{"report_id":"c21e376f-3abe-4747-996b-03cd7f7ca465","version":6,"status":"done","tags":[],"date":"2026-04-02T15:06:37Z","url":{"schema":"https","addr":"protectlaw-navi.org/","fqdn":"protectlaw-navi.org","domain":"protectlaw-navi.org","tld":"org"},"ip":{"addr":"130.193.59.235","port":0,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"protectlaw-navi.org/","fqdn":"protectlaw-navi.org","domain":"protectlaw-navi.org","tld":"org"},"title":"Получите консультацию по вашей проблеме","dom":{"size":10712,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6053)","md5":"d3adec9656078927b870d5ef1f084b02","sha1":"175080ed3fd56394b43a5928d184234d70b41dea","sha256":"34026dd615713dab807db1a4d866e8ffa3601d977b83111a5363bc98348507d0","sha512":"c3c6522869547b863300b1e8eba0ddc500a770ba619166d17f85e97d1b6e6e3e742a0856f8b0c8461af16c6aa232d456d7c2de74607401e1687981b60e059b82","ssdeep":"192:9wiAVt4oTNtlkzf0mJTpiWnCmeepcyjriFR30MKk0eVPD++RpLAdYBzI2pNi5Q7/:1AVt4ablkzf0w2plpzND+wrT","tlshash":"1d22c9285084d5370713869cf592fb187897332fae47d5b1a8ae37b40ae5da3c8f5823","dom_hash":"domhasha35b4a33e65ea0b63e0a528174137604","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"protectlaw-navi.org/","fqdn":"protectlaw-navi.org","domain":"protectlaw-navi.org","tld":"org"},"ip":{"addr":"130.193.59.235","port":0,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T15:06:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.marquiz.ru","ip":{"addr":"130.193.56.53","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-07-07","domain_rank":1633835,"first_seen":"2018-04-24T13:28:04Z","last_seen":"2026-03-28T05:27:23.769185Z","alert_count":0,"request_count":2,"received_data":1092,"sent_data":1124,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.mrqz.me","ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2018-10-15","domain_rank":2099418,"first_seen":"2020-06-22T08:46:20Z","last_seen":"2026-03-30T23:45:06.049417Z","alert_count":0,"request_count":31,"received_data":4134329,"sent_data":14744,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.media.marquiz.ru","ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2017-07-07","domain_rank":1681102,"first_seen":"2023-04-26T18:35:43Z","last_seen":"2026-03-30T13:28:17.652339Z","alert_count":0,"request_count":3,"received_data":128612,"sent_data":1569,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"quiz.provider.marquiz.ru","ip":{"addr":"51.250.33.8","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-07-07","domain_rank":1740035,"first_seen":"2024-10-26T03:08:21Z","last_seen":"2026-03-30T13:28:17.621692Z","alert_count":0,"request_count":1,"received_data":8373,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":1,"received_data":534079,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protectlaw-navi.org","ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-20","domain_rank":0,"first_seen":"2026-04-02T15:06:40.811295Z","last_seen":"2026-04-02T15:06:40.811295Z","alert_count":0,"request_count":2,"received_data":5862,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-WdN4i3yp.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"58e6fc755a51ff89c49bbedf449c1f93","sha1":"6379f378da45aa2b91c96ee1d838211e30939ce7","sha256":"c18ab0adaf7dbb04e181d59d17388c795331caf50e65567d0e6588559bc2e0d9","sha512":"164514c6c7a022938424a35c424bb308535c8d02d6a89decfc346d1016e9c5d9501e440c80adee677b9e613d9e27394ff0f4c4b48c13d0ebf6e55b3816b72302","ssdeep":"6144:5HG4v5GBCmK48QybeJkDGWwJP1XYhKhNd5jDpPDVhthnROQeBZhvSiyciz4MPQn0:Jhv5GBCmK48QybeJkDGWwJP1XYh6d5j7","tlshash":"a2345b9db041a178c37785aab8150250f32c2bacf50c49d8f8fd5eda6ae5c54723af78","size":240944,"data":"","first_seen":"2026-04-02T15:06:47.383532Z","last_seen":"2026-04-02T15:06:47.383532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protectlaw-navi.org/","fqdn":"protectlaw-navi.org","domain":"protectlaw-navi.org","tld":"org"},"ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6557341c807e66e3bd86298c6b47f4","sha1":"97fa7ce6598facb33e5b7947432c28404cd697c3","sha256":"dcbb33035a9fb5ae728cf911da8f36e00cc0fb25848fbc8b45da6cee0f085e66","sha512":"dfcb86ace1bdf3b850d5ba424020b66db6d5ed0c735c34f591e4f4df18fd6a96a7bdbb94caa0564cafb06e90a5164f98480c07124e4dcab673c1916781b7be1e","ssdeep":"","tlshash":"8cf0dc4e2c52b06337f93534c2238a6b32620700318355288605c82468504861886c4d","size":445,"data":"","first_seen":"2026-04-02T15:06:47.396894Z","last_seen":"2026-04-02T15:06:47.396894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"32a4c8b9c3afa794ded3740a77aa2382","sha1":"7c0f471508df6c58b7505306af0459fef46b72cd","sha256":"d3b8f2c8b7e588ba31ead72da09927a929e6d414b19d685d286340fe0fbdc997","sha512":"fc88f3bd813ec6d7734ac4da5d2edb5515c56ba2e84b8fb70eae426e7c1bd1d9b6788a909d46d0171c0ad335449fefd7f81502e93b29134adaef56e480f8cf3f","ssdeep":"","tlshash":"73418624b582e577c37f0269e9b144549b380f45399641e2d4b48f2527dad29f6d7f00","size":1901,"data":"","first_seen":"2026-04-02T05:08:16.226406Z","last_seen":"2026-06-05T20:46:13.798514Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-DgQybnXG.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"8e1174e5d68533fdb7f2a36550804342","sha1":"7ec309cc71bb6aa815ad439db920741e12644a1d","sha256":"0de5c6c629effbbaefd9c479a7faa0f723c1dc1723117d2daed4cc7930018926","sha512":"3ee188350ce6f4f809b966de53d089ab7d49fd32e4f5c512dcda2741f427aac14930d70931ac84da0e67e3f47bafeb5d07ed8a6d2cc319fdeef14bbb2975bf8e","ssdeep":"384:ZIMgWrWXrG6nZOsZ44hMBWVZtvhifp8CEm7QofBQrw9vwmn9Fja5PCSU1l0:ZIMVWXrGsOsZ48MBWVZtvhYp8CcofBZC","tlshash":"ec82c7d1b5f3f4ab82f508e1c13a4654bb368b0a9429e0f0a01cd56915e78dc6a7ff78","size":17734,"data":"","first_seen":"2026-04-02T15:06:47.395724Z","last_seen":"2026-06-01T15:18:51.63822Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protectlaw-navi.org/","fqdn":"protectlaw-navi.org","domain":"protectlaw-navi.org","tld":"org"},"ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"81806ca1088a158987e3dfe9f79a17c0","sha1":"d9cc400bbcede73474807ac271c7dd58727d7d27","sha256":"ea8a871e718d9efd6704f7d467e3e264e11ca107e4b5ead64ed955dc4720703a","sha512":"3bd1c1a4418b99f15c71f53bf0e9ae7402f7239ce9660b12933cc18d69237a7f88fc0b44292059ad577ed683d70d05a9dc3d029f6d19feea9d4d2d162e5f284a","ssdeep":"","tlshash":"c5c0928822074ca096e72b450f6fb604b0523222a8e19a313e0ea3485f21d07eb98858","size":142,"data":"","first_seen":"2023-03-07T12:21:20Z","last_seen":"2026-06-06T16:17:40.868752Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PT9R7M27CF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43c6e4db80704f617dc6ceae2d52a81","sha1":"7f8f0a95971a030e14dc061478151e23bf9d32c6","sha256":"48600768018946f7a26fe0e144d3b327b7385409f0e5fb4834252afa5c23dea4","sha512":"15afa8ff7e18bcd83da3a29da044632784e9090f44eee07b519fae1e5caf6cec1bd49b5f721ffa009dbb27dbe787f7f818e16d5b2e8e62dc298ca3fc893c4989","ssdeep":"6144:bheckq2fJ9+QTkc3xmf+yEvQ8YQZffD2jX6H4l4L74WayUx:bOJ9+QTP37yEY87Eaux","tlshash":"2cb40aceb3d674225296f478d03f01cba97b25e2b49cc8aaf099cce01e7455a4167f78","size":533473,"data":"","first_seen":"2026-04-02T15:06:47.380144Z","last_seen":"2026-04-02T15:06:47.380144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-Bp5meupS.