be8a803462bf6279da2201a5c4e55ccccf2a567ec8a45e56195ed2f0224db47","ssdeep":"","tlshash":"cec0222626f46630c015029d3078831ca46226687aea5022a88d9d386060d810a5e905","size":191,"data":"","first_seen":"2026-10-02T23:13:33.922382Z","last_seen":"2026-10-03T16:51:28.467019Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e402c296b8bf73283ba975cd53511ee","sha1":"e1d9f30dca7f3718e7c0c72b18dd9e6d344c2a93","sha256":"54c9c66d75f0af16271c2eb67018edaf00d44af24f13bdf50e6f68f694721d55","sha512":"d383721426992e17c4508879a0746eafeea9878caf296807ca03f3c9d2b1e1a9833c5219fb2c2ee425ab30112ab44d5a50df6e4eea4ba96318c57623d4d1e9f5","ssdeep":"","tlshash":"539000a8320000c0a220a0222b0eb288b2320032a0f082200e00200ce0e00038b200f8","size":45,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-10-03T21:29:36.612657Z","times_seen":5048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7f1011cda236250d20b055f43418686","sha1":"3d0719f405f47607b6bb19ea79a17ffe6895181d","sha256":"dfa17a01012607b233b52374590c2a52c8b60c6eaf82f60a43606c5a40da6bb6","sha512":"3bd328256e7c50dfbb65778cd5beedbe19f4937c68576d4cd3931ed3ef1d052ea0cf11626c6230fc6cefbdc6e43f0f05b0095f739cad5afd20428f56f66582ea","ssdeep":"","tlshash":"0d317b0aa7b25411a027346a556f04453632375b3c5dbc043f0cc3848f9c93db936bdc","size":1576,"data":"","first_seen":"2026-10-02T23:13:33.926713Z","last_seen":"2026-10-03T16:51:28.468812Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"31c7ac51f08564f48ddfbc166bf75bbe","sha1":"022d5c47c40ba7610bd969758648f3ea16a14285","sha256":"232b046483ddcb6628508088e70a70aa3d641199b0d0b45bcfcb950191e83bdb","sha512":"be1e91d1f93e7da98854927c63253917d2dd069d2c27c7759823852c9a0f7b0d013dbfad2b1bd4fe1de3a42b6ffa17bb10c18c6b4c4db1c58848c187fcde56a2","ssdeep":"","tlshash":"0121a90a37ba6515512b36ad465f0006263139d73c58bc043b0dcf4a9f9da2ea937bdc","size":1297,"data":"","first_seen":"2026-10-02T23:13:33.933346Z","last_seen":"2026-10-03T16:51:28.470177Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8b7535d02fc7d6cb8de1f78686c2a07","sha1":"33181f4c64cf06e7408650fd44a0d519c97f8934","sha256":"caf9e6a25187b046a7f5b469d7ed6fb954000faefb846ec6a03a4c39d3fc7409","sha512":"0db342bd4c7e1db82aa99338e2d5dfc27867a80906a04f873e5072bf9238ff85a0ace4026263c64fbac2ff51947c459645e555cf92fc63250728bce8eb507075","ssdeep":"","tlshash":"cae0c2ab4b70a32ce5266968587e044555132903ac4b38203c8e9545efd842e8976fc2","size":387,"data":"","first_seen":"2026-10-02T23:13:33.936865Z","last_seen":"2026-10-03T16:51:28.471109Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c18041fbdb5149d1a0e1b82f3794ce4","sha1":"53d977d85a334e3024cdcba870bb4eec4b5cbad6","sha256":"19f2569c96027e3bdb2329027b30f1c7be5bd08ebb95029901b142aba56436d7","sha512":"b7419118ee4a95d3f778fac29c8f7669e9e00b544a62ffeb8858820964e964a0b7de0ff79265bcefba410badc76aebf7cbbb3492f8749446e11594f060a49c48","ssdeep":"","tlshash":"ddb0120eb33522c4c9b206a03b9e450c1413302188014014368f58d0b7818925803dd9","size":101,"data":"","first_seen":"2026-10-02T23:13:33.941596Z","last_seen":"2026-10-03T16:51:28.471924Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0eaa312c6884ef5f8a21a0ecf300b49","sha1":"11e5e4574ac8c1ced03dde10e12e2c56d936ed17","sha256":"2fd36d4ea04bc5fd73dec2336bbcff253b66d359bdd5af31565d3ba78593318c","sha512":"56d0164b4e2882de90b2815fffc2c468843832736e7e2ef239cfd072a28073fc2184aa1188e6a2060f62c12e821e57f5e15f5ca8356bef301d5845182ecae363","ssdeep":"","tlshash":"70900233f0c18c7e4021b04411693508b543011c8290102066010830953704b95040c4","size":50,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-10-03T21:40:11.523759Z","times_seen":26298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d996d516053ca12ecf0cc6dea50cfc5c","sha1":"36c93f5ac89b172a12c68635588d39820969cd5c","sha256":"feaa5bb297ddc12ef74a1e99c10dbf3dbab1bba27281a830d84a87a34295cdec","sha512":"51935bca359d85b5cbffcd7902e5a87fceafc8c6beff5293f45dfa93ee8fdfa15857c6188e7872a2d7bc6661a96e0fb32f5ff5ae5fb995a2c116e64667863758","ssdeep":"","tlshash":"7ee02b6a5775a63c6417289818bd0545621355072c0e28a43d0ef545ffd842cd676fd2","size":375,"data":"","first_seen":"2026-10-02T23:13:33.945202Z","last_seen":"2026-10-03T16:51:28.483803Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e673066eb337112d918f9a89d460170a","sha1":"bf45a8406e0c2f29bc513ea305dece9f48b42acd","sha256":"aff5ed9734a1337cced50ff402b0af13a8bcfd31d4a07932effe8d1eb5fa6292","sha512":"ac8130a4da07c3b66dadf766ea50004afd09b38e1e5bb6780ee836b0542c20fcb754e347cec460765d72f9d07a20402fee24db4a81c7089ee746786e4af06fe8","ssdeep":"","tlshash":"8bb0121db3266284899204e037df470c2613342208054144370df5d177818519903de5","size":101,"data":"","first_seen":"2026-10-02T23:13:33.947376Z","last_seen":"2026-10-03T16:51:28.487011Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f7272fa39de651803d0ed16c7e70da9","sha1":"01089fe48e9445d13f43261b1ff9256fa79d5ad9","sha256":"6c2fbcae7fccc13bfbe5eba774cf4555ad4d160c57d06c630fc6896be7e77216","sha512":"b440398cb399fdf39b04833bffa4caba715db5b775696ed2742afc5496b00e698b5a9af98ff0428025a6e3f0b3e3dc599f77907288fad958d1f6394579afea08","ssdeep":"","tlshash":"9ff02b5e5770923c65276d5c08bd0416621351032c4a2c243c4eb544efd843d9676fd2","size":637,"data":"","first_seen":"2026-10-02T23:13:33.951071Z","last_seen":"2026-10-03T16:51:28.489243Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2753bd953721cf83c840fb2b261bdfd","sha1":"49ebb0d089b2ae1a00c4baee866023d59ee8002f","sha256":"609152ec6b4bd20eb7d53d204f2ec0666ad2b3e2b24d8ada68be50959727808e","sha512":"915c9542f06ca228c705aef5e794bd82f0643d7db0470ef549e40a23ac153348ebaa0a77dc0d7f805ea8690fef5c048361540183a6472941838449f112eb2d02","ssdeep":"","tlshash":"acf0e7571b31d32c55239d54047d0449514314132c4b3c103c4de040dfdc03ed572fc1","size":649,"data":"","first_seen":"2026-10-02T23:13:33.976504Z","last_seen":"2026-10-03T16:51:28.490224Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"70494f5ad6b99761f1997b976b044a2f","sha1":"e83b99297d025b757c4b0cad66b70914230e01e2","sha256":"4bfe3bac8f8f0fd9adf59b321daba79a004a2b3103f71a6a01d419622a99f656","sha512":"07abea89df7f7a27882d17622f404817b8902c49c87d4056053f87a649c092c574c3c88d524b1659003570e25d1d86e1b0ba8de897a952217c1b978dd3f48a64","ssdeep":"","tlshash":"30f027575770e32c69275d68447e0945515315031d8b38103ccdd145efdc43dd675fc2","size":649,"data":"","first_seen":"2026-10-02T23:13:33.990588Z","last_seen":"2026-10-03T16:51:28.491112Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"56a1dbeeb2d92bfabb1d3a5ef4fcbf1f","sha1":"710bf16d3435680a686bcfeeced5751e61ea5d62","sha256":"b4705cdbeac9ff524205a00c2500cab3be1445d240ef60db610ba8d1ca5c07c9","sha512":"efa535ee8f419d4a8304192194e22e4746c0f0c11d80322b0391966dae74e87a90325b00a094a8746018e0ee4085025099cd8f15fcad6aa3c6e57d1dd2c7ca2f","ssdeep":"","tlshash":"a5f0cd6a5b70522c65276958447d0549511315036c8f3c603d8de144dfd842e9576fd2","size":649,"data":"","first_seen":"2026-10-02T23:13:33.993446Z","last_seen":"2026-10-03T16:51:28.491847Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"46a370b366092f13842b87fb38d4913d","sha1":"48e35f8a2a3c03d5c9c3426b007c049601e81ebd","sha256":"389130690d0cd27356b8550bf79d2507a37eb94a8ef52e499dd4bfc1c32d7ae4","sha512":"f1ce5f6f5a57386aa0bac6be7299a20c4676044a44f7774ca308a3075460830507d19d49b3dc409bf62017bc8d57c02d1412aefd5e5e98bf84cc7feb559c4b70","ssdeep":"","tlshash":"2af0595f299324705467b07a422e4810315321276649c0067eec82992fe8fb74969b7c","size":578,"data":"","first_seen":"2026-10-02T23:13:33.999502Z","last_seen":"2026-10-03T16:51:28.492565Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd18befbdf463e23ce79659069713f23","sha1":"bdb0f30b3cf079757f4cd26ecdb0d7db03c441a5","sha256":"cabee3356069d48626d515c0c00171845b06e23579c8255df1a8e4a9b3ef71b7","sha512":"2727bdd8ab1afc86a1b6e05008d2e188662784468a5b6ba4c49a566aa54698669cedb0a44038f299f71725c2538131194fd03a06ba4b3c6d15db05caf5967848","ssdeep":"","tlshash":"a0d0a737b31421799c1f71b5f94da244f4a311594813ac05484469956464b2b258ae70","size":224,"data":"","first_seen":"2023-03-07T01:39:52Z","last_seen":"2026-10-03T16:51:28.4936Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"313639cd5c2bf0d6ae4d3cea2beada98","sha1":"100438dc1fcf0833b739ac98eddaca50bbbf64a9","sha256":"2adc81664dccf1b7656b81ab77442209c33d9a68278f5129b30668b31f7e34b4","sha512":"f8faea0ea4d47ca31937c7593e2317edb3fd3a1612891572d24e926d388d87c7f41ef1110c212dad949f4d90f0265310b9c0feb59f2186fc67d9038187ac5b46","ssdeep":"","tlshash":"19e01a73f101f4618b6d6c771377a375be23850550d0a015f1c15de4a89f23ec72644c","size":335,"data":"","first_seen":"2023-03-07T01:39:52Z","last_seen":"2026-10-03T16:51:28.494403Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"58a86644c23b1f668f6a43681097b520","sha1":"cd9a3a6da0ddf4316881e3760ea501f0c768b8bf","sha256":"b570a99977d1f3c7d4160fa9817886ce01d29c2ab10b1dc2d4a0490cb45b5f3b","sha512":"083acbd911118f5b0a27f423affa8d334cf3967b9631af90df22b08c2d75eb2434355daa90ad46f8ec875b4f0be15d1a226d48258111e0ea19384102ac55f008","ssdeep":"","tlshash":"b5e08649b51172b2155e92f250a70b08b1a1a8ef0f0f2154c92816fdb86440df123f7f","size":329,"data":"","first_seen":"2023-03-07T14:54:00Z","last_seen":"2026-10-03T16:51:28.495003Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b30e7df43189fc4dee266a0a705ab18e","sha1":"e3e95fac9cc7040c46b7154ca2a2bd9c5e682925","sha256":"2b509f081dcf0464f5da9d32834fcce8516ddeb66a129b2dee8a4fe7edc842bb","sha512":"52154507c684c67ccc2c99c584e46f2e4c34d418a250fa39820de0e2efb3da365e2f5a7d1a49fcc6cf6f8b8e4746a764a8e9d3f443086087b873191cd429b353","ssdeep":"","tlshash":"569002667055e0346305312085a7958877358501b1195118804c016424e549c90d6e48","size":53,"data":"","first_seen":"2023-03-07T14:54:00Z","last_seen":"2026-10-03T16:51:28.495606Z","times_seen":371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"939556023d4222f6d4aa36a22b03ed34","sha1":"1b942c168302927e9fcc4f32a9b247c4a232e456","sha256":"40e032de286174465acf18de4fc04b3405169c89971d38f2d8f309f27308f48b","sha512":"26c4c64d2ac84b1658cbf56b0eeec35880bf3e9dfb2584aaac701d156dac925e0540456a483abe4c5875f6cefa3375d695f8e99ccf83bbf9d49c74fd63626b44","ssdeep":"","tlshash":"46d022b9a6240fb8e6cb465e233efd46ac7114cfed800000380c6cc81019d224271253","size":205,"data":"","first_seen":"2023-05-01T22:48:08Z","last_seen":"2026-10-03T16:51:28.496203Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"24712438212531cc9e56b92bc7a2b2db","sha1":"43cd4cb87673c87c6fad81530e441cdea693d2b5","sha256":"b3b1542309afa704b5aef16dc418c13665ca9f2b8aaf062e9dc1efe1fd8b1669","sha512":"8a3b93a72fe1bd97ded4ebcf816f3a27efb7c63f5140f3a094737cc223de48786c85513b35d5277b00279d642f6c1b5b2425864cbb0f759c423906c6b3da3ad6","ssdeep":"","tlshash":"ea41fee0819b296e68a03891d936be7d3dc01c53e864fbeaed3c9287f504718c680755","size":2163,"data":"","first_seen":"2026-10-03T16:50:12.208131Z","last_seen":"2026-10-03T16:51:28.497285Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b74831c3281d3dbdf58912a07512af4b","sha1":"bb49e3a256e90e412dc2ef7ce61bb5baf1286776","sha256":"3b03b771fc832417502ae60c96e2641e48eec4409280a73ba84a5401fb64ed04","sha512":"1061d0dd4d5a32f006d5b4c137030a7e7cb65c7b1ec7de38b6e328564245fc6dbd0360420119716dcf325ccdb93b1157cac93e79c181bcc7bc928caed21909c1","ssdeep":"","tlshash":"48e07d40c1d40e5d119269a1cc348b7f179c4052ec50cf246e1cc847be242109a50649","size":304,"data":"","first_seen":"2026-10-03T16:50:12.209295Z","last_seen":"2026-10-03T16:51:28.498266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2df615c1f802a0e67596c7e10e88a4d4","sha1":"1d67cdbd79a5424e965b4814069bbd616aa726bf","sha256":"a0f7af054ba4f37aa19120db83e8d09df52184b5b2d17ee458f908fa17bfcc62","sha512":"d64828462d87c100004dc8cdced2dfa56d06aceeb822e0806ec9a48db2b3d3ecfedcc7f698dd59ffb34a18626117bd4d04e34e979bb664f2f8a204ef65430edb","ssdeep":"","tlshash":"22d02b9d52943c9556835e5300df483604ad5c9c8a40d5c6cddb10e48de5e86e3625e2","size":282,"data":"","first_seen":"2026-04-13T12:57:42.172374Z","last_seen":"2026-10-03T16:51:28.499298Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a028abe4b65b91e46a656169ece00afd","sha1":"b481721fabe48675a136d3525c71640a5144a138","sha256":"47de971262ae9a4ebb736f0c70fbe5c61bfdbfacbc3d047ef6b23bbdf254d1f6","sha512":"021cebf011b6b052f119d93925532e0c5a7ed54f0ce8c1ad5ce9449ec65e9d9792b5bc25bfb4b653812b921d0e9ae938db94f54a95c615ea33722778217c1636","ssdeep":"","tlshash":"7931f04b7c15f4301656bea762fd5cb825c573285220c006bedcd66f27e4bb95c18638","size":1860,"data":"","first_seen":"2023-05-01T22:48:08Z","last_seen":"2026-10-03T16:51:28.500048Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe88104f414b5280348137e0e7cc74f9","sha1":"ec2ed83bd509e9106f36d0e12b60d96623c3381a","sha256":"fb9e5ab0d2593bea1b7e76c758677ea3a5acf601e4ffa46ba26eef552b6c2d33","sha512":"19891cbd83300b2a60e0b79034de53776a1ec910e2a6c61bb947e90dff03d7a5bf9da9317b8a9719912475c79d04449ffa4c425fee8421127ab45821395cc489","ssdeep":"","tlshash":"0fe0c0a67cc45039837612656223a15db216293d684d5c30c51ec852797bcee085b90c","size":366,"data":"","first_seen":"2026-10-02T23:13:34.026535Z","last_seen":"2026-10-03T16:51:28.500804Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-10-03T21:32:39.858365Z","times_seen":85257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/4ea448d4aec4c4ad.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"213d0423f728797a2435eceb834ec451","sha1":"8be33cbedf1093d23fa2456633778068e94ac227","sha256":"11f0908fe4b5a14e0eda6b7906118c3a5e502c3dde03bf94902e71ff05410e89","sha512":"023b5cfffda8dd14e013317960377bb3909679b45e52c18ddf7667bfc459057f3bbfcb139a1d2c1fa4d71cf1880404a72a650f0017011c2bfd61839a7bbbb7eb","ssdeep":"3072:lIJjYLoWgQQ80Qy1bCiTCZW3hUGWiWB8d2rrKAl5BcZa7Mdw/h2uchqM7bGrMFGM:lIJZWgQQ80Qy1bCiTCZW3hUGWiWB8Mrw","tlshash":"6be3d78db2e1b4b142d7a0f5503f660bf33a6459a4098494b72de9e16fb898e4137f3c","size":155385,"data":"","first_seen":"2026-10-02T19:54:59.53559Z","last_seen":"2026-10-03T21:29:36.552251Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/integration/mail.adman.vpaid.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d18b1332b42c3023d7cfe6e8a7b9df3","sha1":"bfe8937334334ed9e7db3071af3c8c2a7aecc991","sha256":"2a4a3e0dc384d6935914c37eded9c9283dbd41ad308a6cdf513b00c00b75f084","sha512":"91b9e8e960ef4669a886590b6a40845fb0b7fadf830964004d11006155b332652eb5168c39bf9349a5a4e6e077113939c9e8e5baf6f7547bcc08ed7690e75eae","ssdeep":"96:FFPDiJW6HOVUgJ8WZW4ACzisCcTa/BxZt5Gir3YDQr3HKW6HM3s24XiWXNNa33WL:/PDiJW6HOVUgJ8WZWehdTa/BjGK3YDQA","tlshash":"32b10325324658aa5ec0419ea8270749a61063e82a1d842cfdbdfceb94ccc0e7d7c7bd","size":5538,"data":"","first_seen":"2026-07-03T22:51:02.738426Z","last_seen":"2026-10-03T16:51:28.435631Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dbff2453fbfde835a3a2d5793c5d720","sha1":"5b14b4f9183ed814c1fd3463d054452d1ffe82f2","sha256":"6e6102b2795b73a9ff4793e8d050d4b805526227cc3f4b8b2786ab22fb614235","sha512":"c663513c1e1e7cc8adfc6472722eff04f9b05f41c2ed419db6ad717a4b46c3dc17896c51bdc73961f6ed2769291658f4b13292dc033e4d55051768cb32a3a2d8","ssdeep":"3072:d+UK2pszI6/xYy1N0PYA9izhT4PwAa3fnU56WHrF+ATFb7/Yie1Ye99bNq1nd24S:d+UK2yzLZYy1NYYA9izhT4PwK56QF+Gy","tlshash":"2de309cd72e2f1a543d768b5403f6a0ff23b6915641c9050f612eae26c749ae8273f2d","size":150119,"data":"","first_seen":"2026-10-03T16:51:28.502673Z","last_seen":"2026-10-03T16:51:28.502673Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/c27a411b30613c6a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"66c2a9560b94fc9a789e8dbc0491881a","sha1":"dbfdd31fdd3a598051593fdb7a273dd2a3f435fb","sha256":"fdfba7443749c34e915130a941208e21620132e12ff58a68722b84c909e11193","sha512":"a5cf2099c95b695e520d3f97c65c60f7b74b7b7b14ac9eb51eca142765e961f7b852847b51f957afce245289f350b4b24587ba0e8a5f9a69a599ebb9b5e7fdf4","ssdeep":"768:YQ/gRAfUjT6A3lImCfCm75jaWXKINXbFZvrm6ZrdzznkTYvpdQbU9CAipCOmCPQ:W/eE2QWKCNyyRiJbQ","tlshash":"3003b58db2d1f4f1069ba1b4803f220ff27b6856a81d9480e761e8d1bcb995e5433f6d","size":38426,"data":"","first_seen":"2026-10-02T19:54:59.478723Z","last_seen":"2026-10-03T21:29:36.483309Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c70d73445208d44b6c4c28d9609e7af","sha1":"19320c5372579190dd24e946c0194398cb5ab7ef","sha256":"e6f133fa9800096ea8a16cf7462d55af640f3b99cb05ae26246a5c32c2137d58","sha512":"fc242b241dca0de5abcacaafb8930f212fb65fd06f248fddb3be0ca97dcbbb8fee6f2437cd71eb44c893ea144c83cfcb0dd1b495e904fafa6a2e2e6cddf5b98a","ssdeep":"","tlshash":"1221eb1c1f799464802390bf17bb93982262b14b3a44e9483acdd1484f9c7adc9b2fdc","size":1248,"data":"","first_seen":"2026-02-04T03:01:34.002864Z","last_seen":"2026-10-03T16:51:28.504463Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63fad256b41b5d84bc1e86461a96a318","sha1":"20d44c76509b9fb61a6e005112d60a1f3b73b8ec","sha256":"a69c12ccd186a899db79fce802b46c08e71f69c2c422be2666ed8565e3add026","sha512":"09bbd78798d0a62b0020a3c97a2e1e34970806003bfbe8f6ddbbdaa248c10a4e947bf58d93f1fb468a7f820d1ba6f83e85a561e740277555f8aeba356a6d6c72","ssdeep":"384:uifv9o67LRIHsTZQu07f087x7iY3bVyYQPDcdd8HyxlYOgjYYuXCy90fY6wEvyMa:pv9o2LRysTZQugf087x7iY3JyhPgdV/n","tlshash":"8eb2a748f6aab43242afc6d9507f024ab33a655dd540d44ebd6cc9d91c94cca5233f7c","size":23433,"data":"","first_seen":"2023-03-08T14:35:53Z","last_seen":"2026-10-03T19:59:27.41066Z","times_seen":5154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/bd19cdf220c1a991.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ae3de273f94abad177543ff61600195","sha1":"a7ece85d20d9ed0c395a6a48036e9866d93ec6f4","sha256":"90bc9647dbec71867ff87860d4e36b53012995d091325421398dba1fef5280c0","sha512":"90e0a55a7a93fccdbd4a008245f9c9580d0615d7e0f75f4bc1fe9deeaddca2381b657edf9200e1d8574196b00b114f52edf6798381654d37c79d4d5f34b6a629","ssdeep":"96:RAwTOi294XfmGRP5/KsomtdFeUe+p2n2y1v3txGJdQaXmfTv1J0a2qoLXDwqB:RAUx2URP5CsBe+w2iPjKlmv1JzLoLB","tlshash":"1ca118ee328272b58bc601d494bf9602f17d4d219c0eb861f009d0512cb5fb661ebead","size":4815,"data":"","first_seen":"2026-10-02T19:54:59.562353Z","last_seen":"2026-10-03T21:29:36.482643Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2a18943ab7a5eb4dccf94ce4a7ba65d","sha1":"4e9649c9ded068ebab5450fc01e8e219a4fab87e","sha256":"31135c3c3439a66a081057a00d9a1276bc3fb98a031a07149995e8a6d855be62","sha512":"f434a793629e7744c30298af6a96ef4627755529c21a8a01f580c723772fd961ebafe6e3c1dcdd2fe1fd7a092c1fd0ceb419f9a9f2415ba4f75a0874998599ca","ssdeep":"3072:QCeuNLCB20XEoQWjZ5DAQ47GK8Y9KnRTp0oe2hPP5/vLugzdxRveg2lSZfW7HuBP:Ku5C1XEoVZRAQ47GK8Y9KnRTpLe2hPhz","tlshash":"aa043bccb2d6706243a761b5407f560bb23a6a89740c8420f169d8e97cb8e4e537bf7d","size":190091,"data":"","first_seen":"2026-09-25T00:39:36.123835Z","last_seen":"2026-10-03T16:51:28.424989Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2591c5cb7d1eb4c21ded3a3999d578d5","sha1":"be1abb10adf51bf7d6503601db965fe52afd5c06","sha256":"e65cd3790dff29bbce557ac4fe2dd8f49f4c547a09f25ac46f2c85434aa9abe7","sha512":"9634004bcec106ed971056a2312dd6004fe273a27b32576f0cfc44d3cb5588ca3e1887d225c016a11e9c228355a6fd61b6949d72b5ce425435a9dad591aaf80e","ssdeep":"384:LprYDrh74W7glICIKghza+5sIc3ZTYlVfZRcBFB6BOBopPXPoy5Tj5piaCP7G1RC:Lp8Dt74W7qICITPGf3ZnLMsOpPXPb/C5","tlshash":"4db2b505b26631a1879bb6b4301f120a723a6e29f50984bc35b9c7e67d34d0c717bf39","size":23915,"data":"","first_seen":"2025-08-26T22:07:20.798347Z","last_seen":"2026-10-03T16:51:28.458834Z","times_seen":1490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/ca8ff4c195df82c3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"693202722d52d51ee780fc8eac51a24c","sha1":"992528b0034b4e7997a8b42c39add8ac2956bfd6","sha256":"ca150e4b047431d76e8c6c4926d65fa23ce14c70895c49c6814d3005f7d72fc7","sha512":"c7554795d72be031c9fd69339629971587025570c0bcc6ffa2b6b25c837a85dd8f6f147576883eef7934c401e199f8196ccb1145202d1973140e74592cf2d7ca","ssdeep":"12288:wQlQZQXQxHNLr/nzx8o+ajmKukg1wjQCplUuFFuvEFC/vlaW91tMeZBivgWVioUD:w4A4oHNLr/nzx8o+ajmKk1wjQCplUuFK","tlshash":"19e4d98af5e1b07142e7a0f9803f150ff23a7915550980a4f62ae8e57eb898e5137f3d","size":720502,"data":"","first_seen":"2026-10-02T19:54:59.534249Z","last_seen":"2026-10-03T21:29:36.483922Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"43a3330d11a33df3e3e1f5da4ef0164f","sha1":"b1d4f8a626c68611fa8354a97cdd6659e9d2ce8b","sha256":"2be41664df13053f61198e95a397f05e106e7673dad83858951b4ffd11a75b97","sha512":"889977e36874f6307e39ae66ea1505d62338964a496827bee9ad5733de43104a2cbcfd73fa16ba3211428fd5ac226ab33f7b33d6102e911c424749b5bb39feff","ssdeep":"","tlshash":"7bd08c9a1cdaa5008043703d4a0e0210b463d543598d5fa0782c02202f1113d4aa03cc","size":278,"data":"","first_seen":"2025-09-16T11:35:25.959422Z","last_seen":"2026-10-03T16:51:28.505299Z","times_seen":2102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/pt-cv-content-views-script-js-extra","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd7ca4ecf3b0291216012d158d7a8061","sha1":"03b0ca987891cda423a033f2b4b63bf4d2a524df","sha256":"9c4c3046aedda1c1579f44b78c1200043b2cad80759e2dcf2cad38a5c1119a14","sha512":"781ac4355f84fe13ff8c30cc6d70b586d40dc97db6c47a550084b50547fa2d8f68e00db1d31e3f68ede35ee082dcc70601aded6bd41ca6ccaa8a5f7e29410868","ssdeep":"","tlshash":"b941f0e0c15b296e68a038b1d976be7d3dc01c53e864fbeaed3c9287f504718c680755","size":2370,"data":"","first_seen":"2026-10-03T16:50:12.220097Z","last_seen":"2026-10-03T16:51:28.506087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5bf524601929feb14fbd6f1960d0fe","sha1":"d00fb76711abb6f443f0ad4eaa82b3fed3019c35","sha256":"c4309fc6bda889d923db05acbced57f960328c27e4eb5b87bbab22f588e85699","sha512":"6b9570e691fa5ef22e2a68ede22886aac66206a01678dc7e1b47e8dd5a56569f07c59f581416e5963b7cc2bcabbad1c28778a05f5531e978e3b9e077c3bb066a","ssdeep":"","tlshash":"e8f0595b69a324705567b07b426e4810355321276609d0067eec82992fe8fb6496df7c","size":593,"data":"","first_seen":"2026-10-03T16:51:28.507276Z","last_seen":"2026-10-03T16:51:28.507276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","size":49523,"data":"","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-10-03T21:29:36.449137Z","times_seen":2598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/p/cr.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"33cf6fdbde49f3d7291d7625925eab18","sha1":"d07f210d194074f979a99e8cfef0761a4fe2b992","sha256":"7d900d7a613221e562cff45a9bfa7c4980e8de502910a97216d87e5231ef3556","sha512":"184a57461722ce856cb3761f065c6a524d141986b70cd6ec432dc3e359ac8ae573219213b27a0f5774b90402e94d05224a1961fda8de32501af112beb6b95ee6","ssdeep":"6144:rYopTfsU72Ckckb1SVBwZ92udpXQl9QrrqEgLhA/lySk3Kth1mSYSVJbKzfM6PL0:sopTfFkckb1SVeZ929QrrqEgLhA/lySt","tlshash":"cf743cd533d3b826879591ba60374209f33659d92c08412cf57ce8e67be1d8522bbfb8","size":362500,"data":"","first_seen":"2026-10-01T16:39:33.029354Z","last_seen":"2026-10-03T16:51:28.430732Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/js/scripts.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"098db957e52b7cba7ebb9c726656a3b8","sha1":"6f957d2ee9b486d3e34132c98a9ca36c65b02999","sha256":"9ab327a1b2500b2d50c3567e7b4acd32e9521404f30bad79ec5a7ca83aaf8238","sha512":"29b39f7604f4eef77340d82d1e4fb598a2194d649e92516704604ad54d131a6beff572219de128c495765e206f1e3fc31002d7ad9b5c439734533e2d32a75ad9","ssdeep":"192:8P325PwIg9h2C0m0Jbh0m06x2T9tcLn2wR:M2tg9h2C7qbh7Px2TULn2wR","tlshash":"09f1b789f44030fd21ff2972263f6a166266656d8f0b825274bd86741d65f4213b3fa8","size":7516,"data":"","first_seen":"2023-03-07T15:09:03Z","last_seen":"2026-10-03T16:51:28.439681Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","fqdn":"ads.