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"b52719c380ebe0bccc92a2ad1fc74e6e","sha1":"a1ef207579fdbc6928c6fa5c4038c49eddcb10e2","sha256":"77b6af9a965f3bbedcf3ea7b8e5b81b07e1bba729cc3fcc33e264cab4ee1593d","sha512":"14b422180e72ace9afe09d1c6dce7fa593f42018f3e3c4a213a372dc0552ff4364d0d3b5b21826d1b3d1ebd321828d3fdb4910535e9e1d5497e9a3703aa599b7","ssdeep":"","tlshash":"6631721ef1dc923c4a5104c495514645b10e36bca1a2586cf5e876fb0fdb15b8f2ee33","size":1460,"data":"","first_seen":"2026-04-02T15:06:47.3697Z","last_seen":"2026-04-02T15:06:47.3697Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-DcAT30o6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa5552687d270582368a1fc7fc5c8b87","sha1":"8e5756d81b2622801d39f09507ca749538926a55","sha256":"9078a53ab8c67403f98a1edc7b39e4ab36f2976fdd8ecee4c1423de6aa9d8ffa","sha512":"6ce693b68852c01cdf493ab9384de7ddbda597aaeef7c1d3012cde3bd0a939c8566c0a9fd40c0a5a673891178914e30d3ec158c465b35d5425863ed3b3d3fff8","ssdeep":"192:qo58xJ8mTjWqbtyE/yPsHVq6PXbBbsUmAlLhR4Sc53Pz4Ir8FNmpZkadUEEtpirI:qo58cwq4Bh0E0gaqq2p7n","tlshash":"72e1940590a95e79ddf7a35979c423007b440f9eb29e0068f0fc567e2bd109873fae91","size":7219,"data":"","first_seen":"2026-04-02T15:06:47.38699Z","last_seen":"2026-04-02T15:06:47.38699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/vue-vendor-CTYaFD1O.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"f22a488d22f0036abb5c94f6007fb69a","sha1":"8aa85870ee7371e676921b64b0932a05f87581f8","sha256":"7183d95922c3ba013d485c0051d254416e42154cafea334969d414d805b99272","sha512":"07c60d74060c5ecf4d9347865594b9671f945ad31adc5bea6e8fdcaef66a3c540827f7cba912026b6540aecb699e033714e8e1cb94470e5b195aaad7a3516e05","ssdeep":"6144:wtJkSkLOxM2Scx/Wq11z2uP28RnxB0diLNZNUIC0W2RLXL4iziJ:IPkLQM2ZWq1x2uPFBxB04ue4nJ","tlshash":"074439e93192707643e609e150bb1006f3396858380d84e8f56ce9ef3d7694a51bbfbe","size":271373,"data":"","first_seen":"2026-04-02T05:08:16.169755Z","last_seen":"2026-06-21T16:39:01.238264Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/crypto-vendor-CDjmgx-6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"28134a627220142290d1330b54eae4ad","sha1":"08995b3c7e9a3c09270137f7272f4357243b1612","sha256":"69002b7763028cf5f54756af01b7b05916426503d33b6cbc1ad940d803448b31","sha512":"7b1ea9a8293c7e2fe8e2607162dace0ce48c3630d9499d5880cd1d61fd715de14e238163bc6aea99bdd78312ffb7a0c03f88f5654bbe5a698ef57657f78cfb61","ssdeep":"768:6weJAtk50znrah+NxrFkhrkL0ZLlwews5aNFZaZM9OT81390q/nqZzrtNASU9Ar5:reJAiWOwN/khQxewskt5cPtNPU9ArHMU","tlshash":"03633aca328870d163a764e0093f600b72b739a60a6c9588f554eaedac7c6dd4236d3d","size":68911,"data":"","first_seen":"2026-04-02T15:06:47.370542Z","last_seen":"2026-06-01T15:18:51.634119Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-BB0lD3dI.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc60c0fe577da2c118ba62af74de09b1","sha1":"7e8a001ffbfdfcd93c94b63083d281f57fd5f923","sha256":"a8cecaa77b2d6b6376b5a8c227d5cb825b847d8c6e49aa768abeca2802c0b59e","sha512":"590bc812613d160e38ee1f0ce5bcecf9fe59d0fc4f3e7d0d5223650d90fbdd44b9f3c2e7795ae2bce591d371595d8a9d1a1535ebbcf5e8eb003b3a01bde38da6","ssdeep":"12288:WJWiGyOYEza/Sf9R3SuJD32rcebmoMf9ZA8onJqHadxF:WJWijJQ8y1K8onJqHavF","tlshash":"42a46c8571c67475039742e4907b0506f33a6978304dd0a8f5aceafd39bac4a92bbf39","size":451236,"data":"","first_seen":"2026-04-02T15:06:47.381468Z","last_seen":"2026-04-02T15:06:47.381468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/marquiz-vendor-BrM_Ykol.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"710c0a0d591b0cd13f0aa5fd7e3b8cf4","sha1":"18707cac2626803a59b2941d5f74318d20d13457","sha256":"afb2bdcfe55bf3f67e2baa9b452ce2e97da81d4c0869a1c2d3d09f07fdd82cfd","sha512":"19ebe449158cfb503de16c530c8257d29b583e0042c64cc541a9979de3727144f43a0aa6314ed7ab03f1af83fec772730c4d8774317ca2ef960d850307bed75d","ssdeep":"6144:+LkkSJroogaZuoxzc98M32W7p8BV3fSkSJroODDfhz41f:+IkSoopsjkSoO/E","tlshash":"2f54c4c972d3f0a583a364b0406f480af23e6d65a84cd068f2b7d5e5bcb9909c177f69","size":292557,"data":"","first_seen":"2026-04-02T15:06:47.384922Z","last_seen":"2026-06-01T15:18:51.642528Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-CZIwYJyf.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"8f4582b994b6e1df53925030ca81fd8c","sha1":"8efd89355ccc7b9b820c32b481b52b9f9366cf27","sha256":"31a238179e9f39b7a2470881611c6066ccffae3a418a181cca86ce556c694336","sha512":"8eaa545fc9a3bc4323855bd5a3fb6605891d12d2cb9c670d9ef8a01e70a5ee8065b462e364c8570fb4fb11832f5d9ea6af67b275add925582fda252a294958ba","ssdeep":"1536:QC7fLmS/KRKWQBGRkoILSxft6F0FHjx70bB7GM2IDs:NKiGRknLSxfgmFHjxAbB7GYDs","tlshash":"19f30a8671946c360bef46c724180142e308099dfc5598fcbdbc9dee7b9ac4561aefb8","size":159003,"data":"","first_seen":"2026-04-02T05:08:16.154583Z","last_seen":"2026-06-21T16:39:01.125152Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"protectlaw-navi.org/favicon.ico","fqdn":"protectlaw-navi.org","domain":"protectlaw-navi.org","tld":"org"},"ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protectlaw-navi.