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e9c01939501c9c70f232e85c32a71ac","sha1":"de51b78e72f5794c10060fff0d82bb15d2fa9b64","sha256":"9d02edbf37d3481add6ba2b0a780a71ecf12fd79de97776f7bd4c36acf7358c7","sha512":"77db32421c54a1badd93118afaba36ae79070e10b8294755a63172a0a75b987829acb0a8494c293605ac1394258ae4c003144ebd2822ffdecb26acafe7c5ab69","ssdeep":"384:BZS7mYKvoR/gQjuYAr8oQsGAOXFdF2uiwCebnAAuzKCM9HSnyAIeCXmbOTfAHZ:B4KYP1gIudr8oQsGAeFD2uiwCebnAAux","tlshash":"e5825509a4a012a4036a2f6b32179dfdcd5b08b7395888d7f119ec3670fde16bbd6570","size":17955,"data":"","first_seen":"2026-10-02T23:13:33.864035Z","last_seen":"2026-10-03T16:51:28.449366Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-03T21:33:35.028367Z","times_seen":987492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/js/lightbox.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"535456c2412ae705b709b85c5707d109","sha1":"9700b42d7ecfc5472ee2dbee3d7a7f3e565e5719","sha256":"2a1e5f133bda3e06c7120cd15b93f918e47e43b57838d22dbb2f84fba0dc37d5","sha512":"02ca4661f1686a5fa328232ed60ee4b4b5b6325ec88525fea4e78a460a9847e4b88c1c5c4eecf48afe08633e538257aa9484251c5425fc98ed99da0897864d45","ssdeep":"","tlshash":"735191d466d2446158f311aa6936d71cef59590f8a07e612366dcb85eff380c9433ecc","size":3026,"data":"","first_seen":"2023-03-07T15:09:03Z","last_seen":"2026-10-03T16:51:28.442007Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/flat_pm/assets/front/script.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c946d568ebbcf1754d7fbccddd7a98bc","sha1":"165ff17898d79060eae61872578e76435f9e3283","sha256":"b18d900dda1992fb71d1f24b375487c4986c54844b21976a71d50996b2559aaf","sha512":"e3c1c5dbb290a97834753f62a6e85c6207380d894b6717a793f171902a0f5a0b90528186fc4f09798b65b27bae4d4e8c18140bb2528c3c5e806efeb973147d51","ssdeep":"384:698C3C3yGgoG4gPez39IrOty8a2SXpm2GmtMp/z1A4j8:698b3goGIT9IrOo2SXpmA+1A4o","tlshash":"91a2d80c7d7f34eb41be2179a4bb4346b1719ea4e903449c506ed81a1aa8f9b04b5ffc","size":22752,"data":"","first_seen":"2023-03-10T10:49:38Z","last_seen":"2026-10-03T16:51:28.455409Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbdbe8d2df2e35c10b3e74c4db234642","sha1":"0b97786e6d44be29eee2b66b284a19367efe8492","sha256":"6f51ca58fa7ace48c9208200af7dfe54b050f33ce1de67595558d73a47bef057","sha512":"689c535b09d2d4b2f4a990966fb4c1fe49233c4d80d53bb377e0db30f4550dba2d71fb622f91f7da79e07b052955c80105c8c4177f12233cc3c509d3e21357f7","ssdeep":"192:OKtzpZx3LtRxJKEJ0jgrjtEBol6nRPlqfYoxcP6iYox7S7L4M8OAXY:OKRXRyEJ08ruoUnR9qwgcug7S7sMXAXY","tlshash":"e412a9f432a1b8d411fb69d1086f1577017e7e06b80e295f872299d2ad244ce60f6fee","size":9291,"data":"","first_seen":"2026-09-23T08:35:42.861568Z","last_seen":"2026-10-03T21:29:36.551589Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/4e626c692f67b5b2.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f39bea07a57c662dfb44e56960b80ff0","sha1":"88f0b3667407bbab233a3377fb026fb30b15d51b","sha256":"da7ad644473b99822b5491ebc062e6d04282dc8a6909b489328a4798b40876da","sha512":"a349d3181ab52eb18d99a54fdcd2e4c5daa83a6e20fc4dee19e193b89dd8f0935fd384c0bb6e9a36b48dfb34b38543bea74cda0ad3ff986338fca8bb517a2d9e","ssdeep":"192:EjF4De2ofBy72SyAEQ4m2Bx7y1MpjRW6xMrkxC+xfZGK+WRAOz:EjmpoJyCzaGx7y1GjderkxKEAO","tlshash":"4142c8c8faa1b47142ea50e6407f0a0ab32db51e5419d428b65cdad26ff8c4f6136b3d","size":12833,"data":"","first_seen":"2026-10-02T23:13:33.811812Z","last_seen":"2026-10-03T16:51:28.45062Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"59fc03556cf43038b1fc1cb5356f7d4c","sha1":"4f292d63ef8c5d9a0ab71e2d24e4cfe55da98bee","sha256":"ca7d6f9172fe71823b6260184b7c9a81f4e48b70da2f0f09bce9a9185e42402d","sha512":"c6b2df7a64e29f5be2bda086f0ff8973c47d03baccdec1d1115a2f35636faa1b615e670186dfc46b4e551b5775cc9506ae3767eec5f0f11f970ca6e2d4043e03","ssdeep":"6144:zWRtA6Ma1dHZbyubMWZqrXwoA0UjAPalbMBfs9tJqIh3F0NomKWwJdzGqvNhbByl:FULqMuPHWM","tlshash":"d894c59db1e2f0a143e765a4803f5a0bf23b695578099090e361e9e1bc7899f9133f3d","size":434082,"data":"","first_seen":"2026-10-03T16:51:28.508877Z","last_seen":"2026-10-03T16:51:28.508877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-includes/js/jquery/jquery.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-03T21:33:35.014251Z","times_seen":1081089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/67c65ec07d5b9f5d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0be745b6483eccd5ce23aec3c68322ff","sha1":"8546ecd0eb557191e9814e383b5ef7e9bb1e3b1e","sha256":"82a146d7b6127b78193c6e75381aa7d5c6bb43b65bb7fe2b1aced7997659669b","sha512":"d205dea84f349db8b2a369c036fb8a82fe42d1e11f89718e91c8f18aacddae3847d669b3b58c409b6f4f1e53f19dd54575d4713934ea571f54db02b7d746e69e","ssdeep":"1536:h21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:vN1dfXIQkN+nF/JH9zf6","tlshash":"ee5475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","size":305380,"data":"","first_seen":"2026-10-02T19:54:59.572512Z","last_seen":"2026-10-03T21:29:36.611024Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2da940479dd1331d4761b4f6483c35aa","sha1":"f68170113f89301d8b4d914c5f8cfe7f847a9e55","sha256":"89b6a185ee2ce3a6cfb65aa4705ecf096434aaa2d8dcb55fbaff3cd7744d0604","sha512":"d0769783af7f21cfc03bc8cdb4c8bb2b9a0ec2a6136bcf1915b0f53acea5855b63216591fc8610460a231ad37c9a8eeae253bcb5244cb01b127eb275dd6175ef","ssdeep":"1536:1BD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0O:35SGX7g8BYlyp2z2BWoy5XiN","tlshash":"7e34c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","size":249149,"data":"","first_seen":"2026-09-23T08:35:42.799207Z","last_seen":"2026-10-03T21:29:36.577669Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/flat_pm/assets/front/load.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b9f42fbd785944dedc6ee2e9aca6a4c","sha1":"5949da8f5edd0239bc431028040b2be5643cd98f","sha256":"ec2b01c03e86832e3a8fae31505180badce2757b2d7a0b397546bf09159cd142","sha512":"6d7897196cdb2b8f88018bf25cb298546ef0c929b8ce9f1a832effe093a2b47fced69c662ee99532ca03b20a4170c238c497def4daa87723ae14f7dfb4960804","ssdeep":"","tlshash":"fdc0120436e5500c59314266f27f473930702e560c21c146a50a44973da804e7855475","size":179,"data":"","first_seen":"2023-03-10T10:49:38Z","last_seen":"2026-10-03T16:51:28.436289Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d033e493ad2e9da3812570895aec289d","sha1":"38e70c3e236f9d1e6531f256ad8289e1563dc2f2","sha256":"c07b2bd1d615afe8034aa7c541e025cc651585b85d17b65b4ef6adbb07d2f46d","sha512":"6e14198915ed839332dedbf7cdb1743fea9d50c66dcf487c7c640a98cb76f4214c0c36c58123e37c67459895599666ba0afbf6590d8b9a9c9ea4be7317c2bad6","ssdeep":"6144:zWRtA6Ma1dHZbyubMWZqrXwovc0UjAPalbMBfs9tJqIh3F0NomKWwJdzGqvNhbBy:ZULqMuPHWM","tlshash":"6894c59db1e2f0a143e765a4803f5a0bf23b695578099090e361e9e1bc7899f9133f3d","size":433406,"data":"","first_seen":"2026-10-03T16:51:28.452598Z","last_seen":"2026-10-03T16:51:28.452598Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/root-scripts-js-extra","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d47bb5c4e33102e8988fb30ab8627bf","sha1":"16b26bcb4b61ef2fa18d4dcb1392796948408f2f","sha256":"b44ac187a669c01d8e96e7baea2e6e08e0f42f06942a9c1578854dd7e8ebd1bb","sha512":"953b34be89c578f68861d31a41ec0a50379dadab96742ba1d4ee718d741b9f0bda3081e13a9fe1d2c69597ca79f179d1e92bbc91a848cb6bfbcf056cc879062b","ssdeep":"","tlshash":"a2f07d40c1d40e5d119269b2cc348b7f17dc4052ec50df246e1cc847be252109a50649","size":517,"data":"","first_seen":"2026-10-03T16:50:12.215746Z","last_seen":"2026-10-03T16:51:28.510626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Ads by Google is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713726 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://instagram-my.ru/wp-includes/js/jquery/jquery-migrate.min.js","line_number":2,"column_number":981},{"level":"warn","text":"Ads by Google is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713726 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Ads by Google is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713726 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Ads by Google is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713726 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Ads by Google is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713726 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"log","text":"","filename":"https://instagram-my.ru/wp-content/themes/root/js/scripts.min.js","line_number":1,"column_number":4438},{"level":"warn","text":"Ads by Google is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713726 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"info","text":"CONTAINER_IS_HIDDENContainer with id \"adfox_16777472261575453\" is hidden","filename":"https://yandex.ru/ads/system/context.js","line_number":2,"column_number":274162},{"level":"error","text":"PAGE_DISABLEDPage \"482166\" is disabled","filename":"https://yandex.ru/ads/system/context.js","line_number":2,"column_number":68234},{"level":"error","text":"PAGE_DISABLEDPage \"482166\" is disabled","filename":"https://yandex.ru/ads/system/context.js","line_number":2,"column_number":68234},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"warn","text":"Not supported in this browser","filename":"https://cdn1.moe.video/p/cr.js","line_number":17,"column_number":1990},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"warn","text":"Not supported in this browser","filename":"https://cdn1.moe.video/p/cr.js","line_number":17,"column_number":1990},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707},{"level":"log","text":"0","filename":"https://ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","line_number":1,"column_number":15707}]},"http":[{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/sync/myvideo","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.879Z","timestamp":1791046249879,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"GET /api/sync/myvideo HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.20.1\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://rtb.moe.video/cs?d=14\u0026b=07a95bbd-90ba-4cea-8401-9c07aa2aae23\r\nSet-Cookie: afp_cookie=gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$; expires=Tue, 03 Nov 2026 16:50:50 GMT; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":[{"name":"afp_cookie","value":"gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$","quoted":false,"path":"/","expires":"2026-11-03T16:50:50Z","raw_expires":"Tue, 03 Nov 2026 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"afp_cookie=gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$; expires=Tue, 03 Nov 2026 16:50:50 GMT; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":59,"send":0,"wait":60,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=mvban","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"37.0.127.200","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.921Z","timestamp":1791046249921,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ohmy.bid","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 12:44:37 GMT","end":"Sat, 14 Nov 2026 12:44:36 GMT"},"fingerprint":{"sha1":"89:03:22:0A:9C:A0:DB:97:BD:88:7E:F8:09:21:2B:57:21:9D:6C:3C","sha256":"F2:ED:AD:F8:0C:5C:87:A5:F4:98:C5:C0:FD:38:F6:2C:C2:52:CF:4A:C4:DA:51:6A:A8:F4:A6:93:DC:2E:0B:40"}}},"request":{"raw":"GET /cm?ssp=mvban HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-04 1.2482.9cf8ac14\r\nLocation: https://rtb.moe.video/cs?d=32\u0026b=0ced72b3-87dd-4892-9f93-a682db3c5967\r\nSet-Cookie: uid=0ced72b3-87dd-4892-9f93-a682db3c5967.6ac1326a.39c6918d858c4eea; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;\nscm=110.5179; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"0ced72b3-87dd-4892-9f93-a682db3c5967.6ac1326a.39c6918d858c4eea","quoted":false,"path":"/","domain":".ohmy.bid","expires":"2026-11-02T16:50:50Z","raw_expires":"Mon, 02-Nov-2026 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=0ced72b3-87dd-4892-9f93-a682db3c5967.6ac1326a.39c6918d858c4eea; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;"},{"name":"scm","value":"110.5179","quoted":false,"path":"/","domain":".ohmy.bid","expires":"2026-11-02T16:50:50Z","raw_expires":"Mon, 02-Nov-2026 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"scm=110.5179; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":1,"connect":67,"send":0,"wait":66,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openrtb.skcrtxr.com/request-ad","fqdn":"openrtb.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"62.84.119.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:57.723Z","timestamp":1791046257723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"POST /request-ad HTTP/1.1\r\nHost: openrtb.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 584\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\nserver: ycalb\r\ndate: Sat, 03 Oct 2026 16:50:57 GMT\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-gateway: REJECTED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":1386,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":41,"send":0,"wait":45,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=22","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"213.171.19.191","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.899Z","timestamp":1791046249899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:17:37 GMT","end":"Wed, 30 Dec 2026 04:17:36 GMT"},"fingerprint":{"sha1":"08:B0:E8:D5:A3:54:66:9D:2E:A4:61:E6:57:11:FD:28:2F:4C:AB:96","sha256":"06:24:A7:58:B0:C9:24:01:F0:3F:6B:47:62:37:B4:B7:9A:30:44:A8:BE:8B:67:F7:92:F9:20:82:47:61:14:45"}}},"request":{"raw":"GET /sync?ssp=22 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.24.0\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\nset-cookie: preadspector=1; Expires=Mon, 02 Nov 2026 19:50:50 GMT; Domain=.adspector.io; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"preadspector","value":"1","quoted":false,"path":"/","domain":".adspector.io","expires":"2026-11-02T19:50:50Z","raw_expires":"Mon, 02 Nov 2026 19:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"preadspector=1; Expires=Mon, 02 Nov 2026 19:50:50 GMT; Domain=.adspector.io; SameSite=None; Secure; Path=/"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":507,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":3,"connect":51,"send":0,"wait":93,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ia.box/match/mvssp_match?eid=57dd2cd5f9356ac13269\u0026tid=db0j4qgfubp6r7tr8el0\u0026rid=B781B894FukaEWFrj9qS5ZfCJV","fqdn":"ia.box","domain":"ia.box","tld":"box"},"ip":{"addr":"5.9.56.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.278Z","timestamp":1791046250278,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ia.box","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 05:26:32 GMT","end":"Tue, 08 Dec 2026 05:26:31 GMT"},"fingerprint":{"sha1":"17:2C:B1:BC:16:67:1F:E3:A9:04:75:D7:11:58:FA:1A:B0:32:31:AB","sha256":"26:37:18:20:82:33:B5:B6:CF:8B:BC:C2:01:46:2A:7C:DD:01:2A:C3:68:B2:53:37:F5:6A:56:7A:2E:31:D9:01"}}},"request":{"raw":"GET /match/mvssp_match?eid=57dd2cd5f9356ac13269\u0026tid=db0j4qgfubp6r7tr8el0\u0026rid=B781B894FukaEWFrj9qS5ZfCJV HTTP/1.1\r\nHost: ia.box\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://instagram-my.ru/\r\nConnection: keep-alive\r\nCookie: rid=B781B894FukaEWFrj9qS5ZfCJV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"rid","value":"B781B894FukaEWFrj9qS5ZfCJV"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.29.2\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":418,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-includes/css/dashicons.min.css","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.121Z","timestamp":1791046227121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Dec 2025 23:35:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69360f31-e67c\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59004,"size_decoded":35984,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-10-03T21:34:49.176639Z","times_seen":76697,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/4ea448d4aec4c4ad.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.144Z","timestamp":1791046228144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307056/4ea448d4aec4c4ad.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 31582\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Mon, 02 Oct 2056 22:16:18 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 02 Oct 2026 17:29:34 GMT\r\netag: \"3bf6ce83f7f734b81ff770e7ace47fc6\"\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nx-strm-log-split: 8\r\nx-request-id: 8fec32f4d7ed5aa2\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155385,"size_decoded":32477,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"213d0423f728797a2435eceb834ec451","sha1":"8be33cbedf1093d23fa2456633778068e94ac227","sha256":"11f0908fe4b5a14e0eda6b7906118c3a5e502c3dde03bf94902e71ff05410e89","sha512":"023b5cfffda8dd14e013317960377bb3909679b45e52c18ddf7667bfc459057f3bbfcb139a1d2c1fa4d71cf1880404a72a650f0017011c2bfd61839a7bbbb7eb","ssdeep":"3072:lIJjYLoWgQQ80Qy1bCiTCZW3hUGWiWB8d2rrKAl5BcZa7Mdw/h2uchqM7bGrMFGM:lIJZWgQQ80Qy1bCiTCZW3hUGWiWB8Mrw","tlshash":"6be3d78db2e1b4b142d7a0f5503f660bf33a6459a4098494b72de9e16fb898e4137f3c","first_seen":"2026-10-02T19:54:59.53559Z","last_seen":"2026-10-03T21:29:36.552251Z","times_seen":59,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/js/swiper.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.164Z","timestamp":1791046227164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/themes/root/js/swiper.min.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60554904-1e727\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124711,"size_decoded":32765,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65260), with CRLF line terminators","md5":"7dbc7c098c7ec9306dd8bb5e4e9e9343","sha1":"a01d40dea1d1240404fe3510c9d28353efd470bc","sha256":"7481ca08ab9f3cba9123f51023007c2132b1b31c09009c0a9dca77c1c2c98631","sha512":"0725f8bf116c387c1c4e8ab4c253439f277cf89c1ab169f416038e8f1cbdfac3bfdb5fb1cae2edd442748c0e5352bcf95a6bc1d06514c11626b4f84fb89b8316","ssdeep":"1536:WApNsiJ532VXrtnTN0K8V7wluJTryZjk5PuFzLlvp0XvH7WcWUwcPqYbsE8EtOb2:mVXrfX67F2mgLlufH7WcWUwcPquza2","tlshash":"40c31849b35071d551e72256539ed601a3b62805b90ac1a831b2dcdbacbde8c03bfefd","first_seen":"2023-03-10T12:16:22Z","last_seen":"2026-10-03T16:51:28.423198Z","times_seen":105,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd","fqdn":"1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"185.115.93.201","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.305Z","timestamp":1791046249305,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 25 May 2026 07:36:56 GMT","end":"Thu, 10 Dec 2026 07:36:56 GMT"},"fingerprint":{"sha1":"BA:DF:B2:60:EF:C7:F2:20:08:8F:BA:68:E4:59:E9:BB:21:27:0D:57","sha256":"FC:7E:C5:6E:44:BB:A2:72:57:C7:4D:EE:6D:23:28:EB:B6:F3:B1:B1:82:D3:6A:91:12:0C:A2:85:BA:AF:EB:CA"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd HTTP/1.1\r\nHost: 1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: Angie/1.11.2\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Length: 0\r\nConnection: close\r\nlocation: https://sync.upravel.com/image?source=pbd\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Orig-Url: https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie:1.11.2","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":52,"connect":32,"send":0,"wait":31,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.158Z","timestamp":1791046250158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn-c.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=259200\r\netag: W/\"b2a18943ab7a5eb4dccf94ce4a7ba65d\"\r\nlast-modified: Thu, 24 Sep 2026 08:35:11 GMT\r\nx-amz-request-id: 04cef1213a1319ff\r\ncontent-encoding: gzip\r\nx-cdn-request-id: e99350a38c474305d5d77e185444c03c\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190091,"size_decoded":58853,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b2a18943ab7a5eb4dccf94ce4a7ba65d","sha1":"4e9649c9ded068ebab5450fc01e8e219a4fab87e","sha256":"31135c3c3439a66a081057a00d9a1276bc3fb98a031a07149995e8a6d855be62","sha512":"f434a793629e7744c30298af6a96ef4627755529c21a8a01f580c723772fd961ebafe6e3c1dcdd2fe1fd7a092c1fd0ceb419f9a9f2415ba4f75a0874998599ca","ssdeep":"3072:QCeuNLCB20XEoQWjZ5DAQ47GK8Y9KnRTp0oe2hPP5/vLugzdxRveg2lSZfW7HuBP:Ku5C1XEoVZRAQ47GK8Y9KnRTpLe2hPhz","tlshash":"aa043bccb2d6706243a761b5407f560bb23a6a89740c8420f169d8e97cb8e4e537bf7d","first_seen":"2026-09-25T00:39:36.123835Z","last_seen":"2026-10-03T16:51:28.424989Z","times_seen":9,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":30,"connect":19,"send":0,"wait":26,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.programmatica.com/match/Adspector_banners?id=NGI3MWJhNWRlYWFhZDM3YQ","fqdn":"sync.programmatica.com","domain":"programmatica.com","tld":"com"},"ip":{"addr":"77.246.157.204","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.178Z","timestamp":1791046250178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.programmatica.com","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Jun 2026 20:16:19 GMT","end":"Fri, 15 Jan 2027 11:04:46 GMT"},"fingerprint":{"sha1":"55:9F:4A:5D:72:57:BB:59:EC:B3:50:B1:D1:BE:46:0F:92:6D:5E:68","sha256":"DF:5D:25:B5:BF:C8:0E:1F:5B:9B:C1:4D:4E:60:B6:4B:A2:8B:99:76:09:1F:B1:53:B0:F0:18:22:38:BA:E6:24"}}},"request":{"raw":"GET /match/Adspector_banners?id=NGI3MWJhNWRlYWFhZDM3YQ HTTP/1.1\r\nHost: sync.programmatica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1; pid=MmJjOTQ5NWVkZjM5OWIwNw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1"},{"name":"pid","value":"MmJjOTQ5NWVkZjM5OWIwNw"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://cm.pxltag.com/sync?platform_id=7087330adc7149cc9dc5d2fd46ff81c1\u0026external_id=MmJjOTQ5NWVkZjM5OWIwNw\r\nset-cookie: pid=MmJjOTQ5NWVkZjM5OWIwNw; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.programmatica.com; path=/; secure; SameSite=None\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: PUT,GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"MmJjOTQ5NWVkZjM5OWIwNw","quoted":false,"path":"/","domain":".programmatica.com","expires":"2028-04-03T16:50:50Z","raw_expires":"Mon, 03 Apr 2028 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=MmJjOTQ5NWVkZjM5OWIwNw; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.programmatica.com; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/uploads/2019/10/instalogo.png","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.184Z","timestamp":1791046227184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/instalogo.png HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 5954\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-1742\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5954,"size_decoded":6259,"mime_type":"image/png","magic":"PNG image data, 60 x 61, 8-bit/color RGBA, non-interlaced","md5":"23e6bd24e26da21146278a56ac81b055","sha1":"0c0fcea95891ffb7d0be265d6200bfba0006d2b9","sha256":"c9e7d9b4f662ae9fb4707934fd3fc76bb188285fbdadd6d858dbdadbfee920b5","sha512":"5639a285476b029c5ad78bf62826062d99945a7468260a85688b4d9fb2a26da95217525ef12dffa473c9d1e85df1a7ae056f2ca6514f892ea458eb0db252cb43","ssdeep":"96:k2QQ0VNaSBoXtRZJgKh7QX5wjPOfIK31dzsFyW57UQPHdx5o2U+Ietn6AGMvc72Y:sQeN7ByZJPjPOfxLAFL7UyjUvW1p0boO","tlshash":"cac16c4a7c041fc1098d7dd2e8f3220f8eb7d091c8352838628fc82b85769e879bb5d6","first_seen":"2023-05-01T22:48:08Z","last_seen":"2026-10-03T16:51:28.426654Z","times_seen":12,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/uploads/2019/10/Logotip-seti-Instagram.png","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.188Z","timestamp":1791046227188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/Logotip-seti-Instagram.png HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 9668\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-25c4\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9668,"size_decoded":9973,"mime_type":"image/png","magic":"PNG image data, 200 x 198, 8-bit colormap, non-interlaced","md5":"47250d5c3d4553bef96f871b89490331","sha1":"caca3971bf0882116af66385b5840e28d42db7de","sha256":"397ad014e81f59cc5f1e64a1a32711d8757d6e82024cab55a8e82e7bba81e2cd","sha512":"8a29cc40c84ca4c6703815b8b9713c487543c491d15ee8febf8396f69ed5328e2ed7b774747aa2738778e4086c8d6cdad87492b8b55378eb5feda405bb5bace7","ssdeep":"192:H2S4CXXXnGV3JSolPwl4DORN/RcVpK87ywFUv81ibf:thXXXS3JSoGpRNJcVpTW04bf","tlshash":"fe12afe60ef809ea55171414da4bf9a5f12ee28af4cd9f804707ad994bb0dc400aac79","first_seen":"2023-09-18T17:08:33Z","last_seen":"2026-10-03T16:51:28.428169Z","times_seen":12,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.571Z","timestamp":1791046227571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/themes/root/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/wp-content/themes/root/css/style.min.css\r\nCookie: flat_r_mb=%2F%2F%2F%3Adirect\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"flat_r_mb","value":"%2F%2F%2F%3Adirect"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 77160\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-12d68\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":77480,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-10-03T21:33:41.392474Z","times_seen":547463,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t.dsp.abdm.ru/sync/moevideo?r=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D69%26b%3D%24%7BUID%7D","fqdn":"t.dsp.abdm.ru","domain":"abdm.