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 09:58:26 GMT","end":"Sun, 17 May 2026 09:58:25 GMT"},"fingerprint":{"sha1":"38:C0:2F:A7:18:6C:08:2C:B0:3C:8D:8B:11:DA:4F:34:13:C2:9F:7D","sha256":"88:47:30:5D:9A:55:9D:C5:A9:3B:7C:5D:09:B7:0A:B0:CF:80:FD:3F:5A:1D:3D:BF:54:B0:F4:C5:D1:E6:B6:1B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: protectlaw-navi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 3237\r\netag: \"7ce1a75cf3983d1d334e6fabca0fd505\"\r\nlast-modified: Tue, 31 Mar 2026 08:25:00 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-request-id: 5f6cc6f9dc7c46a8\r\nx-cached: HIT\r\nx-cached-openresty: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3237,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"7ce1a75cf3983d1d334e6fabca0fd505","sha1":"bd7ea46437be182e9ab18a58e5e8cd59c3968972","sha256":"6401e2add110bb09d8ccaed1bec1fbd48d7f0899e2e431d1987a19ed6953ae6e","sha512":"f0f74c71a4c4db2b97fef604e65a4a75decd8906f051930b3dfa79add4f27cc2d384efece86f3b7e896ecbedcdb307e8f6b1658b817e21ea2c809bc43392902f","ssdeep":"","tlshash":"24616f2383f2238155214f04a13dcbfcf5404f9bda3915558931f869f269dae9503b42","first_seen":"2024-12-08T03:17:13.383098Z","last_seen":"2026-06-01T15:18:51.646489Z","times_seen":114,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":458,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.marquiz.ru/v1/analytics/opening?lng=en-US\u0026tz=UTC","fqdn":"api.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"130.193.56.53","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:08 GMT","end":"Tue, 02 Jun 2026 12:47:07 GMT"},"fingerprint":{"sha1":"C3:9C:84:69:A1:AF:88:F2:B8:16:A6:2C:81:2B:C3:8F:35:73:30:D6","sha256":"F1:23:4B:34:86:15:A1:35:62:E5:69:98:CC:60:CD:70:AC:D2:56:0B:69:49:ED:2C:4C:39:16:9F:D2:06:74:99"}}},"request":{"raw":"POST /v1/analytics/opening?lng=en-US\u0026tz=UTC HTTP/1.1\r\nHost: api.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"quizId\":\"66ed6b3c2293f9002629e070\",\"visitorId\":\"6fd45bf4-988c-4fca-8997-4f0468309609\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\naccess-control-allow-origin: https://protectlaw-navi.org\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nsurrogate-control: no-store\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-06-28T05:36:54.075994Z","times_seen":32892,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-Bp5meupS.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/CookieNotice-Bp5meupS.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: text/javascript\r\netag: W/\"b52719c380ebe0bccc92a2ad1fc74e6e\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: e5dfa24ecbca29dd\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1445)","md5":"b52719c380ebe0bccc92a2ad1fc74e6e","sha1":"a1ef207579fdbc6928c6fa5c4038c49eddcb10e2","sha256":"77b6af9a965f3bbedcf3ea7b8e5b81b07e1bba729cc3fcc33e264cab4ee1593d","sha512":"14b422180e72ace9afe09d1c6dce7fa593f42018f3e3c4a213a372dc0552ff4364d0d3b5b21826d1b3d1ebd321828d3fdb4910535e9e1d5497e9a3703aa599b7","ssdeep":"","tlshash":"6631721ef1dc923c4a5104c495514645b10e36bca1a2586cf5e876fb0fdb15b8f2ee33","first_seen":"2026-04-02T15:06:47.3697Z","last_seen":"2026-04-02T15:06:47.3697Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/crypto-vendor-CDjmgx-6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/crypto-vendor-CDjmgx-6.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"28134a627220142290d1330b54eae4ad\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 663f71875d0f09b9\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68911,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28134a627220142290d1330b54eae4ad","sha1":"08995b3c7e9a3c09270137f7272f4357243b1612","sha256":"69002b7763028cf5f54756af01b7b05916426503d33b6cbc1ad940d803448b31","sha512":"7b1ea9a8293c7e2fe8e2607162dace0ce48c3630d9499d5880cd1d61fd715de14e238163bc6aea99bdd78312ffb7a0c03f88f5654bbe5a698ef57657f78cfb61","ssdeep":"768:6weJAtk50znrah+NxrFkhrkL0ZLlwews5aNFZaZM9OT81390q/nqZzrtNASU9Ar5:reJAiWOwN/khQxewskt5cPtNPU9ArHMU","tlshash":"03633aca328870d163a764e0093f600b72b739a60a6c9588f554eaedac7c6dd4236d3d","first_seen":"2026-04-02T15:06:47.370542Z","last_seen":"2026-06-01T15:18:51.634119Z","times_seen":6,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.media.marquiz.ru/v1/image/upload/aiqGnHBgtBheGUfjxyoDNy.png?format=webp\u0026func=auto\u0026fit=cover\u0026width=1280\u0026dpr=1","fqdn":"cdn.media.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:17.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.media.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:40:41 GMT","end":"Sun, 21 Jun 2026 08:40:40 GMT"},"fingerprint":{"sha1":"BF:04:4F:C5:30:7E:2F:0D:5F:ED:61:8D:57:8F:6E:BD:9D:D6:A7:D9","sha256":"E4:15:67:F1:3B:AD:B3:32:3B:59:CD:91:0D:9B:65:CF:F4:2B:78:DF:C4:8C:5D:9E:33:9B:73:16:34:B6:DB:DE"}}},"request":{"raw":"GET /v1/image/upload/aiqGnHBgtBheGUfjxyoDNy.png?format=webp\u0026func=auto\u0026fit=cover\u0026width=1280\u0026dpr=1 HTTP/1.1\r\nHost: cdn.media.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: image/webp\r\nvary: accept, save-data\r\naccess-control-allow-origin: *\r\ncache-control: max-age=345600\r\netag: 663f64638a303ff7a57b5b22\r\nx-request-id: 69ba2eb61498208f\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1284, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"32b8be716fe848ccb9d15a866a6c0ef7","sha1":"18556f043e530ced8a8b98ae591c444b267b7f2f","sha256":"33ca08c16e63b9486b80c98e130dac3009ecde8a1802e83c9ae694dc44a2cb5a","sha512":"44efad9d8e4f246cbbab65a91c0413621653a86f7d727d99934ae0cf8f8b6e3ab3b4633937e3b07957cde9df3b00c4ae546352acf8d547c271dae0d868f55107","ssdeep":"3072:qx05Tmo4BQpmepZcqVydahB/3WLFC2GgpPLR9EJvGrss83:q6JmoOQ0epZEdYhGZGgpPl9WGg3","tlshash":"7bc312615328efece213a26e1d9f0e7d48ebbb825851a486c35f88cc88935d4d378d07","first_seen":"2026-04-02T15:06:47.371437Z","last_seen":"2026-04-02T15:06:47.371437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":130,"dns":38,"connect":44,"send":0,"wait":129,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/whitelabelRu-JwwhnusU.svg","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:17.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/whitelabelRu-JwwhnusU.svg HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.mrqz.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/assets/Main-Bo7dDYLc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"3737516599cee4a10e1d3a3317a7d075\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 14e81771a706254e\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (967)","md5":"3737516599cee4a10e1d3a3317a7d075","sha1":"6e7ad0037798f7197a6ae71a62f18b5c4385d5e0","sha256":"110137cf081c0219dd8f6f260b4709a9ecbff68dc314f72baf9dd0a58e17c942","sha512":"82fbf64adcbb14cd10042f3433a4bc4ed9fda9b4d32b4cf86900af8928ada8b21430711dae6c642c332c6a6ef78f06c700f8ec038d72c894de8c95eba9475726","ssdeep":"192:Ws5FBDSyHA56kKW3KwAvhPWdWUupEpY3dWRWPYMT/8hPNWMdOL7rfDgu6QBY7jd5:vLZZke0+UfO7rrgR/d5","tlshash":"741224d432f841d4b443864edb3f01b3a8f9bcf79e9093e4e6919e54e10b4f449b69a1","first_seen":"2025-04-30T07:15:59.076015Z","last_seen":"2026-06-05T20:46:13.878942Z","times_seen":337,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quiz.provider.marquiz.ru/v1/quizzes/findByDomain?domain=protectlaw-navi.org","fqdn":"quiz.provider.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"51.250.33.8","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quiz.provider.marquiz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 01:19:54 GMT","end":"Tue, 05 May 2026 01:19:53 GMT"},"fingerprint":{"sha1":"DB:38:21:5A:7E:57:D5:2B:69:E8:AE:37:B7:1D:6D:3B:30:06:7F:BD","sha256":"3E:02:B4:53:44:01:CC:38:BB:F9:7F:C1:47:24:DA:9F:0D:F7:BE:8D:47:42:53:AA:BA:68:4A:8B:02:81:AC:A6"}}},"request":{"raw":"GET /v1/quizzes/findByDomain?domain=protectlaw-navi.org HTTP/1.1\r\nHost: quiz.provider.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 7977\r\netag: W/\"1f29-0b0qqmuSMd/aT1craJcSKClCqyU\"\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\nserver: ycalb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7977,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"57da6545d9281b9b420eab0e356f5864","sha1":"d1bd2aaa6b9231dfda4f572b689712282942ab25","sha256":"df1cde5bbdab284dc9c64d061db0d02a4f2fe65208823a9f4ced54bd5bf1c1ba","sha512":"46429b24634bff9148a0513b1b3d90cc80aadb5081204b1e4c45091701dd8dbfc672af190193d55959981d7c1d6f8be0348474b1df73b7d8e5f7b9c6a1a9df3a","ssdeep":"192:Qc8HOqRXlRjNTfKkB+kLEXPQuQy9+heOzWY1:Qc8bR5fKkB+kLsPQty9+h5Wq","tlshash":"5ff1b7158d9c9cfe86459386e48e7f0f6aad027fb2c66a18c0999e3c60eb1d44331b57","first_seen":"2026-04-02T15:06:47.37325Z","last_seen":"2026-04-02T15:06:47.37325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":108,"dns":27,"connect":37,"send":0,"wait":41,"receive":5,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Regular-BGIKGzAk.woff2","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Regular-BGIKGzAk.woff2 HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28260\r\netag: \"2c8b07ea9c186608d63d64b7dfe9045f\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 0523086cca18f8d8\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28260, version 1.0","md5":"2c8b07ea9c186608d63d64b7dfe9045f","sha1":"2d550e6f5d1179483b99bc8f2fd47613b88c0f11","sha256":"25209e0f01765fad0a6331ad3baf3ed94bd0eaed8c26d87694c5a57524a6030d","sha512":"ca6b768b8d78e16208857e822a5e94f2453ea51ab460f2571c975f69b630ae32b8234a3da1c93dba800eeac7fa7985857d15bad23c886a55cab9be352549e533","ssdeep":"768:wcagi+XB3PidEY0uUNxpd4tAQqBPKor0CM/iBm6djjcWHj:wcbxB3z9uUxAtqByogCNBmqjjcWD","tlshash":"50c2e1249ab03a15eb46bebee2b5613cefe2b8d4091d5dde07c3acbd410d61164f5821","first_seen":"2023-04-09T12:27:54Z","last_seen":"2026-06-06T11:48:23.678695Z","times_seen":289,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: text/javascript\r\netag: W/\"32a4c8b9c3afa794ded3740a77aa2382\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 0f647361f724e1e0\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1901,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1899)","md5":"32a4c8b9c3afa794ded3740a77aa2382","sha1":"7c0f471508df6c58b7505306af0459fef46b72cd","sha256":"d3b8f2c8b7e588ba31ead72da09927a929e6d414b19d685d286340fe0fbdc997","sha512":"fc88f3bd813ec6d7734ac4da5d2edb5515c56ba2e84b8fb70eae426e7c1bd1d9b6788a909d46d0171c0ad335449fefd7f81502e93b29134adaef56e480f8cf3f","ssdeep":"","tlshash":"73418624b582e577c37f0269e9b144549b380f45399641e2d4b48f2527dad29f6d7f00","first_seen":"2026-04-02T05:08:16.226406Z","last_seen":"2026-06-05T20:46:13.798514Z","times_seen":56,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Medium-B0L0cBlt.woff2","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:17.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Medium-B0L0cBlt.woff2 HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29296\r\netag: \"dcc50aca38c591ba7746c9ae90a16b67\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 209ce6c8821f5319\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29296, version 1.0","md5":"dcc50aca38c591ba7746c9ae90a16b67","sha1":"37bc92597046be4ba85a8ff5f7e1034606e9f431","sha256":"6589d27de60e678c3e38f593af996efb1b97d76d374c7b6f7b79fae676bb297a","sha512":"01c426d78b4580b8e619762b912ec71b0a6107b3eb850d938811e50d05d55014deb9c7b2791229427584c894a160d222cf5ce930da8632b2cede8f8305525e63","ssdeep":"768:8OqCErcHPxeAnzCiLAIBZtwBEgRf9byyeny9qrN:8agcvxeSznFBZtwBLl9bgnCqB","tlshash":"8fd2f12dc53acf9416e06b8bf8d26d303a42a7d6cbf54d54a824cf2f6984a11f71724d","first_seen":"2023-05-08T17:13:57Z","last_seen":"2026-06-05T20:14:51.562081Z","times_seen":293,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/SemiBold2-fQv7AVbs.woff2","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:17.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/SemiBold2-fQv7AVbs.woff2 HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28892\r\netag: \"a72293461a122cdc3c8430e8d58a4219\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: e85a4ecaf6113880\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28892,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28892, version 1.0","md5":"a72293461a122cdc3c8430e8d58a4219","sha1":"4de27ddd675c3d4bea9c497a2743545e1da19cd6","sha256":"c0eb55048100de95c96b40e8c5bec08f2fc771c3fd96c73d36587bfd0c7a3ba0","sha512":"35184b4d20d146594e958a702e7a3894fc5f837be2f0916d33a2b2ed8fbbc603aa24a12edcc023ab1cf971c2f9556b6ff4ea099527a903354ded30adabcf5fda","ssdeep":"384:octfnJlLfGCrYIvzil/TKj85jU/SiUl6WLB7XXi3XawR8aURtoOtyjItOJCNZpJ:oct/PfGCr5ipFmKLB7niHa5a0TMIvNZr","tlshash":"48d2e0be8decd03e91ca87bff9d591afc2003a6bdd5bbacf8356084882091874241216","first_seen":"2023-05-10T15:33:40Z","last_seen":"2026-06-06T11:48:23.629779Z","times_seen":234,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-BNCx9VBM.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:14.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/buefy-vendor-BNCx9VBM.