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.949Z","timestamp":1791046249949,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sync/moevideo?r=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D69%26b%3D%24%7BUID%7D HTTP/1.1\r\nHost: t.dsp.abdm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/MoeVideo?id=57dd2cd5f9356ac13269\u0026chk=1","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"212.41.11.130","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.216Z","timestamp":1791046250216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dvgroup.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 11:32:37 GMT","end":"Sun, 13 Dec 2026 11:32:36 GMT"},"fingerprint":{"sha1":"DA:FC:81:9E:90:07:C6:86:A3:6A:C5:FC:B3:78:2B:09:BD:C9:07:5A","sha256":"E7:B0:B5:1D:C1:25:65:56:39:81:D1:AC:FE:37:98:B8:54:46:B9:1D:43:52:22:E6:3B:3C:AE:10:81:88:B8:BC"}}},"request":{"raw":"GET /match/MoeVideo?id=57dd2cd5f9356ac13269\u0026chk=1 HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://rtb.moe.video/cs?d=42\u0026b=kkueydzsmxltq---1\r\nset-cookie: pid=kkueydzsmxltq---1; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.dvgroup.com; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"kkueydzsmxltq---1","quoted":false,"path":"/","domain":".dvgroup.com","expires":"2028-04-03T16:50:50Z","raw_expires":"Mon, 03 Apr 2028 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=kkueydzsmxltq---1; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.dvgroup.com; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/gpmdata/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:59.021Z","timestamp":1791046259021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /gpmdata/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://tms.gpmdata.ru/?dmpkit_cid=81460eb5-647b-4d9b-a3e3-7863f294c3da\u0026dmpkit_evid=4a608d62-b43e-464c-ba40-a2d2ff300693\u0026dsp_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\u0026ru=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dgpmdata\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/p/cr.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.436Z","timestamp":1791046228436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.moe.video","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 08:13:46 GMT","end":"Tue, 10 Nov 2026 08:13:45 GMT"},"fingerprint":{"sha1":"21:99:67:8A:A4:28:04:7D:FE:58:13:D6:B2:C3:7F:07:6A:E6:07:E4","sha256":"5B:3E:2C:AA:FB:70:63:1D:69:D4:43:E2:67:39:1A:42:F4:87:C2:E8:71:7A:85:A7:77:FD:A0:5C:60:13:52:75"}}},"request":{"raw":"GET /p/cr.js HTTP/1.1\r\nHost: cdn1.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:48 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Saturday, 03-Oct-2026 16:42:56 GMT\r\nexpires: Sat, 03 Oct 2026 17:20:48 GMT\r\ncache-control: max-age=1800\r\ncache: HIT\r\nx-cached-since: 2026-10-03T16:42:56+00:00\r\nx-node: m9-up-gc97\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362500,"size_decoded":115436,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51594)","md5":"33cf6fdbde49f3d7291d7625925eab18","sha1":"d07f210d194074f979a99e8cfef0761a4fe2b992","sha256":"7d900d7a613221e562cff45a9bfa7c4980e8de502910a97216d87e5231ef3556","sha512":"184a57461722ce856cb3761f065c6a524d141986b70cd6ec432dc3e359ac8ae573219213b27a0f5774b90402e94d05224a1961fda8de32501af112beb6b95ee6","ssdeep":"6144:rYopTfsU72Ckckb1SVBwZ92udpXQl9QrrqEgLhA/lySk3Kth1mSYSVJbKzfM6PL0:sopTfFkckb1SVeZ929QrrqEgLhA/lySt","tlshash":"cf743cd533d3b826879591ba60374209f33659d92c08412cf57ce8e67be1d8522bbfb8","first_seen":"2026-10-01T16:39:33.029354Z","last_seen":"2026-10-03T16:51:28.430732Z","times_seen":6,"resource_available":true,"data":null}},"time_used":40567,"timings":{"blocked":0,"dns":20212,"connect":20251,"send":0,"wait":49,"receive":-1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.079Z","timestamp":1791046249079,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /pbd/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://sync.upravel.com/pbd/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly9pbnN0YWdyYW0tbXkucnUvIl19fQ==\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: session_tptc=1791046249212;SameSite=None;Secure; Max-Age=180; Domain=.upravel.com; Path=/; Version=1\nsession_tptc-legacy=1791046249212; Max-Age=180; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212","quoted":false,"path":"/","domain":".upravel.com","max_age":180,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"session_tptc=1791046249212;SameSite=None;Secure; Max-Age=180; Domain=.upravel.com; Path=/; Version=1"},{"name":"session_tptc-legacy","value":"1791046249212","quoted":false,"path":"/","domain":".upravel.com","max_age":180,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"session_tptc-legacy=1791046249212; Max-Age=180; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":2,"connect":38,"send":0,"wait":46,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/sync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026external_id=57dd2cd5f9356ac13269","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.935Z","timestamp":1791046249935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:45:37 GMT","end":"Sun, 13 Dec 2026 13:45:36 GMT"},"fingerprint":{"sha1":"C1:28:84:D9:3C:21:08:3C:B4:D3:58:6A:79:07:F5:53:5F:F5:90:1F","sha256":"5C:EC:53:1B:2B:EC:3C:74:85:A8:66:B3:11:FF:9E:47:EE:35:42:9E:1C:41:CF:82:F9:6A:14:44:75:AA:59:7D"}}},"request":{"raw":"GET /sync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026external_id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nset-cookie: smi_uid=uro7hyku1; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"smi_uid","value":"uro7hyku1","quoted":false,"path":"/","domain":".pxltag.com","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"smi_uid=uro7hyku1; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":392,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":74,"dns":0,"connect":36,"send":0,"wait":97,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=32\u0026b=0ced72b3-87dd-4892-9f93-a682db3c5967","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.226Z","timestamp":1791046250226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=32\u0026b=0ced72b3-87dd-4892-9f93-a682db3c5967 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/vpaid/error","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:57.868Z","timestamp":1791046257868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /vpaid/error HTTP/1.1\r\nHost: cdn.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:57 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\nx-cdn-request-id: 385c3b98840ed9ba614aa9d67f700ddf\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":437,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_ins?id=%24%7BUSER_ID%7D\u0026chk=1","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.095Z","timestamp":1791046250095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_ins?id=%24%7BUSER_ID%7D\u0026chk=1 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://exchange.buzzoola.com/cookiesync/dsp/adspector-banner-new?uid=NWIzMjA0OTRiYzg0MGMxOQ\r\nset-cookie: pid=NWIzMjA0OTRiYzg0MGMxOQ; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.adsp.io; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"NWIzMjA0OTRiYzg0MGMxOQ","quoted":false,"path":"/","domain":".adsp.io","expires":"2028-04-03T16:50:50Z","raw_expires":"Mon, 03 Apr 2028 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=NWIzMjA0OTRiYzg0MGMxOQ; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.adsp.io; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/wrapper-builder/placement/4ab34668-74ba-416a-b94a-af3045b3df73?v=d-1790768202\u0026rxt-host=instagram-my.ru","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:57.676Z","timestamp":1791046257676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper-builder/placement/4ab34668-74ba-416a-b94a-af3045b3df73?v=d-1790768202\u0026rxt-host=instagram-my.ru HTTP/1.1\r\nHost: cdn.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://instagram-my.ru\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: b507919bd62f8c4656c42e83bac5c6c7\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2032,"size_decoded":1045,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e4b085af13ac090041e4ccbdff91d369","sha1":"ebb490db25edc23078d9a5f08fd988dca3c0f05b","sha256":"4618844876d9a87538bc957cf5b902332d736d03226626343a34b9a9750f9d92","sha512":"615de0eee0779a129c5985ee1433323d70159c393fc6c529a9acd1ab06bd350c1d138d0d3ca8ca8b9c47ea314d8f2557b5b86a69f2353792e3b5ad5ff731d1a5","ssdeep":"","tlshash":"2e4176462124c6fdaadd4f85cbee2abc05e2220f70cd9c30046dcbb562d64c863a370a","first_seen":"2026-06-09T14:10:43.849526Z","last_seen":"2026-10-03T16:51:28.432045Z","times_seen":90,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=gpmdata","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:59.326Z","timestamp":1791046259326,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /image?source=gpmdata HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://sync.upravel.com/aidata/sync\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-v.skcrtxr.com/wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru","fqdn":"cdn-v.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.89.224","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.812Z","timestamp":1791046249812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru HTTP/1.1\r\nHost: cdn-v.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-type: text/xml; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://instagram-my.ru\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: 812f25cf8e72b0346e98f2f56498296e\r\nx-cdn-edge-id: 2005\r\nx-cdn-edge-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2964,"size_decoded":1452,"mime_type":"text/xml; charset=utf-8","magic":"ASCII text, with very long lines (508)","md5":"72c4b307552dfac1e03e8f5d23efb38a","sha1":"faf57f982f301ccb1fc0b927083e61493cd83e24","sha256":"2f6d6140b8a7139ca86fb547512ca03caa6f815c742b10c5acbb43a39fd75511","sha512":"0d248d5ef8dce6dfed36ba96e5a5a292cfefe72ee434d29585e611cd50548b320203358669ae47a884357abb544f15af6ee55e32b07ac41ff3ece76a00dad1be","ssdeep":"","tlshash":"a7519cb601ed6db90d9540dc7a91f78443ff0cff2b9095a6f0378ca59601d63ba251a8","first_seen":"2026-10-03T16:50:12.14901Z","last_seen":"2026-10-03T16:51:28.433057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":30,"connect":63,"send":0,"wait":70,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/vpaid/error","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:59.064Z","timestamp":1791046259064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /vpaid/error HTTP/1.1\r\nHost: cdn.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:59 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\nx-cdn-request-id: 2cab5dcb182cc4d8a48efe5ee3ce5675\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":437,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tms.gpmdata.ru/?dmpkit_cid=81460eb5-647b-4d9b-a3e3-7863f294c3da\u0026dmpkit_evid=4a608d62-b43e-464c-ba40-a2d2ff300693\u0026dsp_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\u0026ru=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dgpmdata","fqdn":"tms.gpmdata.ru","domain":"gpmdata.ru","tld":"ru"},"ip":{"addr":"62.105.142.42","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:59.114Z","timestamp":1791046259114,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpmdata.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Jul 2026 22:32:06 GMT","end":"Mon, 12 Oct 2026 22:32:05 GMT"},"fingerprint":{"sha1":"DC:2A:20:E2:D4:F4:69:1C:CC:38:80:1E:7A:41:8E:DA:46:2B:96:24","sha256":"1D:6A:35:E0:CD:FA:03:85:D6:F5:74:E4:02:64:DE:0C:AB:5D:34:CE:C9:BA:88:EB:CB:6F:15:EE:E5:D8:8D:7E"}}},"request":{"raw":"GET /?dmpkit_cid=81460eb5-647b-4d9b-a3e3-7863f294c3da\u0026dmpkit_evid=4a608d62-b43e-464c-ba40-a2d2ff300693\u0026dsp_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\u0026ru=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dgpmdata HTTP/1.1\r\nHost: tms.gpmdata.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 0\r\nLocation: https://sync.upravel.com/image?source=gpmdata\r\nPragma: no-cache\r\nSet-Cookie: dmpuid=AaECrRJXdk-RLb9hFp42lw; Path=/; Domain=gpmdata.ru; Expires=Tue, 02 Oct 2029 16:50:59 GMT; Max-Age=94608000; Secure; SameSite=None\r\nX-Trace-Id: dfd92cb5033a00fb40c3a4fda59ef14c\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: HEAD, GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Accept,Cache-Control,Content-Type,DNT,If-None-Match,Last-Modified,If-Modified-Since,Keep-Alive,Origin,User-Agent,Vary,X-Mx-ReqToken,X-Requested-With,x-dmpkit-onbehalf-of\r\nAccess-Control-Expose-Headers: Location\r\n\r\n","headers":null,"cookies":[{"name":"dmpuid","value":"AaECrRJXdk-RLb9hFp42lw","quoted":false,"path":"/","domain":"gpmdata.ru","expires":"2029-10-02T16:50:59Z","raw_expires":"Tue, 02 Oct 2029 16:50:59 GMT","max_age":94608000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"dmpuid=AaECrRJXdk-RLb9hFp42lw; Path=/; Domain=gpmdata.ru; Expires=Tue, 02 Oct 2029 16:50:59 GMT; Max-Age=94608000; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":2,"connect":48,"send":0,"wait":51,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.120Z","timestamp":1791046227120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Dec 2025 21:57:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6935f849-1549d\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87197,"size_decoded":13334,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"2c4b48aec258405bb81139cf4cffb071","sha1":"a01e012918bd564df9be93b5bd51513cdaf82b90","sha256":"f7d8bdb5bf762757fcd7236c8c80e1b6ad1ac74241bc77f75baf42cebd79ec93","sha512":"78dbc68d0cd8b8d9c7c50f55a813b54c2e322f58a9e3be8145a441c2962857f8f9b5a7744ede00ad713e9c501778a86f91c89df5d62e61b6fcb107d7236bc3aa","ssdeep":"768:4DuiFi5Kw1dwhMAKl3+K6VWEgAXuHc49UQ:oi5iMp+K6w7AnQ","tlshash":"02839190a0323081263ec33db149ad8e1b7df17a97d34d9eb0dada1c87add750b53a16","first_seen":"2025-08-27T09:46:36.061615Z","last_seen":"2026-10-03T17:27:18.771548Z","times_seen":2728,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/integration/mail.adman.vpaid.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.584Z","timestamp":1791046249584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.moe.video","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 08:13:46 GMT","end":"Tue, 10 Nov 2026 08:13:45 GMT"},"fingerprint":{"sha1":"21:99:67:8A:A4:28:04:7D:FE:58:13:D6:B2:C3:7F:07:6A:E6:07:E4","sha256":"5B:3E:2C:AA:FB:70:63:1D:69:D4:43:E2:67:39:1A:42:F4:87:C2:E8:71:7A:85:A7:77:FD:A0:5C:60:13:52:75"}}},"request":{"raw":"GET /integration/mail.adman.vpaid.js HTTP/1.1\r\nHost: cdn1.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:49 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Saturday, 03-Oct-2026 16:42:45 GMT\r\nexpires: Sat, 03 Oct 2026 17:20:49 GMT\r\ncache-control: max-age=1800\r\ncache: HIT\r\nx-cached-since: 2026-10-03T16:42:45+00:00\r\nx-node: m9-up-gc97\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5538,"size_decoded":2473,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (5538), with no line terminators","md5":"2d18b1332b42c3023d7cfe6e8a7b9df3","sha1":"bfe8937334334ed9e7db3071af3c8c2a7aecc991","sha256":"2a4a3e0dc384d6935914c37eded9c9283dbd41ad308a6cdf513b00c00b75f084","sha512":"91b9e8e960ef4669a886590b6a40845fb0b7fadf830964004d11006155b332652eb5168c39bf9349a5a4e6e077113939c9e8e5baf6f7547bcc08ed7690e75eae","ssdeep":"96:FFPDiJW6HOVUgJ8WZW4ACzisCcTa/BxZt5Gir3YDQr3HKW6HM3s24XiWXNNa33WL:/PDiJW6HOVUgJ8WZWehdTa/BjGK3YDQA","tlshash":"32b10325324658aa5ec0419ea8270749a61063e82a1d842cfdbdfceb94ccc0e7d7c7bd","first_seen":"2026-07-03T22:51:02.738426Z","last_seen":"2026-10-03T16:51:28.435631Z","times_seen":167,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=pbd","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.926Z","timestamp":1791046258926,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /image?source=pbd HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://sync.upravel.com/gpmdata/sync\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/vpaid/error","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:01.053Z","timestamp":1791046261053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /vpaid/error HTTP/1.1\r\nHost: cdn.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:51:01 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\nx-cdn-request-id: 22322040cc31cbb73c59d9316c5043d6\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":437,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/flat_pm/assets/front/load.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.174Z","timestamp":1791046227174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/plugins/flat_pm/assets/front/load.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 179\r\nlast-modified: Wed, 07 Apr 2021 21:20:39 GMT\r\netag: \"606e2227-b3\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":179,"size_decoded":496,"mime_type":"application/x-javascript","magic":"ASCII text, with no line terminators","md5":"7b9f42fbd785944dedc6ee2e9aca6a4c","sha1":"5949da8f5edd0239bc431028040b2be5643cd98f","sha256":"ec2b01c03e86832e3a8fae31505180badce2757b2d7a0b397546bf09159cd142","sha512":"6d7897196cdb2b8f88018bf25cb298546ef0c929b8ce9f1a832effe093a2b47fced69c662ee99532ca03b20a4170c238c497def4daa87723ae14f7dfb4960804","ssdeep":"","tlshash":"fdc0120436e5500c59314266f27f473930702e560c21c146a50a44973da804e7855475","first_seen":"2023-03-10T10:49:38Z","last_seen":"2026-10-03T16:51:28.436289Z","times_seen":14,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/amberdata/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.604Z","timestamp":1791046249604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /amberdata/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://dmg.digitaltarget.ru/1/6401/i/i?a=685\u0026e=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\u0026i=9108422681581394\u0026c=up:133cc4b0-2c33-4288-8ebd-0476d9dcc20d.ss:685\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.tds.bid/api/v1/sync?ssp_id=13\u0026ssp_uid=57dd2cd5f9356ac13269","fqdn":"ads.tds.bid","domain":"tds.bid","tld":"bid"},"ip":{"addr":"89.219.34.76","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.948Z","timestamp":1791046249948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.tds.bid","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 18:44:16 GMT","end":"Thu, 19 Nov 2026 18:44:15 GMT"},"fingerprint":{"sha1":"8D:64:48:F0:E5:4E:AB:18:85:3B:42:BF:DD:89:B7:BD:DE:17:02:2F","sha256":"13:B2:B4:01:44:20:63:34:66:E3:36:42:98:00:1B:80:16:DC:DA:B8:07:04:38:4A:AF:4B:E1:3D:7F:B0:C5:FF"}}},"request":{"raw":"GET /api/v1/sync?ssp_id=13\u0026ssp_uid=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: ads.tds.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://rtb.moe.video/cs?d=68\u0026b=4888974b-72c8-4bd7-b225-4e45c46755bb\r\nset-cookie: tds_bid_uid=4888974b-72c8-4bd7-b225-4e45c46755bb; Domain=.tds.bid; HttpOnly; Max-Age=31536000; Path=/; SameSite=none; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"tds_bid_uid","value":"4888974b-72c8-4bd7-b225-4e45c46755bb","quoted":false,"path":"/","domain":".tds.bid","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"tds_bid_uid=4888974b-72c8-4bd7-b225-4e45c46755bb; Domain=.tds.bid; HttpOnly; Max-Age=31536000; Path=/; SameSite=none; Secure"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":146,"dns":2,"connect":99,"send":0,"wait":101,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.409Z","timestamp":1791046227409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435487\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-03T21:33:35.001994Z","times_seen":349965,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":21,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.886Z","timestamp":1791046258886,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"GET /api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5 HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: afp_cookie=gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"afp_cookie","value":"gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$"}],"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 03 Oct 2026 16:50:58 GMT\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":218,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.linkssp.ru/cm?key=af2153fbaa913034dfb5e17a6bd035af\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D38%26b%3D%7Buid%7D","fqdn":"sp.linkssp.ru","domain":"linkssp.ru","tld":"ru"},"ip":{"addr":"89.248.193.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.922Z","timestamp":1791046249922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sp.linkssp.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 19:27:32 GMT","end":"Wed, 02 Dec 2026 19:27:31 GMT"},"fingerprint":{"sha1":"00:C1:CD:69:F9:22:3D:F8:2C:EC:13:CD:38:58:E5:71:27:07:7A:3B","sha256":"06:81:8F:19:D2:11:E8:80:F1:CA:3D:BC:D2:82:05:7E:12:2E:AE:48:EF:AB:BA:11:D9:CC:63:A3:01:C5:6F:0B"}}},"request":{"raw":"GET /cm?key=af2153fbaa913034dfb5e17a6bd035af\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D38%26b%3D%7Buid%7D HTTP/1.1\r\nHost: sp.linkssp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-03 1.436.c95681b\r\nLocation: https://rtb.moe.video/cs?d=38\u0026b=0cc9a802-f584-44b1-9fee-08ea692b747d\r\nSet-Cookie: uid=0cc9a802-f584-44b1-9fee-08ea692b747d.6ac1326a.8281107ef4439c63; domain=.linkssp.ru; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;\nscm=77.5179; domain=.linkssp.ru; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"0cc9a802-f584-44b1-9fee-08ea692b747d.6ac1326a.8281107ef4439c63","quoted":false,"path":"/","domain":".linkssp.ru","expires":"2026-11-02T16:50:50Z","raw_expires":"Mon, 02-Nov-2026 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=0cc9a802-f584-44b1-9fee-08ea692b747d.6ac1326a.8281107ef4439c63; domain=.linkssp.ru; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;"},{"name":"scm","value":"77.5179","quoted":false,"path":"/","domain":".linkssp.ru","expires":"2026-11-02T16:50:50Z","raw_expires":"Mon, 02-Nov-2026 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"scm=77.5179; domain=.linkssp.ru; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":28,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.415Z","timestamp":1791046227415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:58:26 GMT\r\nexpires: Tue, 28 Sep 2027 16:58:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431521\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-10-03T20:36:22.046711Z","times_seen":6561,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":42,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ck.silvermob.com/sync?pid=625\u0026r=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D67%26b%3D[USER_ID]","fqdn":"ck.silvermob.com","domain":"silvermob.com","tld":"com"},"ip":{"addr":"212.95.58.28","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.947Z","timestamp":1791046249947,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ck.silvermob.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 12:35:36 GMT","end":"Tue, 08 Dec 2026 12:35:35 GMT"},"fingerprint":{"sha1":"85:AD:71:3D:66:48:A9:5B:66:15:C1:33:FB:9B:16:56:1B:49:65:C3","sha256":"25:48:1E:55:22:A4:19:AA:7A:FE:96:A7:81:C7:EF:2C:2E:9F:C2:5C:90:35:D6:C5:1C:EF:4D:6A:D6:BB:30:C8"}}},"request":{"raw":"GET /sync?pid=625\u0026r=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D67%26b%3D[USER_ID] HTTP/1.1\r\nHost: ck.silvermob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 81\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-CH: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Mobile\r\nSet-Cookie: sm_uid=sm_HqNQ8tDBT9_5; Domain=ck.silvermob.com; Expires=Sun, 03 Oct 2027 16:50:50 GMT; Path=/; SameSite=None; Secure\nsm_uidp=sm_HqNQ8tDBT9_5; Expires=Sun, 03 Oct 2027 16:50:50 GMT; Path=/; SameSite=None; Secure; Partitioned\r\nx-sm-trace: sync-img-r\r\nLocation: https://rtb.moe.video/cs?d=67\u0026b=sm_HqNQ8tDBT9_5\u0026sd=1\u0026sv=625\r\nVary: Accept\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie\r\n\r\n","headers":null,"cookies":[{"name":"sm_uid","value":"sm_HqNQ8tDBT9_5","quoted":false,"path":"/","domain":"ck.silvermob.com","expires":"2027-10-03T16:50:50Z","raw_expires":"Sun, 03 Oct 2027 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"sm_uid=sm_HqNQ8tDBT9_5; Domain=ck.silvermob.com; Expires=Sun, 03 Oct 2027 16:50:50 GMT; Path=/; SameSite=None; Secure"},{"name":"sm_uidp","value":"sm_HqNQ8tDBT9_5","quoted":false,"path":"/","expires":"2027-10-03T16:50:50Z","raw_expires":"Sun, 03 Oct 2027 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":true,"raw":"sm_uidp=sm_HqNQ8tDBT9_5; Expires=Sun, 03 Oct 2027 16:50:50 GMT; Path=/; SameSite=None; Secure; Partitioned"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":132,"dns":0,"connect":24,"send":0,"wait":28,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openrtb.skcrtxr.com/request-ad","fqdn":"openrtb.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:55.475Z","timestamp":1791046255475,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /request-ad HTTP/1.1\r\nHost: openrtb.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 584\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/integration/mail.adman.vpaid.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:00.797Z","timestamp":1791046260797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.moe.video","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 08:13:46 GMT","end":"Tue, 10 Nov 2026 08:13:45 GMT"},"fingerprint":{"sha1":"21:99:67:8A:A4:28:04:7D:FE:58:13:D6:B2:C3:7F:07:6A:E6:07:E4","sha256":"5B:3E:2C:AA:FB:70:63:1D:69:D4:43:E2:67:39:1A:42:F4:87:C2:E8:71:7A:85:A7:77:FD:A0:5C:60:13:52:75"}}},"request":{"raw":"GET /integration/mail.adman.vpaid.js HTTP/1.1\r\nHost: cdn1.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:51:00 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Saturday, 03-Oct-2026 16:42:45 GMT\r\nexpires: Sat, 03 Oct 2026 17:21:00 GMT\r\ncache-control: max-age=1800\r\ncache: HIT\r\nx-cached-since: 2026-10-03T16:42:45+00:00\r\nx-node: m9-up-gc97\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5538,"size_decoded":2473,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (5538), with no line terminators","md5":"2d18b1332b42c3023d7cfe6e8a7b9df3","sha1":"bfe8937334334ed9e7db3071af3c8c2a7aecc991","sha256":"2a4a3e0dc384d6935914c37eded9c9283dbd41ad308a6cdf513b00c00b75f084","sha512":"91b9e8e960ef4669a886590b6a40845fb0b7fadf830964004d11006155b332652eb5168c39bf9349a5a4e6e077113939c9e8e5baf6f7547bcc08ed7690e75eae","ssdeep":"96:FFPDiJW6HOVUgJ8WZW4ACzisCcTa/BxZt5Gir3YDQr3HKW6HM3s24XiWXNNa33WL:/PDiJW6HOVUgJ8WZWehdTa/BjGK3YDQA","tlshash":"32b10325324658aa5ec0419ea8270749a61063e82a1d842cfdbdfceb94ccc0e7d7c7bd","first_seen":"2026-07-03T22:51:02.738426Z","last_seen":"2026-10-03T16:51:28.435631Z","times_seen":167,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/moevideossp?id=57dd2cd5f9356ac13269\u0026chk=1","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.096Z","timestamp":1791046250096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/moevideossp?id=57dd2cd5f9356ac13269\u0026chk=1 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://sync.programmatica.com/match/Adspector_banners?id=NGI3MWJhNWRlYWFhZDM3YQ\r\nset-cookie: pid=NGI3MWJhNWRlYWFhZDM3YQ; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.adsp.io; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"NGI3MWJhNWRlYWFhZDM3YQ","quoted":false,"path":"/","domain":".adsp.io","expires":"2028-04-03T16:50:50Z","raw_expires":"Mon, 03 Apr 2028 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=NGI3MWJhNWRlYWFhZDM3YQ; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.adsp.io; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/sync?platform_id=7087330adc7149cc9dc5d2fd46ff81c1\u0026external_id=MmJjOTQ5NWVkZjM5OWIwNw","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.428Z","timestamp":1791046250428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:45:37 GMT","end":"Sun, 13 Dec 2026 13:45:36 GMT"},"fingerprint":{"sha1":"C1:28:84:D9:3C:21:08:3C:B4:D3:58:6A:79:07:F5:53:5F:F5:90:1F","sha256":"5C:EC:53:1B:2B:EC:3C:74:85:A8:66:B3:11:FF:9E:47:EE:35:42:9E:1C:41:CF:82:F9:6A:14:44:75:AA:59:7D"}}},"request":{"raw":"GET /sync?platform_id=7087330adc7149cc9dc5d2fd46ff81c1\u0026external_id=MmJjOTQ5NWVkZjM5OWIwNw HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: smi_uid=uro7hyku1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"smi_uid","value":"uro7hyku1"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":282,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=moevideo\u0026id=57dd2cd5f9356ac13269","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.882Z","timestamp":1791046249882,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=moevideo\u0026id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/moevideo?rc=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.86","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.175Z","timestamp":1791046250175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /rtb/sync/moevideo?rc=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: u=asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"u","value":"asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw"}],"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw; path=/; max-age=7776000; samesite=none; httponly; secure\nda=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\nf=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D4%26b%3DasEyaudLjYI; max-age=30; samesite=none; httponly; secure\nn=1; max-age=30; samesite=none; httponly; secure\r\nlocation: https://dm.hybrid.ai/match?id=414\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s31;dur=0.0007\r\n\r\n","headers":null,"cookies":[{"name":"u","value":"asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw","quoted":false,"path":"/","max_age":7776000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"u=asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw; path=/; max-age=7776000; samesite=none; httponly; secure"},{"name":"da","value":"2OZrzwAAAAE","quoted":false,"path":"/rtb","max_age":604800,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"da=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure"},{"name":"f","value":"https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D4%26b%3DasEyaudLjYI","quoted":false,"max_age":30,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"f=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D4%26b%3DasEyaudLjYI; max-age=30; samesite=none; httponly; secure"},{"name":"n","value":"1","quoted":false,"max_age":30,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"n=1; max-age=30; samesite=none; httponly; secure"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:00.944Z","timestamp":1791046260944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn-c.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:51:00 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=259200\r\netag: W/\"b2a18943ab7a5eb4dccf94ce4a7ba65d\"\r\nlast-modified: Thu, 24 Sep 2026 08:35:11 GMT\r\nx-amz-request-id: 04cef1213a1319ff\r\ncontent-encoding: gzip\r\nx-cdn-request-id: 5d0d22457f4194e0d1bbe63a917cc1b2\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190091,"size_decoded":58853,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b2a18943ab7a5eb4dccf94ce4a7ba65d","sha1":"4e9649c9ded068ebab5450fc01e8e219a4fab87e","sha256":"31135c3c3439a66a081057a00d9a1276bc3fb98a031a07149995e8a6d855be62","sha512":"f434a793629e7744c30298af6a96ef4627755529c21a8a01f580c723772fd961ebafe6e3c1dcdd2fe1fd7a092c1fd0ceb419f9a9f2415ba4f75a0874998599ca","ssdeep":"3072:QCeuNLCB20XEoQWjZ5DAQ47GK8Y9KnRTp0oe2hPP5/vLugzdxRveg2lSZfW7HuBP:Ku5C1XEoVZRAQ47GK8Y9KnRTpLe2hPhz","tlshash":"aa043bccb2d6706243a761b5407f560bb23a6a89740c8420f169d8e97cb8e4e537bf7d","first_seen":"2026-09-25T00:39:36.123835Z","last_seen":"2026-10-03T16:51:28.424989Z","times_seen":9,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.skcrtxr.com/user-sync-api/sync","fqdn":"csync.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.425Z","timestamp":1791046250425,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /user-sync-api/sync HTTP/1.1\r\nHost: csync.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/wrapper-builder/placement/4ab34668-74ba-416a-b94a-af3045b3df73?v=d-1790768202\u0026rxt-host=instagram-my.ru","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:55.386Z","timestamp":1791046255386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper-builder/placement/4ab34668-74ba-416a-b94a-af3045b3df73?v=d-1790768202\u0026rxt-host=instagram-my.ru HTTP/1.1\r\nHost: cdn.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://instagram-my.ru\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: a82c29cbcdd12ac9ee2b099de671d505\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2032,"size_decoded":1045,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e4b085af13ac090041e4ccbdff91d369","sha1":"ebb490db25edc23078d9a5f08fd988dca3c0f05b","sha256":"4618844876d9a87538bc957cf5b902332d736d03226626343a34b9a9750f9d92","sha512":"615de0eee0779a129c5985ee1433323d70159c393fc6c529a9acd1ab06bd350c1d138d0d3ca8ca8b9c47ea314d8f2557b5b86a69f2353792e3b5ad5ff731d1a5","ssdeep":"","tlshash":"2e4176462124c6fdaadd4f85cbee2abc05e2220f70cd9c30046dcbb562d64c863a370a","first_seen":"2026-06-09T14:10:43.849526Z","last_seen":"2026-10-03T16:51:28.432045Z","times_seen":90,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":20,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:50:26.418Z","timestamp":1791046226418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 17 Mar 2022 15:18:58 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"ContentViews","description":"ContentViews is a lightweight and user-friendly WordPress Plugin, crafted specifically for efficient content management and display. This plugin offers seamless integration with Widgets and enables users to showcase their posts, pages, or custom post types in a highly responsive grid, list, or timeline layout.","website":"https://wordpress.org/plugins/content-views-query-and-display-post-page/","common_platform_enumeration":"","icon":"ContentViews.svg","categories":["Widgets","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":76853,"size_decoded":18329,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11167), with CRLF, LF line terminators","md5":"ed74307c88189d8594b535dccf378966","sha1":"7c21a90c48c2edf53009ce450a46f8f37e7e3324","sha256":"ecd7a055bd52dece2a695f516a1874ee138baeed4676cb1c976165502a068def","sha512":"8ecc7e7cc298132fa07dfe8105253a8249cae1a7d97b9155ab6a717b8b7354752a17c873b8f5a62522cc5c4cebbb59d7aa1f05fc23b9cdb6056063fbe80c2d7e","ssdeep":"1536:tsQypvEUvBz2kki3AafArLqE+chhF+qAF/U24M/3Cyr8kyJwq/o8MPdc3UpqDbKn:tsRLUkki3AafArLqE+cAF/U24MPCyr8w","tlshash":"bd7307719959047e0202b589da34bf0cb2a1927fef468b5136fc256e7be2eb4817370d","first_seen":"2026-10-03T16:51:28.43826Z","last_seen":"2026-10-03T16:51:28.43826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":31,"connect":46,"send":0,"wait":276,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/js/scripts.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.167Z","timestamp":1791046227167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/themes/root/js/scripts.min.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60554904-1d5c\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7516,"size_decoded":3014,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7480), with no line terminators","md5":"098db957e52b7cba7ebb9c726656a3b8","sha1":"6f957d2ee9b486d3e34132c98a9ca36c65b02999","sha256":"9ab327a1b2500b2d50c3567e7b4acd32e9521404f30bad79ec5a7ca83aaf8238","sha512":"29b39f7604f4eef77340d82d1e4fb598a2194d649e92516704604ad54d131a6beff572219de128c495765e206f1e3fc31002d7ad9b5c439734533e2d32a75ad9","ssdeep":"192:8P325PwIg9h2C0m0Jbh0m06x2T9tcLn2wR:M2tg9h2C7qbh7Px2TULn2wR","tlshash":"09f1b789f44030fd21ff2972263f6a166266656d8f0b825274bd86741d65f4213b3fa8","first_seen":"2023-03-07T15:09:03Z","last_seen":"2026-10-03T16:51:28.439681Z","times_seen":292,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=pbd","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.493Z","timestamp":1791046249493,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /image?source=pbd HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://sync.upravel.com/amberdata/sync\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/code.xml?pid=8623\u0026vr=1\u0026rid=2412085\u0026ll=instagram-my.ru","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.141","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.764Z","timestamp":1791046258764,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/code.xml?pid=8623\u0026vr=1\u0026rid=2412085\u0026ll=instagram-my.ru HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: idntfy=VSLBFU3rIqrUpdt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VSLBFU3rIqrUpdt"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:58 GMT\r\nContent-Type: text/xml; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":521,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catsnetwork.ru/core/code.xml?pid=9956\u0026vr=1\u0026rid=9043335\u0026dl=_instagram-my.ru","fqdn":"catsnetwork.ru","domain":"catsnetwork.ru","tld":"ru"},"ip":{"addr":"194.186.91.196","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:00.819Z","timestamp":1791046260819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catsnetwork.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 07:55:32 GMT","end":"Fri, 01 Jan 2027 07:55:31 GMT"},"fingerprint":{"sha1":"0A:71:9C:0E:45:4F:37:A4:5B:1B:F1:36:DB:F0:16:6F:EC:C5:35:C9","sha256":"1A:64:D4:F5:FF:2E:D5:48:BC:95:37:BC:EB:C2:AD:B2:88:BC:8B:00:88:70:56:E4:FA:0C:9B:AD:98:93:0E:09"}}},"request":{"raw":"GET /core/code.xml?pid=9956\u0026vr=1\u0026rid=9043335\u0026dl=_instagram-my.ru HTTP/1.1\r\nHost: catsnetwork.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: idntfy=VUHnbW94aYiD7Mi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VUHnbW94aYiD7Mi"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:51:00 GMT\r\ncontent-type: application/xml\r\ncontent-length: 12\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":518,"mime_type":"application/xml","magic":"ASCII text, with no line terminators","md5":"4505b55b7589ee5cd8969000a2fdb03b","sha1":"61addaba90852636de97e269fa683ef57a17a491","sha256":"21b398232e73bcfb7e782233055a6fbc1dbb3faf8736e512c216329555da2529","sha512":"491f788f72a076f90b4c6fa5d2e0990fa529e237569f900ff0c7222093ae91fe49ba31f7d2f7d0c2431cbd6f00575bd12e4486b2c8319e414f38848d9c67ff83","ssdeep":"","tlshash":"d2600000cc000030c00c0c0c030000c300303000c00c003000000000003c000c030330","first_seen":"2023-05-04T07:22:55Z","last_seen":"2026-10-03T16:51:28.440487Z","times_seen":631,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.skcrtxr.com/user-sync-api/sync","fqdn":"csync.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.667Z","timestamp":1791046252667,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /user-sync-api/sync HTTP/1.1\r\nHost: csync.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=42\u0026b=kkueydzsmxltq---1","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.430Z","timestamp":1791046250430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=42\u0026b=kkueydzsmxltq---1 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-v.skcrtxr.com/wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru","fqdn":"cdn-v.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.89.224","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.230Z","timestamp":1791046252230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru HTTP/1.1\r\nHost: cdn-v.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:52 GMT\r\ncontent-type: text/xml; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://instagram-my.ru\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: ea8ff8ba90930d5337d612aedc6f3b75\r\nx-cdn-edge-id: 2005\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2964,"size_decoded":1451,"mime_type":"text/xml; charset=utf-8","magic":"ASCII text, with very long lines (508)","md5":"72c4b307552dfac1e03e8f5d23efb38a","sha1":"faf57f982f301ccb1fc0b927083e61493cd83e24","sha256":"2f6d6140b8a7139ca86fb547512ca03caa6f815c742b10c5acbb43a39fd75511","sha512":"0d248d5ef8dce6dfed36ba96e5a5a292cfefe72ee434d29585e611cd50548b320203358669ae47a884357abb544f15af6ee55e32b07ac41ff3ece76a00dad1be","ssdeep":"","tlshash":"a7519cb601ed6db90d9540dc7a91f78443ff0cff2b9095a6f0378ca59601d63ba251a8","first_seen":"2026-10-03T16:50:12.14901Z","last_seen":"2026-10-03T16:51:28.433057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/uploads/2019/10/Istoriya-i-direkt-v-rasshirenii-Instagram.png","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.187Z","timestamp":1791046227187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/Istoriya-i-direkt-v-rasshirenii-Instagram.png HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 45183\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-b07f\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45183,"size_decoded":45489,"mime_type":"image/png","magic":"PNG image data, 384 x 370, 8-bit colormap, non-interlaced","md5":"8668f3c457ef6c41e1fad20781c5b949","sha1":"e6ec9d59f7c7590b6e68286858b92255d30d5ff4","sha256":"bde704a4634cb5a11aabee4afbeaf8aa1fa4cae304b3c400c6cf7cff553d9d6c","sha512":"4aaf43a9963ee4115070bef226910e52372ef7ad252ac26a0281db8a012cb650240c5d61405d6097e5dbdd10381d33543601380bad0b0a4850aa1e98f8e4805a","ssdeep":"768:IbFio+ph+s+Vn/NjLrUINb/4kqACUZnGKK75XGcsBy0UkjTQC+BTScVpXQ7WeTPs:qwo+p81pRLrtbgkqACUhVKfk7VjXiTS4","tlshash":"1113f1d04aa489f0b25bd48453d6b5bb9f836606eef8ce249c3038c693d7a53bf4095d","first_seen":"2023-09-18T17:08:33Z","last_seen":"2026-10-03T16:51:28.441217Z","times_seen":12,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/moevideo","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.86","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.852Z","timestamp":1791046249852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /rtb/sync/moevideo HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nlocation: /rtb/sync/moevideo?rc=1\r\nset-cookie: u=asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw; path=/; max-age=7776000; samesite=none; httponly; secure\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s26;dur=0.0002\r\n\r\n","headers":null,"cookies":[{"name":"u","value":"asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw","quoted":false,"path":"/","max_age":7776000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"u=asEyaudLjYI~xMSGjgrBB0h_TVsuJcfOfhXBlVw; path=/; max-age=7776000; samesite=none; httponly; secure"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":2,"connect":63,"send":0,"wait":64,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=mvvideo","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"37.0.127.200","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.919Z","timestamp":1791046249919,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ohmy.bid","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 12:44:37 GMT","end":"Sat, 14 Nov 2026 12:44:36 GMT"},"fingerprint":{"sha1":"89:03:22:0A:9C:A0:DB:97:BD:88:7E:F8:09:21:2B:57:21:9D:6C:3C","sha256":"F2:ED:AD:F8:0C:5C:87:A5:F4:98:C5:C0:FD:38:F6:2C:C2:52:CF:4A:C4:DA:51:6A:A8:F4:A6:93:DC:2E:0B:40"}}},"request":{"raw":"GET /cm?ssp=mvvideo HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-19 1.2482.9cf8ac14\r\nLocation: https://rtb.moe.video/cs?d=31\u0026b=9f899454-4a59-4500-8fde-47b395ec0af3\r\nSet-Cookie: uid=9f899454-4a59-4500-8fde-47b395ec0af3.6ac1326a.f5a2e2bacd00954d; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;\nscm=112.5179; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"9f899454-4a59-4500-8fde-47b395ec0af3.6ac1326a.f5a2e2bacd00954d","quoted":false,"path":"/","domain":".ohmy.bid","expires":"2026-11-02T16:50:50Z","raw_expires":"Mon, 02-Nov-2026 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=9f899454-4a59-4500-8fde-47b395ec0af3.6ac1326a.f5a2e2bacd00954d; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;"},{"name":"scm","value":"112.5179","quoted":false,"path":"/","domain":".ohmy.bid","expires":"2026-11-02T16:50:50Z","raw_expires":"Mon, 02-Nov-2026 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"scm=112.5179; domain=.ohmy.bid; path=/; expires=Mon, 02-Nov-2026 16:50:50 GMT; SameSite=None; Secure;"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":2,"connect":62,"send":0,"wait":60,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=38\u0026b=0cc9a802-f584-44b1-9fee-08ea692b747d","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.060Z","timestamp":1791046250060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=38\u0026b=0cc9a802-f584-44b1-9fee-08ea692b747d HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":90,"dns":0,"connect":38,"send":0,"wait":62,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.programmatica.com/match/MoeVideo?id=57dd2cd5f9356ac13269","fqdn":"sync.programmatica.com","domain":"programmatica.com","tld":"com"},"ip":{"addr":"77.246.157.204","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.884Z","timestamp":1791046249884,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/MoeVideo?id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: sync.programmatica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://sync.programmatica.com/match/MoeVideo?id=57dd2cd5f9356ac13269\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: PUT,GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.q-bid.ru/match?ssp=moevideovideo\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D49%26b%3D%7Buid%7D","fqdn":"sp.q-bid.ru","domain":"q-bid.