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/css\r\netag: W/\"64375bac4efe8d89a7d073dd0ae2a282\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 0bc5f3c876fad70f\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":410531,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"64375bac4efe8d89a7d073dd0ae2a282","sha1":"7b557f90aa2c019d4b1d989ced0ca4e8642b0aeb","sha256":"e22412669754464ac11547ec411c0e8a49ba8459759d14d97d0662a846773e97","sha512":"628879d7557e3f2a29491b0825f874d68a18ac9311f927cba3d6e8012c10457b39bdc7a73ddd5e5aa432dc7c699af337db1bffbe8357d0e27f2b1ca1faa9316d","ssdeep":"1536:wXjSz2pa49JJEZYUBm5hFZ/j2zELhBTvCnHqkRy4OtUMNUMtENXd/lUgXwk:qL7/7T9UMQXdkk","tlshash":"9794f87bd9913d4f31138c2d14d0b3a8171e9469d20627fbb4a3b5a4c78b78a1a73f4a","first_seen":"2026-01-29T05:38:46.521512Z","last_seen":"2026-06-21T16:39:01.239882Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1376,"timings":{"blocked":581,"dns":86,"connect":45,"send":0,"wait":209,"receive":0,"ssl":452},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/vue-vendor-CTYaFD1O.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/vue-vendor-CTYaFD1O.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"f22a488d22f0036abb5c94f6007fb69a\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 5f3fdda36152cd09\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271373,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44147)","md5":"f22a488d22f0036abb5c94f6007fb69a","sha1":"8aa85870ee7371e676921b64b0932a05f87581f8","sha256":"7183d95922c3ba013d485c0051d254416e42154cafea334969d414d805b99272","sha512":"07c60d74060c5ecf4d9347865594b9671f945ad31adc5bea6e8fdcaef66a3c540827f7cba912026b6540aecb699e033714e8e1cb94470e5b195aaad7a3516e05","ssdeep":"6144:wtJkSkLOxM2Scx/Wq11z2uP28RnxB0diLNZNUIC0W2RLXL4iziJ:IPkLQM2ZWq1x2uPFBxB04ue4nJ","tlshash":"074439e93192707643e609e150bb1006f3396858380d84e8f56ce9ef3d7694a51bbfbe","first_seen":"2026-04-02T05:08:16.169755Z","last_seen":"2026-06-21T16:39:01.238264Z","times_seen":91,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger-Cm-uOaHj.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/ConversionTrigger-Cm-uOaHj.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/css\r\netag: W/\"adb2884e003fceebf5bdabf18739d756\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 5453338aad27d031\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7955,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7954)","md5":"adb2884e003fceebf5bdabf18739d756","sha1":"d47a5d7cca349bb24749d8a48e5e9ad2276ffd9f","sha256":"52f320032cb32dfbaa6da27b9f85352370081378f025b67335713b91cbf763c0","sha512":"d92359e49b46ceff8b5a7faa4135663e94e625a5629504562bad76d7420be9c2fef4c29af27a92c6e1d1d4e8a418e060b939750739d5db96e0a9ad27274f3c0e","ssdeep":"192:eCebiCebICBlTucKvE/F6nr8SeqAYRMKcJKFZg99jhe5kChe5k6di:VlTucZ/gr8SeqAYRMKcJKI9jqidi","tlshash":"04f1eebf9991028ae55f4e27c7dc99a80218c76724720ede738364078bc7bee61d9743","first_seen":"2026-03-14T09:25:34.008684Z","last_seen":"2026-06-05T20:46:13.875695Z","times_seen":62,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PT9R7M27CF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtag/js?id=G-PT9R7M27CF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\nexpires: Thu, 02 Apr 2026 15:06:16 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 174319\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533473,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e43c6e4db80704f617dc6ceae2d52a81","sha1":"7f8f0a95971a030e14dc061478151e23bf9d32c6","sha256":"48600768018946f7a26fe0e144d3b327b7385409f0e5fb4834252afa5c23dea4","sha512":"15afa8ff7e18bcd83da3a29da044632784e9090f44eee07b519fae1e5caf6cec1bd49b5f721ffa009dbb27dbe787f7f818e16d5b2e8e62dc298ca3fc893c4989","ssdeep":"6144:bheckq2fJ9+QTkc3xmf+yEvQ8YQZffD2jX6H4l4L74WayUx:bOJ9+QTP37yEY87Eaux","tlshash":"2cb40aceb3d674225296f478d03f01cba97b25e2b49cc8aaf099cce01e7455a4167f78","first_seen":"2026-04-02T15:06:47.380144Z","last_seen":"2026-04-02T15:06:47.380144Z","times_seen":1,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":111,"dns":1,"connect":28,"send":0,"wait":73,"receive":88,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.marquiz.ru/v1/analytics/opening?lng=en-US\u0026tz=UTC","fqdn":"api.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"130.193.56.53","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:08 GMT","end":"Tue, 02 Jun 2026 12:47:07 GMT"},"fingerprint":{"sha1":"C3:9C:84:69:A1:AF:88:F2:B8:16:A6:2C:81:2B:C3:8F:35:73:30:D6","sha256":"F1:23:4B:34:86:15:A1:35:62:E5:69:98:CC:60:CD:70:AC:D2:56:0B:69:49:ED:2C:4C:39:16:9F:D2:06:74:99"}}},"request":{"raw":"OPTIONS /v1/analytics/opening?lng=en-US\u0026tz=UTC HTTP/1.1\r\nHost: api.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://protectlaw-navi.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-28T06:17:40.95431Z","times_seen":16782524,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":89,"dns":22,"connect":33,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-BB0lD3dI.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:14.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/index-BB0lD3dI.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/javascript\r\netag: W/\"cc60c0fe577da2c118ba62af74de09b1\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 50a2e8525a288ab2\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20512)","md5":"cc60c0fe577da2c118ba62af74de09b1","sha1":"7e8a001ffbfdfcd93c94b63083d281f57fd5f923","sha256":"a8cecaa77b2d6b6376b5a8c227d5cb825b847d8c6e49aa768abeca2802c0b59e","sha512":"590bc812613d160e38ee1f0ce5bcecf9fe59d0fc4f3e7d0d5223650d90fbdd44b9f3c2e7795ae2bce591d371595d8a9d1a1535ebbcf5e8eb003b3a01bde38da6","ssdeep":"12288:WJWiGyOYEza/Sf9R3SuJD32rcebmoMf9ZA8onJqHadxF:WJWijJQ8y1K8onJqHavF","tlshash":"42a46c8571c67475039742e4907b0506f33a6978304dd0a8f5aceafd39bac4a92bbf39","first_seen":"2026-04-02T15:06:47.381468Z","last_seen":"2026-04-02T15:06:47.381468Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1257,"timings":{"blocked":582,"dns":89,"connect":41,"send":0,"wait":89,"receive":0,"ssl":452},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-CZIwYJyf.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/buefy-vendor-CZIwYJyf.