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.930Z","timestamp":1791046249930,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /match?ssp=moevideovideo\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D49%26b%3D%7Buid%7D HTTP/1.1\r\nHost: sp.q-bid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.adx.com.ru/moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru","fqdn":"bid.adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.96.198","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.215Z","timestamp":1791046252215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 22 Jul 2026 13:37:05 GMT","end":"Sat, 06 Feb 2027 13:37:05 GMT"},"fingerprint":{"sha1":"6D:2A:9E:16:2F:C3:93:A2:74:D7:2B:E5:44:7A:77:F6:4B:04:AA:93","sha256":"A9:CF:1C:C2:28:31:C7:AE:6A:44:F7:D6:3C:E7:AC:33:8F:5A:AE:BB:34:F2:E2:D4:F8:F4:BF:6D:F8:CC:F3:A9"}}},"request":{"raw":"GET /moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru HTTP/1.1\r\nHost: bid.adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.28.2\r\ndate: Sat, 03 Oct 2026 16:50:52 GMT\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":188,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd","fqdn":"1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"185.115.93.201","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.800Z","timestamp":1791046258800,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 25 May 2026 07:36:56 GMT","end":"Thu, 10 Dec 2026 07:36:56 GMT"},"fingerprint":{"sha1":"BA:DF:B2:60:EF:C7:F2:20:08:8F:BA:68:E4:59:E9:BB:21:27:0D:57","sha256":"FC:7E:C5:6E:44:BB:A2:72:57:C7:4D:EE:6D:23:28:EB:B6:F3:B1:B1:82:D3:6A:91:12:0C:A2:85:BA:AF:EB:CA"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd HTTP/1.1\r\nHost: 1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: Angie/1.11.2\r\nDate: Sat, 03 Oct 2026 16:50:58 GMT\r\nContent-Length: 0\r\nConnection: close\r\nlocation: https://sync.upravel.com/image?source=pbd\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Orig-Url: https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Angie:1.11.2","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":35,"send":0,"wait":40,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/js/lightbox.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.166Z","timestamp":1791046227166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/themes/root/js/lightbox.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60554904-bd2\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3026,"size_decoded":1344,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (351), with CRLF line terminators","md5":"535456c2412ae705b709b85c5707d109","sha1":"9700b42d7ecfc5472ee2dbee3d7a7f3e565e5719","sha256":"2a1e5f133bda3e06c7120cd15b93f918e47e43b57838d22dbb2f84fba0dc37d5","sha512":"02ca4661f1686a5fa328232ed60ee4b4b5b6325ec88525fea4e78a460a9847e4b88c1c5c4eecf48afe08633e538257aa9484251c5425fc98ed99da0897864d45","ssdeep":"","tlshash":"735191d466d2446158f311aa6936d71cef59590f8a07e612366dcb85eff380c9433ecc","first_seen":"2023-03-07T15:09:03Z","last_seen":"2026-10-03T16:51:28.442007Z","times_seen":287,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=26\u0026b=VSLBFU3rIqrUpdt","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.970Z","timestamp":1791046249970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=26\u0026b=VSLBFU3rIqrUpdt HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":160,"dns":0,"connect":40,"send":0,"wait":40,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=19\u0026b=","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.109Z","timestamp":1791046250109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=19\u0026b= HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.248Z","timestamp":1791046252248,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"GET /api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5 HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: afp_cookie=gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"afp_cookie","value":"gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$"}],"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 03 Oct 2026 16:50:52 GMT\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":218,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/code.xml?pid=8623\u0026vr=1\u0026rid=8251026\u0026ll=instagram-my.ru","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.141","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:00.775Z","timestamp":1791046260775,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/code.xml?pid=8623\u0026vr=1\u0026rid=8251026\u0026ll=instagram-my.ru HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: idntfy=VSLBFU3rIqrUpdt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VSLBFU3rIqrUpdt"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:51:00 GMT\r\nContent-Type: text/xml; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":521,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.new-programmatic.com/userbind?src=moevideo\u0026id=57dd2cd5f9356ac13269","fqdn":"match.new-programmatic.com","domain":"new-programmatic.com","tld":"com"},"ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.889Z","timestamp":1791046249889,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"admanager.geniusgroup.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 09:00:26 GMT","end":"Mon, 09 Nov 2026 09:00:25 GMT"},"fingerprint":{"sha1":"E7:18:4C:39:97:C9:82:6A:EF:02:AC:87:EC:88:19:43:77:F3:D6:96","sha256":"07:07:27:57:70:92:BB:F4:10:83:7C:08:FD:A5:31:37:E0:86:E3:CF:10:2D:C0:5E:98:D4:47:9D:B0:40:5E:81"}}},"request":{"raw":"GET /userbind?src=moevideo\u0026id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: match.new-programmatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.22.1\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nLocation: https://rtb.moe.video/cs?d=19\u0026b=\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":2,"connect":37,"send":0,"wait":42,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-v.skcrtxr.com/wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru","fqdn":"cdn-v.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.89.224","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.795Z","timestamp":1791046258795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru HTTP/1.1\r\nHost: cdn-v.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:58 GMT\r\ncontent-type: text/xml; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://instagram-my.ru\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: 65bf7301bc022cb09fa7ca6118e99b98\r\nx-cdn-edge-id: 2005\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2964,"size_decoded":1451,"mime_type":"text/xml; charset=utf-8","magic":"ASCII text, with very long lines (508)","md5":"72c4b307552dfac1e03e8f5d23efb38a","sha1":"faf57f982f301ccb1fc0b927083e61493cd83e24","sha256":"2f6d6140b8a7139ca86fb547512ca03caa6f815c742b10c5acbb43a39fd75511","sha512":"0d248d5ef8dce6dfed36ba96e5a5a292cfefe72ee434d29585e611cd50548b320203358669ae47a884357abb544f15af6ee55e32b07ac41ff3ece76a00dad1be","ssdeep":"","tlshash":"a7519cb601ed6db90d9540dc7a91f78443ff0cff2b9095a6f0378ca59601d63ba251a8","first_seen":"2026-10-03T16:50:12.14901Z","last_seen":"2026-10-03T16:51:28.433057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"klkmdsync.site/MtpTLscxt9s3UUA2","fqdn":"klkmdsync.site","domain":"klkmdsync.site","tld":"site"},"ip":{"addr":"199.68.197.20","port":443,"asn":1426,"as":"LIGHTWAVENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.943Z","timestamp":1791046249943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"klkmdsync.site","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 07:59:09 GMT","end":"Thu, 31 Dec 2026 07:59:08 GMT"},"fingerprint":{"sha1":"69:FB:87:4C:35:5A:D9:19:20:34:30:7F:FD:E6:A7:BD:F3:3B:D8:26","sha256":"20:51:85:83:84:55:0E:CA:DA:9F:C1:30:7F:12:30:51:C1:7C:78:BB:90:6D:C7:72:3F:4C:06:0A:16:A1:89:ED"}}},"request":{"raw":"GET /MtpTLscxt9s3UUA2 HTTP/1.1\r\nHost: klkmdsync.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 95\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nlocation: https://rtb.moe.video/cs?d=60\u0026b=ba658e0a-9953-4cc8-9e78-582ad1deb0c9\r\npragma: no-cache\r\nset-cookie: uid=ba658e0a-9953-4cc8-9e78-582ad1deb0c9; Path=/; Domain=klkmdsync.site; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"ba658e0a-9953-4cc8-9e78-582ad1deb0c9","quoted":false,"path":"/","domain":"klkmdsync.site","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"uid=ba658e0a-9953-4cc8-9e78-582ad1deb0c9; Path=/; Domain=klkmdsync.site; Max-Age=31536000; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":109,"dns":0,"connect":28,"send":0,"wait":27,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=67\u0026b=sm_HqNQ8tDBT9_5\u0026sd=1\u0026sv=625","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.224Z","timestamp":1791046250224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=67\u0026b=sm_HqNQ8tDBT9_5\u0026sd=1\u0026sv=625 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYsK-4W5HIotT4bdw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.418Z","timestamp":1791046227418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYsK-4W5HIotT4bdw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19604\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:44:11 GMT\r\nexpires: Tue, 28 Sep 2027 18:44:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 425176\r\nlast-modified: Wed, 27 Aug 2025 20:21:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19604,"size_decoded":20417,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19604, version 1.0","md5":"ae7f76641b2b406461de1ce0f04a4823","sha1":"041e1a18fe7764fd99e80687b3783f047b0e5372","sha256":"9451964ce6aaa2745987ef9bc20ce39d844583ca3a574195a1cb8df5fb62b7bf","sha512":"dae822470181442c5dcde17fa52b7c711fddd0afba6ef27c4e9e4ff7bfb584d5973f02e1e1710b539cadcd1dcd4e9780e50a4737bdc52405e5a29886429c3641","ssdeep":"384:UIUJcsbfqbXaLa1ob17rt6oEypOTFB1treEMNayOyacN6WekM35EFfm:UIUZDCXKb17rt6oEyATqELlZfrV35EFu","tlshash":"0692e04f989c222024ffd534ceae53a6c9782b770608fac47eb689e05126b053d817fc","first_seen":"2025-01-30T16:57:40.809208Z","last_seen":"2026-10-03T16:51:28.442724Z","times_seen":802,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":51,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ss7rr5.moe.video/?v=v1.50.67\u0026p=12332\u0026i=1\u0026s=10\u0026r=aHR0cHM6Ly9pbnN0YWdyYW0tbXkucnUv\u0026u=ef137123fb790d5669fb\u0026l=en","fqdn":"ss7rr5.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"155.212.215.87","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.083Z","timestamp":1791046249083,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /?v=v1.50.67\u0026p=12332\u0026i=1\u0026s=10\u0026r=aHR0cHM6Ly9pbnN0YWdyYW0tbXkucnUv\u0026u=ef137123fb790d5669fb\u0026l=en HTTP/1.1\r\nHost: ss7rr5.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://instagram-my.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2egqx+rk4pR050wxBlJfMg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: bzZ8ZDro+5oBbJlLasDkfjPIs6A=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\nV: v1.38.20\r\nSet-Cookie: uid=57dd2cd5f9356ac13269; Path=/; Domain=moe.video; Expires=Fri, 24 Sep 2027 16:50:49 GMT; Secure; SameSite=None\ncid=ef137123fb790d5669fb; Path=/; Domain=moe.video; Expires=Fri, 24 Sep 2027 16:50:49 GMT; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269","quoted":false,"path":"/","domain":"moe.video","expires":"2027-09-24T16:50:49Z","raw_expires":"Fri, 24 Sep 2027 16:50:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=57dd2cd5f9356ac13269; Path=/; Domain=moe.video; Expires=Fri, 24 Sep 2027 16:50:49 GMT; Secure; SameSite=None"},{"name":"cid","value":"ef137123fb790d5669fb","quoted":false,"path":"/","domain":"moe.video","expires":"2027-09-24T16:50:49Z","raw_expires":"Fri, 24 Sep 2027 16:50:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"cid=ef137123fb790d5669fb; Path=/; Domain=moe.video; Expires=Fri, 24 Sep 2027 16:50:49 GMT; Secure; SameSite=None"}],"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":0,"dns":215,"connect":260,"send":0,"wait":49,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=mvn\u0026uid=57dd2cd5f9356ac13269","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.913Z","timestamp":1791046249913,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sync?src=mvn\u0026uid=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/rsync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026sync_url=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D51%26b%3D%7Binner_id%7D","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.933Z","timestamp":1791046249933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:45:37 GMT","end":"Sun, 13 Dec 2026 13:45:36 GMT"},"fingerprint":{"sha1":"C1:28:84:D9:3C:21:08:3C:B4:D3:58:6A:79:07:F5:53:5F:F5:90:1F","sha256":"5C:EC:53:1B:2B:EC:3C:74:85:A8:66:B3:11:FF:9E:47:EE:35:42:9E:1C:41:CF:82:F9:6A:14:44:75:AA:59:7D"}}},"request":{"raw":"GET /rsync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026sync_url=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D51%26b%3D%7Binner_id%7D HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.20.1\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://rtb.moe.video/cs?d=51\u0026b=Zv_oUvPLi\r\nset-cookie: smi_uid=Zv_oUvPLi; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"smi_uid","value":"Zv_oUvPLi","quoted":false,"path":"/","domain":".pxltag.com","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"smi_uid=Zv_oUvPLi; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":62,"dns":0,"connect":37,"send":0,"wait":87,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.704Z","timestamp":1791046258704,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /pbd/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A400%2C400i%2C700%7CExo+2%3A400%2C400i%2C700\u0026subset=cyrillic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.126Z","timestamp":1791046227126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Open+Sans%3A400%2C400i%2C700%7CExo+2%3A400%2C400i%2C700\u0026subset=cyrillic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Oct 2026 16:50:27 GMT\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23825,"size_decoded":2751,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"21a504e8553fe2fd00f06199195acb5d","sha1":"829cc5ef3ac77e4eb114a25c76a15fe25db82e30","sha256":"9cf325823b5f7701ca0c24a941ed98507a66f09ba734a6eb0a95f6a2aff17fcd","sha512":"f538e0c2dcf7ca4aad1a9f0fa5b6eab435615969fb6149d69b5d9c69fa671dc9dd9735095bc8f9474d014121a186613764bc38b897c578c2400f715d2dc0780f","ssdeep":"384:1ml3GtwBl9Q+FOMDIA4v7oqY49Zxdt5qY47uOqY4P:rUQhbCo","tlshash":"37b23ca104179400aa431dd633cf7e35ee4fa2257084c07a6bfe4adaeddada5637831d","first_seen":"2026-10-02T23:13:33.774923Z","last_seen":"2026-10-03T16:51:28.443375Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/fav/apple-touch-icon.png","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.686Z","timestamp":1791046227686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /fav/apple-touch-icon.png HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: flat_r_mb=%2F%2F%2F%3Adirect\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"flat_r_mb","value":"%2F%2F%2F%3Adirect"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 16852\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-41d4\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16852,"size_decoded":17158,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"4d41f8613719de625d7d535df44e1f01","sha1":"7956589a1758f3d3e847edcd18152285f4b6d277","sha256":"6881eb947f60e590bc1fa9678b3ad58f89e91ebc84fee029006124d8501b5081","sha512":"d09d6ef65de1f3d118579bcb0bf80479c6403ca8e76d73565b8581653defff9be4aeabe221a5b7e2de78df0316b5388530209eab56c0b7843c4df6e8d83d3191","ssdeep":"384:DzzZgOcYn8RjDAdnGqEBK8kHoCQczgnvATuiMQz1nJQoN:Dn89+FElZ/czM81nGoN","tlshash":"a972c0dbd1f9c196f474d18943c5dedae5fce805ada6e7ac80b30522464950c5de30f2","first_seen":"2023-05-01T22:48:08Z","last_seen":"2026-10-03T16:51:28.444065Z","times_seen":12,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catsnetwork.ru/core/code.xml?pid=9956\u0026vr=1\u0026rid=709047\u0026dl=_instagram-my.ru","fqdn":"catsnetwork.ru","domain":"catsnetwork.ru","tld":"ru"},"ip":{"addr":"194.186.91.196","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.603Z","timestamp":1791046249603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catsnetwork.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 07:55:32 GMT","end":"Fri, 01 Jan 2027 07:55:31 GMT"},"fingerprint":{"sha1":"0A:71:9C:0E:45:4F:37:A4:5B:1B:F1:36:DB:F0:16:6F:EC:C5:35:C9","sha256":"1A:64:D4:F5:FF:2E:D5:48:BC:95:37:BC:EB:C2:AD:B2:88:BC:8B:00:88:70:56:E4:FA:0C:9B:AD:98:93:0E:09"}}},"request":{"raw":"GET /core/code.xml?pid=9956\u0026vr=1\u0026rid=709047\u0026dl=_instagram-my.ru HTTP/1.1\r\nHost: catsnetwork.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:49 GMT\r\ncontent-type: application/xml\r\ncontent-length: 12\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nset-cookie: idntfy=VUHnbW94aYiD7Mi; expires=Tue, 30-Sep-2036 16:50:49 GMT; domain=catsnetwork.ru; path=/c/; SameSite=None; Secure\nidntfy=VUHnbW94aYiD7Mi; expires=Tue, 30-Sep-2036 16:50:49 GMT; domain=catsnetwork.ru; path=/core/; SameSite=None; Secure\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VUHnbW94aYiD7Mi","quoted":false,"path":"/c/","domain":"catsnetwork.ru","expires":"2036-09-30T16:50:49Z","raw_expires":"Tue, 30-Sep-2036 16:50:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VUHnbW94aYiD7Mi; expires=Tue, 30-Sep-2036 16:50:49 GMT; domain=catsnetwork.ru; path=/c/; SameSite=None; Secure"},{"name":"idntfy","value":"VUHnbW94aYiD7Mi","quoted":false,"path":"/core/","domain":"catsnetwork.ru","expires":"2036-09-30T16:50:49Z","raw_expires":"Tue, 30-Sep-2036 16:50:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VUHnbW94aYiD7Mi; expires=Tue, 30-Sep-2036 16:50:49 GMT; domain=catsnetwork.ru; path=/core/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":770,"mime_type":"application/xml","magic":"ASCII text, with no line terminators","md5":"4505b55b7589ee5cd8969000a2fdb03b","sha1":"61addaba90852636de97e269fa683ef57a17a491","sha256":"21b398232e73bcfb7e782233055a6fbc1dbb3faf8736e512c216329555da2529","sha512":"491f788f72a076f90b4c6fa5d2e0990fa529e237569f900ff0c7222093ae91fe49ba31f7d2f7d0c2431cbd6f00575bd12e4486b2c8319e414f38848d9c67ff83","ssdeep":"","tlshash":"d2600000cc000030c00c0c0c030000c300303000c00c003000000000003c000c030330","first_seen":"2023-05-04T07:22:55Z","last_seen":"2026-10-03T16:51:28.440487Z","times_seen":631,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":3,"connect":56,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/aidata/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:59.428Z","timestamp":1791046259428,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /aidata/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://x01.aidata.io/0.gif?pid=MGCOM\u0026id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\u0026back=\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/tablepress/css/build/default.css","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.130Z","timestamp":1791046227130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/plugins/tablepress/css/build/default.css HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Nov 2025 02:28:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692665e4-1f5c\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8028,"size_decoded":2044,"mime_type":"text/css","magic":"ASCII text, with very long lines (8027)","md5":"b1ac309167eaeb0c2e01367f9aada2a1","sha1":"af3233c5abc12db0cc0fc9c7ae1ce69481ff81b9","sha256":"26a4f5d07cd0b50a00101fa56941c8b57b1f5453a30c198e839b52f3f54952d4","sha512":"a1cf5ea251f72131ef954c66911382f3b3fa66d3c3679daa1fe5a144987d48a4e2976ea2b4f79943b69e3f417bf93f7b994344b11dc9397c65fa096db71f432a","ssdeep":"192:iCc3qg4q2PHDnj2/ThGI5vMRVg0aw0u0b0d0l0b6a0P:iYw0B0u0b0d0l0b6a0P","tlshash":"91f1eda2e7a437e9b2b3c11ab9f4be5db9206ce1f5811afbf05181700689d535fa1c05","first_seen":"2025-08-26T22:00:17.15447Z","last_seen":"2026-10-03T16:51:28.444773Z","times_seen":4349,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/moevideo_outstream/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.896Z","timestamp":1791046249896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /moevideo_outstream/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://rtb.moe.video/cs?d=22\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":85,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.adx.com.ru/moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru","fqdn":"bid.adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.96.198","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:00.825Z","timestamp":1791046260825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 22 Jul 2026 13:37:05 GMT","end":"Sat, 06 Feb 2027 13:37:05 GMT"},"fingerprint":{"sha1":"6D:2A:9E:16:2F:C3:93:A2:74:D7:2B:E5:44:7A:77:F6:4B:04:AA:93","sha256":"A9:CF:1C:C2:28:31:C7:AE:6A:44:F7:D6:3C:E7:AC:33:8F:5A:AE:BB:34:F2:E2:D4:F8:F4:BF:6D:F8:CC:F3:A9"}}},"request":{"raw":"GET /moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru HTTP/1.1\r\nHost: bid.adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Sat, 03 Oct 2026 16:51:00 GMT\r\ncontent-type: text/xml; charset=utf-8\r\nx-request-id: xt6TUZUm88NwhGuD0V8YdRMzvHzchHDtqsl6WgSyVp0\r\nvary: *\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ntraceparent: 00-12f1d22e49f746884ff11df832732440-ba5b7b123c0c2f02-00\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":486,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text","md5":"0f3f8c40d9062b08f21a569244e70d27","sha1":"0eb786c450839176913767e02d3916a947615d97","sha256":"7d09bb222b67e1a06a418fbfdca6eac1170f990e50ac0582398dc9b1901f793f","sha512":"67a6ac1ce1fdb9858e8d54f458ea5652cb19bc6aef02873b3afd956df03d14727b23c63d96d98455088901cc97b659493487fc4f9130209df0199535734e81b8","ssdeep":"","tlshash":"2ba002416a01b8324698cf18076bc0c873787135c49005446ce14f950a3d0548668375","first_seen":"2023-04-07T13:41:48Z","last_seen":"2026-10-03T16:51:28.445493Z","times_seen":341,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.412Z","timestamp":1791046227412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:35 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435292\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-10-03T20:51:28.668704Z","times_seen":16055,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":35,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/moevideo?uid=57dd2cd5f9356ac13269","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.877Z","timestamp":1791046249877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspend.space","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 06:33:12 GMT","end":"Wed, 02 Dec 2026 06:33:11 GMT"},"fingerprint":{"sha1":"02:E1:79:5F:0F:A5:27:DE:F0:21:0D:B2:79:2C:01:A4:D9:52:58:8D","sha256":"30:5F:15:99:91:53:66:CE:4A:93:DE:33:0D:98:92:C3:1D:9A:76:71:08:7A:A5:40:8B:CC:F2:83:E1:FF:E9:EA"}}},"request":{"raw":"GET /moevideo?uid=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.26.2\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 71\r\nlocation: /check?uid=57dd2cd5f9356ac13269\u0026ssp=moevideo\r\nset-cookie: as-user=ed45bb38-a4a2-4fd8-9837-ecc18dce6127; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"as-user","value":"ed45bb38-a4a2-4fd8-9837-ecc18dce6127","quoted":false,"path":"/","max_age":2592000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"as-user=ed45bb38-a4a2-4fd8-9837-ecc18dce6127; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":4,"connect":69,"send":0,"wait":74,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=68\u0026b=4888974b-72c8-4bd7-b225-4e45c46755bb","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.491Z","timestamp":1791046250491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=68\u0026b=4888974b-72c8-4bd7-b225-4e45c46755bb HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/bd19cdf220c1a991.