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"8f4582b994b6e1df53925030ca81fd8c\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 7e04ab45555a1e95\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159003,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41287)","md5":"8f4582b994b6e1df53925030ca81fd8c","sha1":"8efd89355ccc7b9b820c32b481b52b9f9366cf27","sha256":"31a238179e9f39b7a2470881611c6066ccffae3a418a181cca86ce556c694336","sha512":"8eaa545fc9a3bc4323855bd5a3fb6605891d12d2cb9c670d9ef8a01e70a5ee8065b462e364c8570fb4fb11832f5d9ea6af67b275add925582fda252a294958ba","ssdeep":"1536:QC7fLmS/KRKWQBGRkoILSxft6F0FHjx70bB7GM2IDs:NKiGRknLSxfgmFHjxAbB7GYDs","tlshash":"19f30a8671946c360bef46c724180142e308099dfc5598fcbdbc9dee7b9ac4561aefb8","first_seen":"2026-04-02T05:08:16.154583Z","last_seen":"2026-06-21T16:39:01.125152Z","times_seen":91,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-WdN4i3yp.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Main-WdN4i3yp.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"58e6fc755a51ff89c49bbedf449c1f93\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: a2425e5ce4272a7a\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":240944,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59003)","md5":"58e6fc755a51ff89c49bbedf449c1f93","sha1":"6379f378da45aa2b91c96ee1d838211e30939ce7","sha256":"c18ab0adaf7dbb04e181d59d17388c795331caf50e65567d0e6588559bc2e0d9","sha512":"164514c6c7a022938424a35c424bb308535c8d02d6a89decfc346d1016e9c5d9501e440c80adee677b9e613d9e27394ff0f4c4b48c13d0ebf6e55b3816b72302","ssdeep":"6144:5HG4v5GBCmK48QybeJkDGWwJP1XYhKhNd5jDpPDVhthnROQeBZhvSiyciz4MPQn0:Jhv5GBCmK48QybeJkDGWwJP1XYh6d5j7","tlshash":"a2345b9db041a178c37785aab8150250f32c2bacf50c49d8f8fd5eda6ae5c54723af78","first_seen":"2026-04-02T15:06:47.383532Z","last_seen":"2026-04-02T15:06:47.383532Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-Bp5meupS.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/CookieNotice-Bp5meupS.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"b52719c380ebe0bccc92a2ad1fc74e6e\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: b6c7cc32baafee61\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1445)","md5":"b52719c380ebe0bccc92a2ad1fc74e6e","sha1":"a1ef207579fdbc6928c6fa5c4038c49eddcb10e2","sha256":"77b6af9a965f3bbedcf3ea7b8e5b81b07e1bba729cc3fcc33e264cab4ee1593d","sha512":"14b422180e72ace9afe09d1c6dce7fa593f42018f3e3c4a213a372dc0552ff4364d0d3b5b21826d1b3d1ebd321828d3fdb4910535e9e1d5497e9a3703aa599b7","ssdeep":"","tlshash":"6631721ef1dc923c4a5104c495514645b10e36bca1a2586cf5e876fb0fdb15b8f2ee33","first_seen":"2026-04-02T15:06:47.3697Z","last_seen":"2026-04-02T15:06:47.3697Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/marquiz-vendor-BrM_Ykol.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:15.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/marquiz-vendor-BrM_Ykol.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/javascript\r\netag: W/\"710c0a0d591b0cd13f0aa5fd7e3b8cf4\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: d6cff2185348bd69\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292557,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (38073)","md5":"710c0a0d591b0cd13f0aa5fd7e3b8cf4","sha1":"18707cac2626803a59b2941d5f74318d20d13457","sha256":"afb2bdcfe55bf3f67e2baa9b452ce2e97da81d4c0869a1c2d3d09f07fdd82cfd","sha512":"19ebe449158cfb503de16c530c8257d29b583e0042c64cc541a9979de3727144f43a0aa6314ed7ab03f1af83fec772730c4d8774317ca2ef960d850307bed75d","ssdeep":"6144:+LkkSJroogaZuoxzc98M32W7p8BV3fSkSJroODDfhz41f:+IkSoopsjkSoO/E","tlshash":"2f54c4c972d3f0a583a364b0406f480af23e6d65a84cd068f2b7d5e5bcb9909c177f69","first_seen":"2026-04-02T15:06:47.384922Z","last_seen":"2026-06-01T15:18:51.642528Z","times_seen":6,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-RIHVCrIm.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/StartPage-RIHVCrIm.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/css\r\netag: W/\"883ead383030fabd03f405725063a707\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: bebcd58875e6de77\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54134)","md5":"883ead383030fabd03f405725063a707","sha1":"ef89446c5804cc3e988a632cc7b8f5d395644e46","sha256":"122c9fc91e0299a768ea556fbe35943f63752b08e81a5d0715b5cbb4cc77f0f4","sha512":"3ec8ad032b2b48ad76927c7c2260c4ac309b626e174c8e21aa3a4ed758af0bd4187f33ed184a0cdc8dca2241df5c102aeedf4b196365cbf407a4cc03d0a27cd1","ssdeep":"1536:LBSjCA8Vn1yicCaUZUxLnLoa68aRLop6fopbvLoO6caxLo16xaUXUUUG8s:LBSjCA8Vn1yicC8Ln9aRMbvdaxr78s","tlshash":"8933fc664af6c239cd1fdb5933d833884e74920ab10f16fda436a96547c339e0793e86","first_seen":"2026-03-14T09:25:34.01799Z","last_seen":"2026-04-05T10:16:14.915288Z","times_seen":12,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-DcAT30o6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/StartPage-DcAT30o6.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"aa5552687d270582368a1fc7fc5c8b87\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 59a68f93ab48a00d\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7219,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (7218)","md5":"aa5552687d270582368a1fc7fc5c8b87","sha1":"8e5756d81b2622801d39f09507ca749538926a55","sha256":"9078a53ab8c67403f98a1edc7b39e4ab36f2976fdd8ecee4c1423de6aa9d8ffa","sha512":"6ce693b68852c01cdf493ab9384de7ddbda597aaeef7c1d3012cde3bd0a939c8566c0a9fd40c0a5a673891178914e30d3ec158c465b35d5425863ed3b3d3fff8","ssdeep":"192:qo58xJ8mTjWqbtyE/yPsHVq6PXbBbsUmAlLhR4Sc53Pz4Ir8FNmpZkadUEEtpirI:qo58cwq4Bh0E0gaqq2p7n","tlshash":"72e1940590a95e79ddf7a35979c423007b440f9eb29e0068f0fc567e2bd109873fae91","first_seen":"2026-04-02T15:06:47.38699Z","last_seen":"2026-04-02T15:06:47.38699Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.media.marquiz.ru/v1/image/upload/pqpc60zibbncy1jhbx0m.png?format=png\u0026func=auto\u0026fit=cover\u0026width=96\u0026dpr=1","fqdn":"cdn.media.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:17.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.media.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:40:41 GMT","end":"Sun, 21 Jun 2026 08:40:40 GMT"},"fingerprint":{"sha1":"BF:04:4F:C5:30:7E:2F:0D:5F:ED:61:8D:57:8F:6E:BD:9D:D6:A7:D9","sha256":"E4:15:67:F1:3B:AD:B3:32:3B:59:CD:91:0D:9B:65:CF:F4:2B:78:DF:C4:8C:5D:9E:33:9B:73:16:34:B6:DB:DE"}}},"request":{"raw":"GET /v1/image/upload/pqpc60zibbncy1jhbx0m.png?format=png\u0026func=auto\u0026fit=cover\u0026width=96\u0026dpr=1 HTTP/1.1\r\nHost: cdn.media.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: image/png\r\nvary: accept, save-data\r\naccess-control-allow-origin: *\r\ncache-control: max-age=345600\r\netag: 65bbdb4f8ea552e365a6d5b3\r\nx-request-id: 13f2f4374c019037\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 47, 8-bit colormap, non-interlaced","md5":"512e86ca7169f44aa6e889ff44c264b0","sha1":"d61fef7f2b35bc7dfd098eb180134f7e17811b10","sha256":"311c549f17d4a42a1471688b28d97a0935768a60b9c3da4cd4c4e78287301ae1","sha512":"d6da8acfd366f3d97f6ad5a3d824d608994b6dcc4f40abadc893092f3285b4f7b5db442cf0cfca573c46f2c1a98145c614a737b105239e3b17b70fe928389a5d","ssdeep":"","tlshash":"75f041c0424365884bed4be708dc6f21e7b7c07e6695d21e00a94327b3572cb0067e0a","first_seen":"2026-04-02T15:06:47.387913Z","last_seen":"2026-04-02T15:06:47.387913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":144,"connect":42,"send":0,"wait":107,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-idVO1THo.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:14.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/maps-vendor-idVO1THo.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 403\r\netag: \"611e7356ef02a7e8e6a20f492680fbf4\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: e4b8772f93042f38\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (402)","md5":"611e7356ef02a7e8e6a20f492680fbf4","sha1":"5f93d4095d77b4ba10f8b3608624126b24be315d","sha256":"6b428d99fe1c61c633ef8ce0614719faa8f0ceeeece5271061c2e7bffaf0f75e","sha512":"85e0ec65996a8eb75139ce91a1bc3818c6975d46d67b978fe03f59160cb2bba61fea15f03fef4ed33f24f58bae9b159490d33bf73b135872f0fad894e7b4ebde","ssdeep":"","tlshash":"2de0e532eed3ad3aa062076a95e01e0d1e30d923a5138ea8d27162989779c4a280d2d3","first_seen":"2026-01-29T05:38:46.614475Z","last_seen":"2026-06-21T16:39:01.130809Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1258,"timings":{"blocked":584,"dns":87,"connect":48,"send":0,"wait":87,"receive":0,"ssl":450},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/vue-vendor-CTYaFD1O.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:15.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/vue-vendor-CTYaFD1O.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/javascript\r\netag: W/\"f22a488d22f0036abb5c94f6007fb69a\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: af0ca4121d5415f2\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271373,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44147)","md5":"f22a488d22f0036abb5c94f6007fb69a","sha1":"8aa85870ee7371e676921b64b0932a05f87581f8","sha256":"7183d95922c3ba013d485c0051d254416e42154cafea334969d414d805b99272","sha512":"07c60d74060c5ecf4d9347865594b9671f945ad31adc5bea6e8fdcaef66a3c540827f7cba912026b6540aecb699e033714e8e1cb94470e5b195aaad7a3516e05","ssdeep":"6144:wtJkSkLOxM2Scx/Wq11z2uP28RnxB0diLNZNUIC0W2RLXL4iziJ:IPkLQM2ZWq1x2uPFBxB04ue4nJ","tlshash":"074439e93192707643e609e150bb1006f3396858380d84e8f56ce9ef3d7694a51bbfbe","first_seen":"2026-04-02T05:08:16.169755Z","last_seen":"2026-06-21T16:39:01.238264Z","times_seen":91,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-CZIwYJyf.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:15.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/buefy-vendor-CZIwYJyf.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/javascript\r\netag: W/\"8f4582b994b6e1df53925030ca81fd8c\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 6c2a706f32118ff9\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159003,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41287)","md5":"8f4582b994b6e1df53925030ca81fd8c","sha1":"8efd89355ccc7b9b820c32b481b52b9f9366cf27","sha256":"31a238179e9f39b7a2470881611c6066ccffae3a418a181cca86ce556c694336","sha512":"8eaa545fc9a3bc4323855bd5a3fb6605891d12d2cb9c670d9ef8a01e70a5ee8065b462e364c8570fb4fb11832f5d9ea6af67b275add925582fda252a294958ba","ssdeep":"1536:QC7fLmS/KRKWQBGRkoILSxft6F0FHjx70bB7GM2IDs:NKiGRknLSxfgmFHjxAbB7GYDs","tlshash":"19f30a8671946c360bef46c724180142e308099dfc5598fcbdbc9dee7b9ac4561aefb8","first_seen":"2026-04-02T05:08:16.154583Z","last_seen":"2026-06-21T16:39:01.125152Z","times_seen":91,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-Bo7dDYLc.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Main-Bo7dDYLc.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/css\r\netag: W/\"437b1a4b4cae7b8549f6243a9ba403ba\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: a962432e28fd5745\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":197650,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"437b1a4b4cae7b8549f6243a9ba403ba","sha1":"b7cb0f853228281301b324ff8b6ad347791ac83e","sha256":"00fb9cc9f3bbe4c2bd4f4677f32cc56d7d9b40b17e963399658e3d1bbf26b54e","sha512":"7f52d1d73e03ff026110f7571b324ed8d68e520489507c14d38e65d8481e7fb176294914ff27ec1063aed1802a2d099caa8aca8711cf19b4ead6010cfb72b5ee","ssdeep":"1536:XZHVBMcL5GKNmqXlAGqXlAsrtAK4+e1w6c1oH88yxYcNjPgqZucyyiM2Oklfhv5i:nPWrtAK4+e1w6c1V8y6cNjPWAQGh8K","tlshash":"3114e77f9ca01358e51bcd1503d89ba85218e027e6220beebb137d05cbc77d725ea64b","first_seen":"2026-04-02T15:06:47.389434Z","last_seen":"2026-04-02T15:06:47.389434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-WdN4i3yp.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Main-WdN4i3yp.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"58e6fc755a51ff89c49bbedf449c1f93\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 6d8becef4d8c095c\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":240944,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59003)","md5":"58e6fc755a51ff89c49bbedf449c1f93","sha1":"6379f378da45aa2b91c96ee1d838211e30939ce7","sha256":"c18ab0adaf7dbb04e181d59d17388c795331caf50e65567d0e6588559bc2e0d9","sha512":"164514c6c7a022938424a35c424bb308535c8d02d6a89decfc346d1016e9c5d9501e440c80adee677b9e613d9e27394ff0f4c4b48c13d0ebf6e55b3816b72302","ssdeep":"6144:5HG4v5GBCmK48QybeJkDGWwJP1XYhKhNd5jDpPDVhthnROQeBZhvSiyciz4MPQn0:Jhv5GBCmK48QybeJkDGWwJP1XYh6d5j7","tlshash":"a2345b9db041a178c37785aab8150250f32c2bacf50c49d8f8fd5eda6ae5c54723af78","first_seen":"2026-04-02T15:06:47.383532Z","last_seen":"2026-04-02T15:06:47.383532Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-BB0lD3dI.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/index-BB0lD3dI.