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.101Z","timestamp":1791046228101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307056/bd19cdf220c1a991.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1982\r\nlast-modified: Fri, 02 Oct 2026 17:29:35 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\netag: \"f00f859c937d6efb1e4e7a99880628a1\"\r\nexpires: Mon, 02 Oct 2056 23:16:21 GMT\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 7\r\nx-request-id: c9160645fdf27dd7\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4815,"size_decoded":2876,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4776)","md5":"1ae3de273f94abad177543ff61600195","sha1":"a7ece85d20d9ed0c395a6a48036e9866d93ec6f4","sha256":"90bc9647dbec71867ff87860d4e36b53012995d091325421398dba1fef5280c0","sha512":"90e0a55a7a93fccdbd4a008245f9c9580d0615d7e0f75f4bc1fe9deeaddca2381b657edf9200e1d8574196b00b114f52edf6798381654d37c79d4d5f34b6a629","ssdeep":"96:RAwTOi294XfmGRP5/KsomtdFeUe+p2n2y1v3txGJdQaXmfTv1J0a2qoLXDwqB:RAUx2URP5CsBe+w2iPjKlmv1JzLoLB","tlshash":"1ca118ee328272b58bc601d494bf9602f17d4d219c0eb861f009d0512cb5fb661ebead","first_seen":"2026-10-02T19:54:59.562353Z","last_seen":"2026-10-03T21:29:36.482643Z","times_seen":59,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.104Z","timestamp":1791046228104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nvary: Accept-Encoding\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nexpires: Sun, 03 Oct 2027 21:00:38 GMT\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-nginx-request-id: d7eeb1998acc6d28\r\ncache-control: public, max-age=31556952\r\nx-strm-log-split: 9\r\nx-request-id: 4340eb2b8030e358\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26004,"size_decoded":26903,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-10-03T21:29:36.512566Z","times_seen":31081,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.adx.com.ru/moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru","fqdn":"bid.adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.96.198","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.808Z","timestamp":1791046258808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 22 Jul 2026 13:37:05 GMT","end":"Sat, 06 Feb 2027 13:37:05 GMT"},"fingerprint":{"sha1":"6D:2A:9E:16:2F:C3:93:A2:74:D7:2B:E5:44:7A:77:F6:4B:04:AA:93","sha256":"A9:CF:1C:C2:28:31:C7:AE:6A:44:F7:D6:3C:E7:AC:33:8F:5A:AE:BB:34:F2:E2:D4:F8:F4:BF:6D:F8:CC:F3:A9"}}},"request":{"raw":"GET /moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru HTTP/1.1\r\nHost: bid.adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.28.2\r\ndate: Sat, 03 Oct 2026 16:50:58 GMT\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":188,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asnbnhznoe.com/4141/2c77a7bfe70b716f4d8b24540985260a785b314e.js","fqdn":"asnbnhznoe.com","domain":"asnbnhznoe.com","tld":"com"},"ip":{"addr":"76.223.67.189","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.138Z","timestamp":1791046227138,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /4141/2c77a7bfe70b716f4d8b24540985260a785b314e.js HTTP/1.1\r\nHost: asnbnhznoe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nDate: Sat, 03 Oct 2026 16:50:27 GMT\r\nContent-Length: 152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/uploads/2019/10/Veb-Instagram-rasshirenie-Instagram.png","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.158Z","timestamp":1791046227158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/Veb-Instagram-rasshirenie-Instagram.png HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 17028\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-4284\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17028,"size_decoded":17334,"mime_type":"image/png","magic":"PNG image data, 590 x 145, 8-bit colormap, non-interlaced","md5":"2bd5fa44f927b070720afc600c016708","sha1":"080895b17a19aa34073a229108cf3bfc2730c258","sha256":"70d399717ae71b5d7c4e5dd1c15de4696342aaa688e1b581c756a29f827a4eab","sha512":"4dad4c47267e1e44db8b4d779e8dc417f88dd8293b0fed0f519278313e178b2d3dc21a4ea9ad766f677464a58d6afd111ed9bcce5bccaf2d6f480ce04c84415c","ssdeep":"384:psVqm0tlI+S0LxMHrQZKzF9K6w7Mrht80V7+BzouTnOM:GVIazgxmUsFueht8oKBzouTOM","tlshash":"8b72d002b12bc514e00aa289b566f0dac92eb66c278b779f45204e40ec78cf3d4ef659","first_seen":"2023-05-01T22:48:08Z","last_seen":"2026-10-03T16:51:28.448196Z","times_seen":12,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.digitalcaramel.com/css/instagram-my.ru.css","fqdn":"ads.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.615Z","timestamp":1791046227615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.digitalcaramel.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 12:54:52 GMT","end":"Sun, 20 Dec 2026 12:54:51 GMT"},"fingerprint":{"sha1":"28:D6:5D:30:44:12:45:58:7C:6A:E9:36:1A:2B:56:83:0A:3C:89:48","sha256":"BD:22:C2:92:75:81:9B:FC:D3:B3:97:B9:86:C3:10:18:B4:66:9F:88:AA:B2:E1:1E:7F:3C:F3:6E:DF:0B:50:E8"}}},"request":{"raw":"GET /css/instagram-my.ru.css HTTP/1.1\r\nHost: ads.digitalcaramel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 3886\r\nlast-modified: Tue, 03 Jun 2025 06:53:51 GMT\r\netag: \"683e9bff-f2e\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';\r\npermissions-policy: interest-cohort=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3886,"size_decoded":4467,"mime_type":"text/css","magic":"ASCII text, with very long lines (3886), with no line terminators","md5":"8337039c527757d129276173eaa1a115","sha1":"ea6b63865b210e57f546f76d9c13bc82dff542de","sha256":"8d4baeee5c75b700a7e7ccf2976bfb950e356c02b493dfd946d1a0812bee7114","sha512":"9104ca54730e9ae449fa1dfd291f089812cfc2c4fd3d00410fd66a0c6ee7da1adc942ce9140860240d50b830da8000a4600f051c08290777852b2786e2622fc0","ssdeep":"","tlshash":"9d812072a541312ca07b991a54e167be46b9c403f7d38a7ea918b3bdceca1c20237b54","first_seen":"2026-10-02T23:13:33.81652Z","last_seen":"2026-10-03T16:51:28.448773Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.q-bid.ru/match?ssp=moevideobanner\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D48%26b%3D%7Buid%7D","fqdn":"sp.q-bid.ru","domain":"q-bid.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.929Z","timestamp":1791046249929,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /match?ssp=moevideobanner\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D48%26b%3D%7Buid%7D HTTP/1.1\r\nHost: sp.q-bid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.digitalcaramel.com/js/instagram-my.ru.js?ts=1791046227356","fqdn":"ads.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.364Z","timestamp":1791046227364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.digitalcaramel.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 12:54:52 GMT","end":"Sun, 20 Dec 2026 12:54:51 GMT"},"fingerprint":{"sha1":"28:D6:5D:30:44:12:45:58:7C:6A:E9:36:1A:2B:56:83:0A:3C:89:48","sha256":"BD:22:C2:92:75:81:9B:FC:D3:B3:97:B9:86:C3:10:18:B4:66:9F:88:AA:B2:E1:1E:7F:3C:F3:6E:DF:0B:50:E8"}}},"request":{"raw":"GET /js/instagram-my.ru.js?ts=1791046227356 HTTP/1.1\r\nHost: ads.digitalcaramel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 17955\r\nlast-modified: Tue, 03 Jun 2025 06:53:51 GMT\r\netag: \"683e9bff-4623\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';\r\npermissions-policy: interest-cohort=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17955,"size_decoded":18552,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17953), with no line terminators","md5":"8e9c01939501c9c70f232e85c32a71ac","sha1":"de51b78e72f5794c10060fff0d82bb15d2fa9b64","sha256":"9d02edbf37d3481add6ba2b0a780a71ecf12fd79de97776f7bd4c36acf7358c7","sha512":"77db32421c54a1badd93118afaba36ae79070e10b8294755a63172a0a75b987829acb0a8494c293605ac1394258ae4c003144ebd2822ffdecb26acafe7c5ab69","ssdeep":"384:BZS7mYKvoR/gQjuYAr8oQsGAOXFdF2uiwCebnAAuzKCM9HSnyAIeCXmbOTfAHZ:B4KYP1gIudr8oQsGAeFD2uiwCebnAAux","tlshash":"e5825509a4a012a4036a2f6b32179dfdcd5b08b7395888d7f119ec3670fde16bbd6570","first_seen":"2026-10-02T23:13:33.864035Z","last_seen":"2026-10-03T16:51:28.449366Z","times_seen":3,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":28,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/ca8ff4c195df82c3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.139Z","timestamp":1791046228139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307056/ca8ff4c195df82c3.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 139075\r\ncache-control: public, max-age=946708560\r\nlast-modified: Fri, 02 Oct 2026 17:29:35 GMT\r\ncontent-encoding: br\r\nexpires: Mon, 02 Oct 2056 19:16:12 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\netag: \"c2d4f7536086cc5ea06b5fc9cdfeabdb\"\r\nx-strm-log-split: 4\r\nx-request-id: ee4fef832a23dd8c\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":720502,"size_decoded":139971,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"693202722d52d51ee780fc8eac51a24c","sha1":"992528b0034b4e7997a8b42c39add8ac2956bfd6","sha256":"ca150e4b047431d76e8c6c4926d65fa23ce14c70895c49c6814d3005f7d72fc7","sha512":"c7554795d72be031c9fd69339629971587025570c0bcc6ffa2b6b25c837a85dd8f6f147576883eef7934c401e199f8196ccb1145202d1973140e74592cf2d7ca","ssdeep":"12288:wQlQZQXQxHNLr/nzx8o+ajmKukg1wjQCplUuFFuvEFC/vlaW91tMeZBivgWVioUD:w4A4oHNLr/nzx8o+ajmKk1wjQCplUuFK","tlshash":"19e4d98af5e1b07142e7a0f9803f150ff23a7915550980a4f62ae8e57eb898e5137f3d","first_seen":"2026-10-02T19:54:59.534249Z","last_seen":"2026-10-03T21:29:36.483922Z","times_seen":59,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/4e626c692f67b5b2.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.378Z","timestamp":1791046228378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307056/4e626c692f67b5b2.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3455\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\nexpires: Mon, 02 Oct 2056 23:15:38 GMT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 02 Oct 2026 17:29:34 GMT\r\netag: \"c6e87740046e4b303bccb78c9574cb9d\"\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 9\r\nx-request-id: 374c82a7e0a16d1e\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12833,"size_decoded":4349,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12800)","md5":"f39bea07a57c662dfb44e56960b80ff0","sha1":"88f0b3667407bbab233a3377fb026fb30b15d51b","sha256":"da7ad644473b99822b5491ebc062e6d04282dc8a6909b489328a4798b40876da","sha512":"a349d3181ab52eb18d99a54fdcd2e4c5daa83a6e20fc4dee19e193b89dd8f0935fd384c0bb6e9a36b48dfb34b38543bea74cda0ad3ff986338fca8bb517a2d9e","ssdeep":"192:EjF4De2ofBy72SyAEQ4m2Bx7y1MpjRW6xMrkxC+xfZGK+WRAOz:EjmpoJyCzaGx7y1GjderkxKEAO","tlshash":"4142c8c8faa1b47142ea50e6407f0a0ab32db51e5419d428b65cdad26ff8c4f6136b3d","first_seen":"2026-10-02T23:13:33.811812Z","last_seen":"2026-10-03T16:51:28.45062Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worker.sttsmntz.ru/stats/format","fqdn":"worker.sttsmntz.ru","domain":"sttsmntz.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:55.473Z","timestamp":1791046255473,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /stats/format HTTP/1.1\r\nHost: worker.sttsmntz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 323\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.adsource.pro/sync/moevideo?u_id=57dd2cd5f9356ac13269","fqdn":"statistics.adsource.pro","domain":"adsource.pro","tld":"pro"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.888Z","timestamp":1791046249888,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /sync/moevideo?u_id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: statistics.adsource.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/67c65ec07d5b9f5d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.133Z","timestamp":1791046228133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307056/67c65ec07d5b9f5d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 28058\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Fri, 02 Oct 2026 17:29:34 GMT\r\netag: \"568ef9fbed1b5f2b4ee6bab60c8ab92f\"\r\nexpires: Mon, 02 Oct 2056 23:16:20 GMT\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\nx-strm-log-split: 1\r\nx-request-id: cfe1ce3b8d33aaf4\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305380,"size_decoded":28953,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"0be745b6483eccd5ce23aec3c68322ff","sha1":"8546ecd0eb557191e9814e383b5ef7e9bb1e3b1e","sha256":"82a146d7b6127b78193c6e75381aa7d5c6bb43b65bb7fe2b1aced7997659669b","sha512":"d205dea84f349db8b2a369c036fb8a82fe42d1e11f89718e91c8f18aacddae3847d669b3b58c409b6f4f1e53f19dd54575d4713934ea571f54db02b7d746e69e","ssdeep":"1536:h21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:vN1dfXIQkN+nF/JH9zf6","tlshash":"ee5475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","first_seen":"2026-10-02T19:54:59.572512Z","last_seen":"2026-10-03T21:29:36.611024Z","times_seen":59,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_out?id=%24%7BUSER_ID%7D\u0026chk=1","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.113Z","timestamp":1791046250113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_out?id=%24%7BUSER_ID%7D\u0026chk=1 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: http://yandex.ru/an/mapuid/adspectoris/MWY1MTI1ZWFmODE4N2Y5Nw\r\nset-cookie: pid=MWY1MTI1ZWFmODE4N2Y5Nw; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.adsp.io; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"MWY1MTI1ZWFmODE4N2Y5Nw","quoted":false,"path":"/","domain":".adsp.io","expires":"2028-04-03T16:50:50Z","raw_expires":"Mon, 03 Apr 2028 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=MWY1MTI1ZWFmODE4N2Y5Nw; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.adsp.io; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=61\u0026b=4oegofAYd-WEVtlws3F31Q","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:51.445Z","timestamp":1791046251445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=61\u0026b=4oegofAYd-WEVtlws3F31Q HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:51 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.lotus-dsp.ru/sync?ssp=MoeVideo\u0026id=57dd2cd5f9356ac13269","fqdn":"a.lotus-dsp.ru","domain":"lotus-dsp.ru","tld":"ru"},"ip":{"addr":"213.171.19.207","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.931Z","timestamp":1791046249931,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lotus-dsp.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 04:16:37 GMT","end":"Tue, 10 Nov 2026 04:16:36 GMT"},"fingerprint":{"sha1":"86:F4:CA:B5:43:87:7C:E6:25:DA:36:8A:E8:74:41:22:D0:91:F0:A9","sha256":"8F:16:CE:8A:2F:A1:F7:01:63:8F:FF:6C:15:C9:63:FF:07:5E:E4:E8:A1:C3:F7:26:05:B5:1B:A8:C9:C6:6C:44"}}},"request":{"raw":"GET /sync?ssp=MoeVideo\u0026id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: a.lotus-dsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: adpreudid=1; Expires=Mon, 02 Nov 2026 19:50:50 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":[{"name":"adpreudid","value":"1","quoted":false,"path":"/","domain":".lotus-dsp.ru","expires":"2026-11-02T19:50:50Z","raw_expires":"Mon, 02 Nov 2026 19:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"adpreudid=1; Expires=Mon, 02 Nov 2026 19:50:50 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":565,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":50,"dns":0,"connect":42,"send":0,"wait":42,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.programmatica.com/match/MoeVideo?id=57dd2cd5f9356ac13269\u0026chk=1","fqdn":"sync.programmatica.com","domain":"programmatica.com","tld":"com"},"ip":{"addr":"77.246.157.204","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.082Z","timestamp":1791046250082,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/MoeVideo?id=57dd2cd5f9356ac13269\u0026chk=1 HTTP/1.1\r\nHost: sync.programmatica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://ssp.bidster.net/bind/4e6d44ce-0f69-4c04-9dc3-f83845d33468?id=MmJjOTQ5NWVkZjM5OWIwNw\r\nset-cookie: pid=MmJjOTQ5NWVkZjM5OWIwNw; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.programmatica.com; path=/; secure; SameSite=None\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: PUT,GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"MmJjOTQ5NWVkZjM5OWIwNw","quoted":false,"path":"/","domain":".programmatica.com","expires":"2028-04-03T16:50:50Z","raw_expires":"Mon, 03 Apr 2028 16:50:50 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=MmJjOTQ5NWVkZjM5OWIwNw; expires=Mon, 03 Apr 2028 16:50:50 GMT; domain=.programmatica.com; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-v.skcrtxr.com/wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru","fqdn":"cdn-v.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.89.224","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:00.845Z","timestamp":1791046260845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=instagram-my.ru HTTP/1.1\r\nHost: cdn-v.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:51:00 GMT\r\ncontent-type: text/xml; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://instagram-my.ru\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: 7048d3cf91623948f7a1792475883b18\r\nx-cdn-edge-id: 2005\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2964,"size_decoded":1451,"mime_type":"text/xml; charset=utf-8","magic":"ASCII text, with very long lines (508)","md5":"72c4b307552dfac1e03e8f5d23efb38a","sha1":"faf57f982f301ccb1fc0b927083e61493cd83e24","sha256":"2f6d6140b8a7139ca86fb547512ca03caa6f815c742b10c5acbb43a39fd75511","sha512":"0d248d5ef8dce6dfed36ba96e5a5a292cfefe72ee434d29585e611cd50548b320203358669ae47a884357abb544f15af6ee55e32b07ac41ff3ece76a00dad1be","ssdeep":"","tlshash":"a7519cb601ed6db90d9540dc7a91f78443ff0cff2b9095a6f0378ca59601d63ba251a8","first_seen":"2026-10-03T16:50:12.14901Z","last_seen":"2026-10-03T16:51:28.433057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-includes/js/jquery/jquery.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.135Z","timestamp":1791046227135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 16 Jan 2024 21:59:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65a6fc35-15601\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":30668,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-03T21:33:35.014251Z","times_seen":1081089,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.367Z","timestamp":1791046227367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 112502\r\nx-res-id: da39a3ee5e6b4b0d3255bfef95601890afd80709-20856-1791046227804-1152110\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: private, max-age=3600\r\ncontent-encoding: br\r\nset-cookie: pu=9986260651791046227; Domain=.yandex.ru; Path=/; Max-Age=2147483647; Secure; HttpOnly; SameSite=None\npi=FDm0HB2W4xi88JVN9Em+1nq0wcf40+R4OaUGcxVHdVLx+M/VD5QPwKrgJGHuNgZ9yQCuRLRl2TGxeCH8cyLxnCV/Rtc=; Expires=Mon, 02-Oct-2028 16:50:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=LhyFyK+bdCP3o3wDSG+h+PoGxzP7sXQ46yn5xQuLTLJ163wp1D+MDrcWqNKJIoGY8NC4B+EdNFWqilOm2UQMI0mrj+k=; Expires=Mon, 02-Oct-2028 16:50:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=5655616971791046227; Expires=Mon, 02-Oct-2028 16:50:27 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=9950597791791046227; Path=/; Domain=.yandex.ru; Expires=Sun, 03 Oct 2027 16:50:27 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YNPkhNYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sun, 07 Nov 2027 16:50:27 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-y-response-status-code: 200\r\netag: \"1580c6f5e2099e42311df72d5382417b-1307056\"\r\naccess-control-allow-origin: *\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-yandex-req-id: 1791046227794613-15355257997965561697-balancer-l7leveler-kubr-yp-klg-47-BAL\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-y-profile-meta: \r\nexpires: Sat, 03 Oct 2026 17:50:27 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pu","value":"9986260651791046227","quoted":false,"path":"/","domain":".yandex.ru","max_age":2147483647,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"pu=9986260651791046227; Domain=.yandex.ru; Path=/; Max-Age=2147483647; Secure; HttpOnly; SameSite=None"},{"name":"pi","value":"FDm0HB2W4xi88JVN9Em+1nq0wcf40+R4OaUGcxVHdVLx+M/VD5QPwKrgJGHuNgZ9yQCuRLRl2TGxeCH8cyLxnCV/Rtc=","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-10-02T16:50:27Z","raw_expires":"Mon, 02-Oct-2028 16:50:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"pi=FDm0HB2W4xi88JVN9Em+1nq0wcf40+R4OaUGcxVHdVLx+M/VD5QPwKrgJGHuNgZ9yQCuRLRl2TGxeCH8cyLxnCV/Rtc=; Expires=Mon, 02-Oct-2028 16:50:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned"},{"name":"i","value":"LhyFyK+bdCP3o3wDSG+h+PoGxzP7sXQ46yn5xQuLTLJ163wp1D+MDrcWqNKJIoGY8NC4B+EdNFWqilOm2UQMI0mrj+k=","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-10-02T16:50:27Z","raw_expires":"Mon, 02-Oct-2028 16:50:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"i=LhyFyK+bdCP3o3wDSG+h+PoGxzP7sXQ46yn5xQuLTLJ163wp1D+MDrcWqNKJIoGY8NC4B+EdNFWqilOm2UQMI0mrj+k=; Expires=Mon, 02-Oct-2028 16:50:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"yandexuid","value":"5655616971791046227","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-10-02T16:50:27Z","raw_expires":"Mon, 02-Oct-2028 16:50:27 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yandexuid=5655616971791046227; Expires=Mon, 02-Oct-2028 16:50:27 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None"},{"name":"yashr","value":"9950597791791046227","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-10-03T16:50:27Z","raw_expires":"Sun, 03 Oct 2027 16:50:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"yashr=9950597791791046227; Path=/; Domain=.yandex.ru; Expires=Sun, 03 Oct 2027 16:50:27 GMT; SameSite=None; Secure; HttpOnly; Partitioned"},{"name":"bh","value":"YNPkhNYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-11-07T16:50:27Z","raw_expires":"Sun, 07 Nov 2027 16:50:27 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YNPkhNYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sun, 07 Nov 2027 16:50:27 GMT; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":433406,"size_decoded":114692,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"d033e493ad2e9da3812570895aec289d","sha1":"38e70c3e236f9d1e6531f256ad8289e1563dc2f2","sha256":"c07b2bd1d615afe8034aa7c541e025cc651585b85d17b65b4ef6adbb07d2f46d","sha512":"6e14198915ed839332dedbf7cdb1743fea9d50c66dcf487c7c640a98cb76f4214c0c36c58123e37c67459895599666ba0afbf6590d8b9a9c9ea4be7317c2bad6","ssdeep":"6144:zWRtA6Ma1dHZbyubMWZqrXwovc0UjAPalbMBfs9tJqIh3F0NomKWwJdzGqvNhbBy:ZULqMuPHWM","tlshash":"6894c59db1e2f0a143e765a4803f5a0bf23b695578099090e361e9e1bc7899f9133f3d","first_seen":"2026-10-03T16:51:28.452598Z","last_seen":"2026-10-03T16:51:28.452598Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":2,"connect":44,"send":0,"wait":137,"receive":53,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.568Z","timestamp":1791046227568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:35 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435292\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-10-03T20:51:28.668704Z","times_seen":16055,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYsK-4W5HIotT4bdw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.424Z","timestamp":1791046227424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYsK-4W5HIotT4bdw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19604\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:44:11 GMT\r\nexpires: Tue, 28 Sep 2027 18:44:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 425176\r\nlast-modified: Wed, 27 Aug 2025 20:21:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19604,"size_decoded":20417,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19604, version 1.0","md5":"ae7f76641b2b406461de1ce0f04a4823","sha1":"041e1a18fe7764fd99e80687b3783f047b0e5372","sha256":"9451964ce6aaa2745987ef9bc20ce39d844583ca3a574195a1cb8df5fb62b7bf","sha512":"dae822470181442c5dcde17fa52b7c711fddd0afba6ef27c4e9e4ff7bfb584d5973f02e1e1710b539cadcd1dcd4e9780e50a4737bdc52405e5a29886429c3641","ssdeep":"384:UIUJcsbfqbXaLa1ob17rt6oEypOTFB1treEMNayOyacN6WekM35EFfm:UIUZDCXKb17rt6oEyATqELlZfrV35EFu","tlshash":"0692e04f989c222024ffd534ceae53a6c9782b770608fac47eb689e05126b053d817fc","first_seen":"2025-01-30T16:57:40.809208Z","last_seen":"2026-10-03T16:51:28.442724Z","times_seen":802,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":53,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=31\u0026b=9f899454-4a59-4500-8fde-47b395ec0af3","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.223Z","timestamp":1791046250223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=31\u0026b=9f899454-4a59-4500-8fde-47b395ec0af3 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root/css/style.min.css","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.128Z","timestamp":1791046227128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/themes/root/css/style.min.css HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60554904-26fd2\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159698,"size_decoded":31469,"mime_type":"text/css","magic":"ASCII text, with very long lines (61354), with CRLF line terminators","md5":"01ea4be1f7923a01650cca9b0948e09b","sha1":"c01e7da2b105f2fdf2e8da3d5f328cd54786d305","sha256":"d791af7717a2474e6b94d510b15d91f715c1dcdd41ec9bc6794fc0e549ecde2e","sha512":"c333f75cbb83c1ae3d764331ae874e22ef9f692df06ce1832bf642905328fe9c3c2fac14e1e834916448662b4bf8e0958a10db6fcd9e7f127d1484f3259a3be6","ssdeep":"1536:OCnyrtayUz6J1jJvfrF9tZHw9Y3IUzYwQ56Od5vNklfMzXcSCm:OCnoAye6JtVRVw9Y3Q6MIfMzXWm","tlshash":"7cf3c8f0995800d86337ca2fbf61b22c3a24f779c6415ee8e1e9ce0c89d67a50573b59","first_seen":"2023-05-02T00:37:53Z","last_seen":"2026-10-03T16:51:28.454067Z","times_seen":6,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.137Z","timestamp":1791046227137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 18 Aug 2023 13:41:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64df7504-3509\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5194,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-03T21:33:35.028367Z","times_seen":987492,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bid.adx.com.ru/moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru","fqdn":"bid.adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.96.198","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.615Z","timestamp":1791046249615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 22 Jul 2026 13:37:05 GMT","end":"Sat, 06 Feb 2027 13:37:05 GMT"},"fingerprint":{"sha1":"6D:2A:9E:16:2F:C3:93:A2:74:D7:2B:E5:44:7A:77:F6:4B:04:AA:93","sha256":"A9:CF:1C:C2:28:31:C7:AE:6A:44:F7:D6:3C:E7:AC:33:8F:5A:AE:BB:34:F2:E2:D4:F8:F4:BF:6D:F8:CC:F3:A9"}}},"request":{"raw":"GET /moevideo-vast-midprice-bid?vpaid=true\u0026referer=instagram-my.ru HTTP/1.1\r\nHost: bid.adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.28.2\r\ndate: Sat, 03 Oct 2026 16:50:49 GMT\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":188,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":3,"connect":61,"send":0,"wait":61,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catsnetwork.ru/core/code.xml?pid=9956\u0026vr=1\u0026rid=7254769\u0026dl=_instagram-my.ru","fqdn":"catsnetwork.ru","domain":"catsnetwork.ru","tld":"ru"},"ip":{"addr":"194.186.91.196","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.185Z","timestamp":1791046252185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catsnetwork.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 07:55:32 GMT","end":"Fri, 01 Jan 2027 07:55:31 GMT"},"fingerprint":{"sha1":"0A:71:9C:0E:45:4F:37:A4:5B:1B:F1:36:DB:F0:16:6F:EC:C5:35:C9","sha256":"1A:64:D4:F5:FF:2E:D5:48:BC:95:37:BC:EB:C2:AD:B2:88:BC:8B:00:88:70:56:E4:FA:0C:9B:AD:98:93:0E:09"}}},"request":{"raw":"GET /core/code.xml?pid=9956\u0026vr=1\u0026rid=7254769\u0026dl=_instagram-my.ru HTTP/1.1\r\nHost: catsnetwork.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: idntfy=VUHnbW94aYiD7Mi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VUHnbW94aYiD7Mi"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:52 GMT\r\ncontent-type: application/xml\r\ncontent-length: 12\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":518,"mime_type":"application/xml","magic":"ASCII text, with no line terminators","md5":"4505b55b7589ee5cd8969000a2fdb03b","sha1":"61addaba90852636de97e269fa683ef57a17a491","sha256":"21b398232e73bcfb7e782233055a6fbc1dbb3faf8736e512c216329555da2529","sha512":"491f788f72a076f90b4c6fa5d2e0990fa529e237569f900ff0c7222093ae91fe49ba31f7d2f7d0c2431cbd6f00575bd12e4486b2c8319e414f38848d9c67ff83","ssdeep":"","tlshash":"d2600000cc000030c00c0c0c030000c300303000c00c003000000000003c000c030330","first_seen":"2023-05-04T07:22:55Z","last_seen":"2026-10-03T16:51:28.440487Z","times_seen":631,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.435Z","timestamp":1791046252435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn-c.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:52 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=259200\r\netag: W/\"b2a18943ab7a5eb4dccf94ce4a7ba65d\"\r\nlast-modified: Thu, 24 Sep 2026 08:35:11 GMT\r\nx-amz-request-id: 04cef1213a1319ff\r\ncontent-encoding: gzip\r\nx-cdn-request-id: e667aa89988f8776325258906e5597a1\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190091,"size_decoded":58853,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b2a18943ab7a5eb4dccf94ce4a7ba65d","sha1":"4e9649c9ded068ebab5450fc01e8e219a4fab87e","sha256":"31135c3c3439a66a081057a00d9a1276bc3fb98a031a07149995e8a6d855be62","sha512":"f434a793629e7744c30298af6a96ef4627755529c21a8a01f580c723772fd961ebafe6e3c1dcdd2fe1fd7a092c1fd0ceb419f9a9f2415ba4f75a0874998599ca","ssdeep":"3072:QCeuNLCB20XEoQWjZ5DAQ47GK8Y9KnRTp0oe2hPP5/vLugzdxRveg2lSZfW7HuBP:Ku5C1XEoVZRAQ47GK8Y9KnRTpLe2hPhz","tlshash":"aa043bccb2d6706243a761b5407f560bb23a6a89740c8420f169d8e97cb8e4e537bf7d","first_seen":"2026-09-25T00:39:36.123835Z","last_seen":"2026-10-03T16:51:28.424989Z","times_seen":9,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/flat_pm/assets/front/script.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.172Z","timestamp":1791046227172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/plugins/flat_pm/assets/front/script.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 07 Apr 2021 21:20:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"606e2227-58e0\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":7050,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16801)","md5":"c946d568ebbcf1754d7fbccddd7a98bc","sha1":"165ff17898d79060eae61872578e76435f9e3283","sha256":"b18d900dda1992fb71d1f24b375487c4986c54844b21976a71d50996b2559aaf","sha512":"e3c1c5dbb290a97834753f62a6e85c6207380d894b6717a793f171902a0f5a0b90528186fc4f09798b65b27bae4d4e8c18140bb2528c3c5e806efeb973147d51","ssdeep":"384:698C3C3yGgoG4gPez39IrOty8a2SXpm2GmtMp/z1A4j8:698b3goGIT9IrOo2SXpmA+1A4o","tlshash":"91a2d80c7d7f34eb41be2179a4bb4346b1719ea4e903449c506ed81a1aa8f9b04b5ffc","first_seen":"2023-03-10T10:49:38Z","last_seen":"2026-10-03T16:51:28.455409Z","times_seen":14,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/MoeVideo?id=57dd2cd5f9356ac13269","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"212.41.11.130","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.924Z","timestamp":1791046249924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dvgroup.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 11:32:37 GMT","end":"Sun, 13 Dec 2026 11:32:36 GMT"},"fingerprint":{"sha1":"DA:FC:81:9E:90:07:C6:86:A3:6A:C5:FC:B3:78:2B:09:BD:C9:07:5A","sha256":"E7:B0:B5:1D:C1:25:65:56:39:81:D1:AC:FE:37:98:B8:54:46:B9:1D:43:52:22:E6:3B:3C:AE:10:81:88:B8:BC"}}},"request":{"raw":"GET /match/MoeVideo?id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://sync.dvgroup.com/match/MoeVideo?id=57dd2cd5f9356ac13269\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":50,"send":0,"wait":51,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.420Z","timestamp":1791046227420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:58:26 GMT\r\nexpires: Tue, 28 Sep 2027 16:58:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431521\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-10-03T20:36:22.046711Z","times_seen":6561,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":48,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/code.xml?pid=8623\u0026vr=1\u0026rid=6772766\u0026ll=instagram-my.ru","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.141","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.591Z","timestamp":1791046249591,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/code.xml?pid=8623\u0026vr=1\u0026rid=6772766\u0026ll=instagram-my.ru HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Type: text/xml; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: origin-when-cross-origin\r\nSet-Cookie: idntfy=VSLBFU3rIqrUpdt; expires=Sun, 03-Oct-2027 16:50:49 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure\nidntfy=VSLBFU3rIqrUpdt; expires=Sun, 03-Oct-2027 16:50:49 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VSLBFU3rIqrUpdt","quoted":false,"path":"/c/","domain":"otclick-adv.ru","expires":"2027-10-03T16:50:49Z","raw_expires":"Sun, 03-Oct-2027 16:50:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VSLBFU3rIqrUpdt; expires=Sun, 03-Oct-2027 16:50:49 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure"},{"name":"idntfy","value":"VSLBFU3rIqrUpdt","quoted":false,"path":"/core/","domain":"otclick-adv.ru","expires":"2027-10-03T16:50:49Z","raw_expires":"Sun, 03-Oct-2027 16:50:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VSLBFU3rIqrUpdt; expires=Sun, 03-Oct-2027 16:50:49 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":773,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":35,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adserver.gear-hub.ru/sync?p=e590706fd4aa5c8395d69ec3fea3b859d7756bf07ced149c93ad9a430d568f00\u0026eid=57dd2cd5f9356ac13269","fqdn":"adserver.gear-hub.ru","domain":"gear-hub.ru","tld":"ru"},"ip":{"addr":"46.243.210.75","port":443,"asn":0,"as":"","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.944Z","timestamp":1791046249944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adserver.gear-hub.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 10:11:19 GMT","end":"Sun, 27 Dec 2026 10:11:18 GMT"},"fingerprint":{"sha1":"9C:81:DB:0E:AC:48:D2:8C:B6:7D:2F:2D:D7:60:3F:14:15:87:99:C2","sha256":"96:89:BA:9B:0B:79:4E:DF:9B:0C:59:34:68:98:A8:5D:E9:D5:06:C9:66:54:9B:E5:DC:EE:34:83:C6:E5:61:66"}}},"request":{"raw":"GET /sync?p=e590706fd4aa5c8395d69ec3fea3b859d7756bf07ced149c93ad9a430d568f00\u0026eid=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: adserver.gear-hub.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\nlocation: https://rtb.moe.video/cs?d=61\u0026b=4oegofAYd-WEVtlws3F31Q\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: yduid=4oegofAYd-WEVtlws3F31Q; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\ncontent-length: 81\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"yduid","value":"4oegofAYd-WEVtlws3F31Q","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"yduid=4oegofAYd-WEVtlws3F31Q; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":1470,"timings":{"blocked":119,"dns":0,"connect":33,"send":0,"wait":1026,"receive":4,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=28\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.114Z","timestamp":1791046250114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=28\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/check?uid=57dd2cd5f9356ac13269\u0026ssp=moevideo","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.259Z","timestamp":1791046250259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspend.space","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 06:33:12 GMT","end":"Wed, 02 Dec 2026 06:33:11 GMT"},"fingerprint":{"sha1":"02:E1:79:5F:0F:A5:27:DE:F0:21:0D:B2:79:2C:01:A4:D9:52:58:8D","sha256":"30:5F:15:99:91:53:66:CE:4A:93:DE:33:0D:98:92:C3:1D:9A:76:71:08:7A:A5:40:8B:CC:F2:83:E1:FF:E9:EA"}}},"request":{"raw":"GET /check?uid=57dd2cd5f9356ac13269\u0026ssp=moevideo HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: as-user=ed45bb38-a4a2-4fd8-9837-ecc18dce6127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"as-user","value":"ed45bb38-a4a2-4fd8-9837-ecc18dce6127"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.26.2\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 332\r\nlocation: https://x01.aidata.io/0.gif?pid=6472613\u0026id=ed45bb38-a4a2-4fd8-9837-ecc18dce6127\u0026dest=https%3A%2F%2Fprodmp.ru%2Fadspend-sync.gif%3Fdsp_provider_id%3D2%26uid%3Ded45bb38-a4a2-4fd8-9837-ecc18dce6127%26r%3Dhttps%253A%252F%252Frtb.moe.video%252Fcs%253Fd%253D13%2526b%253Ded45bb38-a4a2-4fd8-9837-ecc18dce6127\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:51:00.887Z","timestamp":1791046260887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"GET /api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5 HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: afp_cookie=gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"afp_cookie","value":"gAAAAABqwTJqY1DLsIKAm93QXF3sdVDrofMqLjFvcmYr4ieKrxMU1Se8ZEGD7q0LXEJ6P-rk6oX-BaXPEB070dyE1-NqIllnbAc2OE6y7Ge-NK60tJFT07tApa_qb5n3n0OQh99B73n0FOo9MWt4rTwINTkONPFUUO6qY-w99YBkw7k7thpeCDHZ743yeoSyx5usI-uRsKOTsRC76r10D-TPcWbZ061LVg==$"}],"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 03 Oct 2026 16:51:00 GMT\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":218,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/moevideo/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.868Z","timestamp":1791046249868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /moevideo/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://rtb.moe.video/cs?d=10\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/code.xml?pid=8623\u0026vr=1\u0026rid=6994145\u0026ll=instagram-my.ru","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.141","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.147Z","timestamp":1791046252147,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/code.xml?pid=8623\u0026vr=1\u0026rid=6994145\u0026ll=instagram-my.ru HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: idntfy=VSLBFU3rIqrUpdt\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VSLBFU3rIqrUpdt"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:52 GMT\r\nContent-Type: text/xml; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":521,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.099Z","timestamp":1791046228099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-edc4844f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3901\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"74e142b51efbff939eae6faefe2ab015\"\r\nexpires: Mon, 02 Oct 2056 22:07:13 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 22 Sep 2026 17:38:01 GMT\r\nx-strm-log-split: 8\r\nx-request-id: 8f9836c58463ce8c\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9291,"size_decoded":4795,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9261)","md5":"cbdbe8d2df2e35c10b3e74c4db234642","sha1":"0b97786e6d44be29eee2b66b284a19367efe8492","sha256":"6f51ca58fa7ace48c9208200af7dfe54b050f33ce1de67595558d73a47bef057","sha512":"689c535b09d2d4b2f4a990966fb4c1fe49233c4d80d53bb377e0db30f4550dba2d71fb622f91f7da79e07b052955c80105c8c4177f12233cc3c509d3e21357f7","ssdeep":"192:OKtzpZx3LtRxJKEJ0jgrjtEBol6nRPlqfYoxcP6iYox7S7L4M8OAXY:OKRXRyEJ08ruoUnR9qwgcug7S7sMXAXY","tlshash":"e412a9f432a1b8d411fb69d1086f1577017e7e06b80e295f872299d2ad244ce60f6fee","first_seen":"2026-09-23T08:35:42.861568Z","last_seen":"2026-10-03T21:29:36.551589Z","times_seen":455,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.877Z","timestamp":1791046258877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"GET /wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn-c.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:58 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=259200\r\netag: W/\"b2a18943ab7a5eb4dccf94ce4a7ba65d\"\r\nlast-modified: Thu, 24 Sep 2026 08:35:11 GMT\r\nx-amz-request-id: 04cef1213a1319ff\r\ncontent-encoding: gzip\r\nx-cdn-request-id: 84a93d812e0b2394d6ee7d708903f079\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190091,"size_decoded":58853,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b2a18943ab7a5eb4dccf94ce4a7ba65d","sha1":"4e9649c9ded068ebab5450fc01e8e219a4fab87e","sha256":"31135c3c3439a66a081057a00d9a1276bc3fb98a031a07149995e8a6d855be62","sha512":"f434a793629e7744c30298af6a96ef4627755529c21a8a01f580c723772fd961ebafe6e3c1dcdd2fe1fd7a092c1fd0ceb419f9a9f2415ba4f75a0874998599ca","ssdeep":"3072:QCeuNLCB20XEoQWjZ5DAQ47GK8Y9KnRTp0oe2hPP5/vLugzdxRveg2lSZfW7HuBP:Ku5C1XEoVZRAQ47GK8Y9KnRTpLe2hPhz","tlshash":"aa043bccb2d6706243a761b5407f560bb23a6a89740c8420f169d8e97cb8e4e537bf7d","first_seen":"2026-09-25T00:39:36.123835Z","last_seen":"2026-10-03T16:51:28.424989Z","times_seen":9,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_out?id=${USER_ID}","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.927Z","timestamp":1791046249927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_out?id=${USER_ID} HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adsp.io/match/mv_out?id=%24%7BUSER_ID%7D\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":13,"dns":0,"connect":38,"send":0,"wait":42,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/menu-icons/css/extra.min.css","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.123Z","timestamp":1791046227123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/plugins/menu-icons/css/extra.min.css HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 815\r\nlast-modified: Tue, 23 Sep 2025 05:03:22 GMT\r\netag: \"68d22a1a-32f\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":815,"size_decoded":1117,"mime_type":"text/css","magic":"ASCII text, with very long lines (815), with no line terminators","md5":"27fa14302689f7f32e20359095766e4d","sha1":"1f3db901d6f8746008838a7e5f2be30feeaeef83","sha256":"968ab8ae6f33119ee267a11ce60920934e0d5e9d4714a3eb6b47cb9f05e42a0f","sha512":"72a1731e0b1280ab92fc988a67aa54d1f44874fe5d3be8eb7333e0f17bfec6951058928cb40a3419a47950b82b851c3cf18e9f6cb84e0765656ff4263d4baeec","ssdeep":"","tlshash":"5b0104f12d1a12bcc1a6a309bd98d2bc73a66435ddd2c806e33e953dc18b72625f6464","first_seen":"2023-04-06T10:08:02Z","last_seen":"2026-10-03T20:29:00.934329Z","times_seen":7091,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/themes/root_child/style.css","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.133Z","timestamp":1791046227133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/themes/root_child/style.css HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 278\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-116\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":278,"size_decoded":580,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ca20d59974c77d23bbfc1013e01ebe5a","sha1":"1a23070db3d74e179f6f8790bc3cfe08c8410b0d","sha256":"53cb486a3f6a61535fd7bb4fa01a15a1b1154f18e5f14ce32950ec257bc66aba","sha512":"5820f9b3c7d7eda6b4c8b50812dfbbbea1f651038afd078e4b77caa77aa266e64dc6e7a4e7b57580d30a137651104d6d326e8756dfb6b07607419c91c4c5c3c7","ssdeep":"","tlshash":"64d02bc9e60ea1033170e615f0f7da13d1a67369a7b13d54e9515635563174c00eab8e","first_seen":"2023-04-06T18:36:23Z","last_seen":"2026-10-03T16:51:28.457419Z","times_seen":378,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/integration/mail.adman.vpaid.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.783Z","timestamp":1791046258783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.moe.video","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 08:13:46 GMT","end":"Tue, 10 Nov 2026 08:13:45 GMT"},"fingerprint":{"sha1":"21:99:67:8A:A4:28:04:7D:FE:58:13:D6:B2:C3:7F:07:6A:E6:07:E4","sha256":"5B:3E:2C:AA:FB:70:63:1D:69:D4:43:E2:67:39:1A:42:F4:87:C2:E8:71:7A:85:A7:77:FD:A0:5C:60:13:52:75"}}},"request":{"raw":"GET /integration/mail.adman.vpaid.js HTTP/1.1\r\nHost: cdn1.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:58 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Saturday, 03-Oct-2026 16:42:45 GMT\r\nexpires: Sat, 03 Oct 2026 17:20:58 GMT\r\ncache-control: max-age=1800\r\ncache: HIT\r\nx-cached-since: 2026-10-03T16:42:45+00:00\r\nx-node: m9-up-gc97\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5538,"size_decoded":2473,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (5538), with no line terminators","md5":"2d18b1332b42c3023d7cfe6e8a7b9df3","sha1":"bfe8937334334ed9e7db3071af3c8c2a7aecc991","sha256":"2a4a3e0dc384d6935914c37eded9c9283dbd41ad308a6cdf513b00c00b75f084","sha512":"91b9e8e960ef4669a886590b6a40845fb0b7fadf830964004d11006155b332652eb5168c39bf9349a5a4e6e077113939c9e8e5baf6f7547bcc08ed7690e75eae","ssdeep":"96:FFPDiJW6HOVUgJ8WZW4ACzisCcTa/BxZt5Gir3YDQr3HKW6HM3s24XiWXNNa33WL:/PDiJW6HOVUgJ8WZWehdTa/BjGK3YDQA","tlshash":"32b10325324658aa5ec0419ea8270749a61063e82a1d842cfdbdfceb94ccc0e7d7c7bd","first_seen":"2026-07-03T22:51:02.738426Z","last_seen":"2026-10-03T16:51:28.435631Z","times_seen":167,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.406Z","timestamp":1791046227406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435487\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-03T21:33:35.001994Z","times_seen":349965,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":20,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidvol.com/rtb/pl999","fqdn":"ssp.bidvol.com","domain":"bidvol.com","tld":"com"},"ip":{"addr":"194.85.16.43","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.950Z","timestamp":1791046227950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidvol.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 06:06:55 GMT","end":"Wed, 25 Nov 2026 06:06:54 GMT"},"fingerprint":{"sha1":"4B:A1:08:0E:7D:E7:30:32:3D:15:3A:C9:70:A6:BE:2E:EC:8F:45:B2","sha256":"DA:E3:E7:EF:78:3E:99:70:42:4D:2D:84:43:3F:6E:D5:93:20:15:4D:26:CA:95:BE:F0:1B:48:5E:0B:54:49:93"}}},"request":{"raw":"POST /rtb/pl999 HTTP/1.1\r\nHost: ssp.bidvol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1073\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1073,"data":"{\"places\":[{\"id\":\"adfox_167774708885181986\",\"placementId\":\"33078\",\"sizes\":[[300,250],[336,280]],\"targetRef\":\"https://instagram-my.ru/\"},{\"id\":\"adfox_167774717043145560\",\"placementId\":\"33079\",\"sizes\":[[300,250],[336,280]],\"targetRef\":\"https://instagram-my.ru/\"},{\"id\":\"adfox_16777472261575453\",\"placementId\":\"33080\",\"sizes\":[[300,250]],\"targetRef\":\"https://instagram-my.ru/\"},{\"id\":\"adfox_167774727152723490\",\"placementId\":\"33081\",\"sizes\":[[240,400],[300,250],[336,280],[320,480],[300,600],[320,480]],\"targetRef\":\"https://instagram-my.ru/\"},{\"id\":\"adfox_167774733365278721\",\"placementId\":\"33082\",\"sizes\":[[300,250]],\"targetRef\":\"https://instagram-my.ru/\"},{\"id\":\"adfox_167774737495674029\",\"placementId\":\"33083\",\"sizes\":[[300,250]],\"targetRef\":\"https://instagram-my.ru/\"},{\"id\":\"adfox_167774740716445869\",\"placementId\":\"33084\",\"sizes\":[[300,250]],\"targetRef\":\"https://instagram-my.ru/\"},{\"id\":\"adfox_167774743555225680\",\"placementId\":\"33085\",\"sizes\":[[300,250]],\"targetRef\":\"https://instagram-my.ru/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":1024}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\nx-request-id: 52bbfc4d-1d77-43e3-9a3e-66df05f8e00a\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: bvuid=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None\nbvuid2=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"bvuid","value":"whout6r49m","quoted":false,"path":"/","domain":".bidvol.com","expires":"2038-01-19T03:14:07Z","raw_expires":"Tue, 19 Jan 2038 03:14:07 GMT","max_age":2147483647,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bvuid=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None"},{"name":"bvuid2","value":"whout6r49m","quoted":false,"path":"/","domain":".bidvol.com","expires":"2038-01-19T03:14:07Z","raw_expires":"Tue, 19 Jan 2038 03:14:07 GMT","max_age":2147483647,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"bvuid2=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":685,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-10-03T20:21:14.704649Z","times_seen":8230,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":3,"connect":62,"send":0,"wait":74,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/integration/mail.adman.vpaid.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:52.157Z","timestamp":1791046252157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.moe.video","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 08:13:46 GMT","end":"Tue, 10 Nov 2026 08:13:45 GMT"},"fingerprint":{"sha1":"21:99:67:8A:A4:28:04:7D:FE:58:13:D6:B2:C3:7F:07:6A:E6:07:E4","sha256":"5B:3E:2C:AA:FB:70:63:1D:69:D4:43:E2:67:39:1A:42:F4:87:C2:E8:71:7A:85:A7:77:FD:A0:5C:60:13:52:75"}}},"request":{"raw":"GET /integration/mail.adman.vpaid.js HTTP/1.1\r\nHost: cdn1.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:52 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Saturday, 03-Oct-2026 16:42:45 GMT\r\nexpires: Sat, 03 Oct 2026 17:20:52 GMT\r\ncache-control: max-age=1800\r\ncache: HIT\r\nx-cached-since: 2026-10-03T16:42:45+00:00\r\nx-node: m9-up-gc97\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5538,"size_decoded":2473,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (5538), with no line terminators","md5":"2d18b1332b42c3023d7cfe6e8a7b9df3","sha1":"bfe8937334334ed9e7db3071af3c8c2a7aecc991","sha256":"2a4a3e0dc384d6935914c37eded9c9283dbd41ad308a6cdf513b00c00b75f084","sha512":"91b9e8e960ef4669a886590b6a40845fb0b7fadf830964004d11006155b332652eb5168c39bf9349a5a4e6e077113939c9e8e5baf6f7547bcc08ed7690e75eae","ssdeep":"96:FFPDiJW6HOVUgJ8WZW4ACzisCcTa/BxZt5Gir3YDQr3HKW6HM3s24XiWXNNa33WL:/PDiJW6HOVUgJ8WZWehdTa/BjGK3YDQA","tlshash":"32b10325324658aa5ec0419ea8270749a61063e82a1d842cfdbdfceb94ccc0e7d7c7bd","first_seen":"2026-07-03T22:51:02.738426Z","last_seen":"2026-10-03T16:51:28.435631Z","times_seen":167,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=10\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.972Z","timestamp":1791046249972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=10\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":171,"dns":1,"connect":39,"send":0,"wait":68,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catsnetwork.ru/core/code.xml?pid=9956\u0026vr=1\u0026rid=6008065\u0026dl=_instagram-my.ru","fqdn":"catsnetwork.ru","domain":"catsnetwork.ru","tld":"ru"},"ip":{"addr":"194.186.91.196","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.852Z","timestamp":1791046258852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catsnetwork.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 07:55:32 GMT","end":"Fri, 01 Jan 2027 07:55:31 GMT"},"fingerprint":{"sha1":"0A:71:9C:0E:45:4F:37:A4:5B:1B:F1:36:DB:F0:16:6F:EC:C5:35:C9","sha256":"1A:64:D4:F5:FF:2E:D5:48:BC:95:37:BC:EB:C2:AD:B2:88:BC:8B:00:88:70:56:E4:FA:0C:9B:AD:98:93:0E:09"}}},"request":{"raw":"GET /core/code.xml?pid=9956\u0026vr=1\u0026rid=6008065\u0026dl=_instagram-my.ru HTTP/1.1\r\nHost: catsnetwork.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: idntfy=VUHnbW94aYiD7Mi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VUHnbW94aYiD7Mi"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:58 GMT\r\ncontent-type: application/xml\r\ncontent-length: 12\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":518,"mime_type":"application/xml","magic":"ASCII text, with no line terminators","md5":"4505b55b7589ee5cd8969000a2fdb03b","sha1":"61addaba90852636de97e269fa683ef57a17a491","sha256":"21b398232e73bcfb7e782233055a6fbc1dbb3faf8736e512c216329555da2529","sha512":"491f788f72a076f90b4c6fa5d2e0990fa529e237569f900ff0c7222093ae91fe49ba31f7d2f7d0c2431cbd6f00575bd12e4486b2c8319e414f38848d9c67ff83","ssdeep":"","tlshash":"d2600000cc000030c00c0c0c030000c300303000c00c003000000000003c000c030330","first_seen":"2023-05-04T07:22:55Z","last_seen":"2026-10-03T16:51:28.440487Z","times_seen":631,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.161Z","timestamp":1791046227161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 07 Dec 2025 21:57:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6935f849-5d6b\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23915,"size_decoded":7223,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (12225), with CRLF line terminators","md5":"2591c5cb7d1eb4c21ded3a3999d578d5","sha1":"be1abb10adf51bf7d6503601db965fe52afd5c06","sha256":"e65cd3790dff29bbce557ac4fe2dd8f49f4c547a09f25ac46f2c85434aa9abe7","sha512":"9634004bcec106ed971056a2312dd6004fe273a27b32576f0cfc44d3cb5588ca3e1887d225c016a11e9c228355a6fd61b6949d72b5ce425435a9dad591aaf80e","ssdeep":"384:LprYDrh74W7glICIKghza+5sIc3ZTYlVfZRcBFB6BOBopPXPoy5Tj5piaCP7G1RC:Lp8Dt74W7qICITPGf3ZnLMsOpPXPb/C5","tlshash":"4db2b505b26631a1879bb6b4301f120a723a6e29f50984bc35b9c7e67d34d0c717bf39","first_seen":"2025-08-26T22:07:20.798347Z","last_seen":"2026-10-03T16:51:28.458834Z","times_seen":1490,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.141Z","timestamp":1791046228141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /safeframe-bundles/0.89/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11893\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\netag: \"2e7b6e3fb8d17570cbabde24df196cc6\"\r\ncache-control: public, max-age=946708560\r\nlast-modified: Wed, 15 Jul 2026 12:02:36 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\nexpires: Mon, 02 Oct 2056 20:58:22 GMT\r\nx-strm-log-split: 4\r\nx-request-id: fbe4e2bcc5aa1909\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49523,"size_decoded":12788,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49523), with no line terminators","md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-10-03T21:29:36.449137Z","times_seen":2598,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=51\u0026b=Zv_oUvPLi","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.337Z","timestamp":1791046250337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=51\u0026b=Zv_oUvPLi HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307056/c27a411b30613c6a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.934Z","timestamp":1791046227934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307056/c27a411b30613c6a.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11035\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\nexpires: Mon, 02 Oct 2056 22:16:19 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\netag: \"5707851dc7a659b3dd17ade23533aeaa\"\r\nlast-modified: Fri, 02 Oct 2026 17:29:35 GMT\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 4\r\nx-request-id: 977bc0d2e30a60c7\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38426,"size_decoded":11930,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38384)","md5":"66c2a9560b94fc9a789e8dbc0491881a","sha1":"dbfdd31fdd3a598051593fdb7a273dd2a3f435fb","sha256":"fdfba7443749c34e915130a941208e21620132e12ff58a68722b84c909e11193","sha512":"a5cf2099c95b695e520d3f97c65c60f7b74b7b7b14ac9eb51eca142765e961f7b852847b51f957afce245289f350b4b24587ba0e8a5f9a69a599ebb9b5e7fdf4","ssdeep":"768:YQ/gRAfUjT6A3lImCfCm75jaWXKINXbFZvrm6ZrdzznkTYvpdQbU9CAipCOmCPQ:W/eE2QWKCNyyRiJbQ","tlshash":"3003b58db2d1f4f1069ba1b4803f220ff27b6856a81d9480e761e8d1bcb995e5433f6d","first_seen":"2026-10-02T19:54:59.478723Z","last_seen":"2026-10-03T21:29:36.483309Z","times_seen":59,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":15,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly9pbnN0YWdyYW0tbXkucnUvIl19fQ==","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.253Z","timestamp":1791046249253,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /pbd/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly9pbnN0YWdyYW0tbXkucnUvIl19fQ== HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://1026--133cc4b0-2c33-4288-8ebd-0476d9dcc20d.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/match.gif?ssp=54\u0026tag=moevideo\u0026reference=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D26%26b%3D%7Bvisitor_id%7D","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.141","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.900Z","timestamp":1791046249900,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/match.gif?ssp=54\u0026tag=moevideo\u0026reference=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D26%26b%3D%7Bvisitor_id%7D HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: idntfy=VSLBFU3rIqrUpdt\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VSLBFU3rIqrUpdt"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Oct 2026 16:50:49 GMT\r\nContent-Length: 124\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nLocation: https://rtb.moe.video/cs?d=26\u0026b=VSLBFU3rIqrUpdt\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=22\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.084Z","timestamp":1791046250084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=22\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:28.137Z","timestamp":1791046228137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs_render-edc4844f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 45126\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: \"b1c5c7d824d71dde55cecf38bce29d4f\"\r\nexpires: Mon, 02 Oct 2056 19:37:03 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nlast-modified: Tue, 22 Sep 2026 17:38:01 GMT\r\nx-strm-log-split: 2\r\nx-request-id: 1952befbee29c87d\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249149,"size_decoded":46021,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65499)","md5":"2da940479dd1331d4761b4f6483c35aa","sha1":"f68170113f89301d8b4d914c5f8cfe7f847a9e55","sha256":"89b6a185ee2ce3a6cfb65aa4705ecf096434aaa2d8dcb55fbaff3cd7744d0604","sha512":"d0769783af7f21cfc03bc8cdb4c8bb2b9a0ec2a6136bcf1915b0f53acea5855b63216591fc8610460a231ad37c9a8eeae253bcb5244cb01b127eb275dd6175ef","ssdeep":"1536:1BD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0O:35SGX7g8BYlyp2z2BWoy5XiN","tlshash":"7e34c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","first_seen":"2026-09-23T08:35:42.799207Z","last_seen":"2026-10-03T21:29:36.577669Z","times_seen":453,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.808Z","timestamp":1791046249808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"GET /api/vast/6716655db13381b469b0cdb6?domain=instagram-my.ru\u0026placementtype=5 HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://instagram-my.ru\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":218,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":2,"connect":62,"send":0,"wait":69,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/moevideo_nord/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.915Z","timestamp":1791046249915,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /moevideo_nord/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: session_tptc=1791046249212; session_tptc-legacy=1791046249212; user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1791046249212"},{"name":"session_tptc-legacy","value":"1791046249212"},{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://rtb.moe.video/cs?d=28\u0026b=133cc4b0-2c33-4288-8ebd-0476d9dcc20d\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=133cc4b0-2c33-4288-8ebd-0476d9dcc20d;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"133cc4b0-2c33-4288-8ebd-0476d9dcc20d","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=133cc4b0-2c33-4288-8ebd-0476d9dcc20d; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":91,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_ins?id=${USER_ID}","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.925Z","timestamp":1791046249925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_ins?id=${USER_ID} HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adsp.io/match/mv_ins?id=%24%7BUSER_ID%7D\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":1,"dns":0,"connect":40,"send":0,"wait":39,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ia.box/match/mvssp_match?eid=57dd2cd5f9356ac13269","fqdn":"ia.box","domain":"ia.box","tld":"box"},"ip":{"addr":"5.9.56.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.941Z","timestamp":1791046249941,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ia.box","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 05:26:32 GMT","end":"Tue, 08 Dec 2026 05:26:31 GMT"},"fingerprint":{"sha1":"17:2C:B1:BC:16:67:1F:E3:A9:04:75:D7:11:58:FA:1A:B0:32:31:AB","sha256":"26:37:18:20:82:33:B5:B6:CF:8B:BC:C2:01:46:2A:7C:DD:01:2A:C3:68:B2:53:37:F5:6A:56:7A:2E:31:D9:01"}}},"request":{"raw":"GET /match/mvssp_match?eid=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: ia.box\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.29.2\r\nDate: Sat, 03 Oct 2026 16:50:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: http://ia.box/match/mvssp_match?eid=57dd2cd5f9356ac13269\u0026tid=db0j4qgfubp6r7tr8el0\u0026rid=B781B894FukaEWFrj9qS5ZfCJV\r\nSet-Cookie: rid=B781B894FukaEWFrj9qS5ZfCJV; expires=Tue, 03 Nov 2026 16:50:50 GMT; domain=ia.box; path=/; HttpOnly; secure; SameSite=None\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":[{"name":"rid","value":"B781B894FukaEWFrj9qS5ZfCJV","quoted":false,"path":"/","domain":"ia.box","expires":"2026-11-03T16:50:50Z","raw_expires":"Tue, 03 Nov 2026 16:50:50 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"rid=B781B894FukaEWFrj9qS5ZfCJV; expires=Tue, 03 Nov 2026 16:50:50 GMT; domain=ia.box; path=/; HttpOnly; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.29.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":96,"dns":0,"connect":32,"send":0,"wait":32,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=14\u0026b=07a95bbd-90ba-4cea-8401-9c07aa2aae23","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.080Z","timestamp":1791046250080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=14\u0026b=07a95bbd-90ba-4cea-8401-9c07aa2aae23 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":86,"dns":0,"connect":39,"send":0,"wait":46,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/fav/favicon-16x16.png","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.688Z","timestamp":1791046227688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /fav/favicon-16x16.png HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: flat_r_mb=%2F%2F%2F%3Adirect\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"flat_r_mb","value":"%2F%2F%2F%3Adirect"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1479\r\nlast-modified: Sat, 20 Mar 2021 00:59:48 GMT\r\netag: \"60554904-5c7\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1479,"size_decoded":1783,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"980023523c536e50fece2037cf3f1254","sha1":"691b9d90e19c76b95ae4a43a54a5ed2cd45380bd","sha256":"b132c5517796917dce8837fd59b2e7f513271c0d28b291bee41a3d2a9aee7032","sha512":"585aa382390bc73a9f9f73993920c2e9086c1e4319ffd3101a2d490d5a1f03e414c27362274b0372e038a207ac71762253549a3132f12ca8a968425eb5f53013","ssdeep":"","tlshash":"ce31a7f495f69972d39bbe226c8f76157a35c8a726490003fa68f5508ca46804c2db22","first_seen":"2023-05-01T22:48:08Z","last_seen":"2026-10-03T16:51:28.46211Z","times_seen":12,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/moevideossp?id=57dd2cd5f9356ac13269","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:49.940Z","timestamp":1791046249940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/moevideossp?id=57dd2cd5f9356ac13269 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adsp.io/match/moevideossp?id=57dd2cd5f9356ac13269\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=60\u0026b=ba658e0a-9953-4cc8-9e78-582ad1deb0c9","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.65.203","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.218Z","timestamp":1791046250218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=60\u0026b=ba658e0a-9953-4cc8-9e78-582ad1deb0c9 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=57dd2cd5f9356ac13269; cid=ef137123fb790d5669fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"57dd2cd5f9356ac13269"},{"name":"cid","value":"ef137123fb790d5669fb"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:50:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidvol.com/rtb/pl999","fqdn":"ssp.bidvol.com","domain":"bidvol.com","tld":"com"},"ip":{"addr":"194.85.16.43","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:58.270Z","timestamp":1791046258270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidvol.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 06:06:55 GMT","end":"Wed, 25 Nov 2026 06:06:54 GMT"},"fingerprint":{"sha1":"4B:A1:08:0E:7D:E7:30:32:3D:15:3A:C9:70:A6:BE:2E:EC:8F:45:B2","sha256":"DA:E3:E7:EF:78:3E:99:70:42:4D:2D:84:43:3F:6E:D5:93:20:15:4D:26:CA:95:BE:F0:1B:48:5E:0B:54:49:93"}}},"request":{"raw":"POST /rtb/pl999 HTTP/1.1\r\nHost: ssp.bidvol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 209\r\nOrigin: https://instagram-my.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nCookie: bvuid=whout6r49m; bvuid2=whout6r49m\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"bvuid","value":"whout6r49m"},{"name":"bvuid2","value":"whout6r49m"}],"method":"POST","post_data":{"size":209,"data":"{\"places\":[{\"id\":\"adfox_167774708885181986\",\"placementId\":\"33078\",\"sizes\":[[300,250],[336,280]],\"targetRef\":\"https://instagram-my.ru/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":1024}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 16:50:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\nx-request-id: 5bdf0b18-9c1a-4514-844d-7ca8d7ce67dc\r\naccess-control-allow-origin: https://instagram-my.ru\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: bvuid=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None\nbvuid2=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"bvuid","value":"whout6r49m","quoted":false,"path":"/","domain":".bidvol.com","expires":"2038-01-19T03:14:07Z","raw_expires":"Tue, 19 Jan 2038 03:14:07 GMT","max_age":2147483647,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bvuid=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None"},{"name":"bvuid2","value":"whout6r49m","quoted":false,"path":"/","domain":".bidvol.com","expires":"2038-01-19T03:14:07Z","raw_expires":"Tue, 19 Jan 2038 03:14:07 GMT","max_age":2147483647,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"bvuid2=whout6r49m; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":685,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-10-03T20:21:14.704649Z","times_seen":8230,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":58,"send":0,"wait":60,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidster.net/bind/4e6d44ce-0f69-4c04-9dc3-f83845d33468?id=MmJjOTQ5NWVkZjM5OWIwNw","fqdn":"ssp.bidster.net","domain":"bidster.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:50.179Z","timestamp":1791046250179,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /bind/4e6d44ce-0f69-4c04-9dc3-f83845d33468?id=MmJjOTQ5NWVkZjM5OWIwNw HTTP/1.1\r\nHost: ssp.bidster.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-my.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worker.sttsmntz.ru/stats/format","fqdn":"worker.sttsmntz.ru","domain":"sttsmntz.ru","tld":"ru"},"ip":{"addr":"51.250.34.112","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:57.721Z","timestamp":1791046257721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worker.sttsmntz.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 10:40:05 GMT","end":"Mon, 09 Nov 2026 10:40:04 GMT"},"fingerprint":{"sha1":"39:19:18:A3:20:6B:8D:61:43:26:32:0D:62:A1:41:59:83:A1:55:94","sha256":"4B:0E:BC:41:79:E7:DD:D5:A0:32:8B:1A:45:EA:66:DF:7E:E9:4D:3F:75:07:84:B1:24:B7:94:9F:4B:70:30:A8"}}},"request":{"raw":"POST /stats/format HTTP/1.1\r\nHost: worker.sttsmntz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 323\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://instagram-my.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: ycalb\r\ndate: Sat, 03 Oct 2026 16:50:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":1063,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T21:32:38.3517Z","times_seen":18808382,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":30,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-my.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js","fqdn":"instagram-my.ru","domain":"instagram-my.ru","tld":"ru"},"ip":{"addr":"185.114.247.43","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-my.ru/","date":"2026-10-03T16:50:27.170Z","timestamp":1791046227170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-my.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 09:58:23 GMT","end":"Sun, 29 Nov 2026 09:58:22 GMT"},"fingerprint":{"sha1":"F0:93:8B:89:8A:69:B9:95:EA:E7:0C:03:4C:D0:39:53:06:D1:D7:52","sha256":"55:D3:7A:73:90:5E:D6:2F:07:54:37:6B:F7:9B:1C:0D:13:1B:A1:5C:1B:91:17:57:CA:98:A3:10:AF:FE:7F:0E"}}},"request":{"raw":"GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1\r\nHost: instagram-my.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-my.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.4\r\ndate: Sat, 03 Oct 2026 16:50:27 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 15 Feb 2023 10:32:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63ecb4d3-5b89\"\r\nexpires: Sun, 03 Oct 2027 16:50:27 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23433,"size_decoded":5715,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (23432)","md5":"63fad256b41b5d84bc1e86461a96a318","sha1":"20d44c76509b9fb61a6e005112d60a1f3b73b8ec","sha256":"a69c12ccd186a899db79fce802b46c08e71f69c2c422be2666ed8565e3add026","sha512":"09bbd78798d0a62b0020a3c97a2e1e34970806003bfbe8f6ddbbdaa248c10a4e947bf58d93f1fb468a7f820d1ba6f83e85a561e740277555f8aeba356a6d6c72","ssdeep":"384:uifv9o67LRIHsTZQu07f087x7iY3bVyYQPDcdd8HyxlYOgjYYuXCy90fY6wEvyMa:pv9o2LRysTZQugf087x7iY3JyhPgdV/n","tlshash":"8eb2a748f6aab43242afc6d9507f024ab33a655dd540d44ebd6cc9d91c94cca5233f7c","first_seen":"2023-03-08T14:35:53Z","last_seen":"2026-10-03T19:59:27.41066Z","times_seen":5154,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"instagram-my.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"instagram-my.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}