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"cc60c0fe577da2c118ba62af74de09b1\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: ba2c3d68ab4af41f\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20512)","md5":"69142222ced5ecfd5becc5090cfd4e36","sha1":"541ce646e3d611e63de2e2b4ff3907db8d35bfae","sha256":"23e72f2c956d654437d2310b33b9acdf80d60e23a05c1a1965e6e6f937c0aafa","sha512":"71e8ce7c656e2cc6aa9c5e939658a66b1df56815618223116d38da734c36bb5b397768aa053b006a776dbf22b63094d0371d548eb281b167856c054d939c521f","ssdeep":"12288:WJWiGyOYEza/Sf9R3SuVD32rcebmoMf9ZA8onJqHadxF:WJWijJQQy1K8onJqHavF","tlshash":"e6a46c8571c57475039742e4a03b0506f33aa978304dd0a8f5aceafd39bad4a927bf39","first_seen":"2026-04-02T15:06:47.390283Z","last_seen":"2026-04-02T15:06:47.390283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"32a4c8b9c3afa794ded3740a77aa2382\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: bcb2aec0f1ad7e53\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1901,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1899)","md5":"32a4c8b9c3afa794ded3740a77aa2382","sha1":"7c0f471508df6c58b7505306af0459fef46b72cd","sha256":"d3b8f2c8b7e588ba31ead72da09927a929e6d414b19d685d286340fe0fbdc997","sha512":"fc88f3bd813ec6d7734ac4da5d2edb5515c56ba2e84b8fb70eae426e7c1bd1d9b6788a909d46d0171c0ad335449fefd7f81502e93b29134adaef56e480f8cf3f","ssdeep":"","tlshash":"73418624b582e577c37f0269e9b144549b380f45399641e2d4b48f2527dad29f6d7f00","first_seen":"2026-04-02T05:08:16.226406Z","last_seen":"2026-06-05T20:46:13.798514Z","times_seen":56,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protectlaw-navi.org/","fqdn":"protectlaw-navi.org","domain":"protectlaw-navi.org","tld":"org"},"ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T15:06:14.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protectlaw-navi.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 09:58:26 GMT","end":"Sun, 17 May 2026 09:58:25 GMT"},"fingerprint":{"sha1":"38:C0:2F:A7:18:6C:08:2C:B0:3C:8D:8B:11:DA:4F:34:13:C2:9F:7D","sha256":"88:47:30:5D:9A:55:9D:C5:A9:3B:7C:5D:09:B7:0A:B0:CF:80:FD:3F:5A:1D:3D:BF:54:B0:F4:C5:D1:E6:B6:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: protectlaw-navi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 02 Apr 2026 15:06:14 GMT\r\ncontent-type: text/html\r\netag: W/\"bb8773b2ee63145251d7af073b0a0e75\"\r\nlast-modified: Tue, 31 Mar 2026 08:25:00 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-request-id: ef7b4bfaab1fcbc7\r\nx-cached: HIT\r\nx-cached-openresty: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"bb8773b2ee63145251d7af073b0a0e75","sha1":"fe98c94c08f547854c46f2c1a79746e491e2a016","sha256":"ae872fae70bee1274f2c22821e62306377b9ffc6d386bbbf984fef61cd000cf4","sha512":"ef1d68a5044ec7b2b89505e579fdadf1e201eff1d300841e73398464951260dc6198cc48d7c6a06a98c2fe87a20d951054b8213629ee2570503f713e463424d8","ssdeep":"","tlshash":"b8318c2824a0c8075a10d74dfed69238e85bf31f142ad4f1e85a4a7d9f1076785fb86b","first_seen":"2026-04-02T15:06:47.391148Z","last_seen":"2026-04-02T15:06:47.391148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":148,"dns":68,"connect":34,"send":0,"wait":33,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-DALcmKZv.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:14.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/index-DALcmKZv.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/css\r\netag: W/\"9ca387494fc8ce593b13fafe8a0ede34\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: f968069f959f8f04\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":322167,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61093), with no line terminators","md5":"bbaaaff4833bf15969bfe751f6a823f6","sha1":"98b6faa715d071520d39dc60138387db5c874dda","sha256":"483a557919a6c0c2502eff1665e8ddcbbe7215585bd1d2ee02909026f67650b1","sha512":"580ea15f2815fe9da31db4017e22b37865b1fe8837e651a42aef90bbe03a6a780702aa454b4f459a24a84d9d79c82465878b81fdbbcd3a2a2323785b859688f4","ssdeep":"3072:q93Pjr+UaR+j2HB8OsJEvadPzouUnzbSf5WW:q93PjrnaU2h8OsJEvadPz1UnzbSsW","tlshash":"6f64b3e9d11802d3b767e923e384f7aa6017f2b2c5491c69f95a040d6ec766126c3f3e","first_seen":"2026-04-02T15:06:47.392069Z","last_seen":"2026-04-02T15:06:47.392069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1253,"timings":{"blocked":581,"dns":85,"connect":48,"send":0,"wait":86,"receive":0,"ssl":448},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-DcAT30o6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/StartPage-DcAT30o6.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"aa5552687d270582368a1fc7fc5c8b87\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: cae3f856188404a0\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7219,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (7218)","md5":"aa5552687d270582368a1fc7fc5c8b87","sha1":"8e5756d81b2622801d39f09507ca749538926a55","sha256":"9078a53ab8c67403f98a1edc7b39e4ab36f2976fdd8ecee4c1423de6aa9d8ffa","sha512":"6ce693b68852c01cdf493ab9384de7ddbda597aaeef7c1d3012cde3bd0a939c8566c0a9fd40c0a5a673891178914e30d3ec158c465b35d5425863ed3b3d3fff8","ssdeep":"192:qo58xJ8mTjWqbtyE/yPsHVq6PXbBbsUmAlLhR4Sc53Pz4Ir8FNmpZkadUEEtpirI:qo58cwq4Bh0E0gaqq2p7n","tlshash":"72e1940590a95e79ddf7a35979c423007b440f9eb29e0068f0fc567e2bd109873fae91","first_seen":"2026-04-02T15:06:47.38699Z","last_seen":"2026-04-02T15:06:47.38699Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.media.marquiz.ru/v1/image/upload/9s2cuV9uZ5KHKyaznWyqzC.png?format=webp\u0026func=auto\u0026fit=cover\u0026width=250\u0026dpr=1","fqdn":"cdn.media.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:17.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.media.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:40:41 GMT","end":"Sun, 21 Jun 2026 08:40:40 GMT"},"fingerprint":{"sha1":"BF:04:4F:C5:30:7E:2F:0D:5F:ED:61:8D:57:8F:6E:BD:9D:D6:A7:D9","sha256":"E4:15:67:F1:3B:AD:B3:32:3B:59:CD:91:0D:9B:65:CF:F4:2B:78:DF:C4:8C:5D:9E:33:9B:73:16:34:B6:DB:DE"}}},"request":{"raw":"GET /v1/image/upload/9s2cuV9uZ5KHKyaznWyqzC.png?format=webp\u0026func=auto\u0026fit=cover\u0026width=250\u0026dpr=1 HTTP/1.1\r\nHost: cdn.media.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:17 GMT\r\ncontent-type: image/webp\r\nvary: accept, save-data\r\naccess-control-allow-origin: *\r\ncache-control: max-age=345600\r\netag: 6520419cb9440e23510175fc\r\nx-request-id: c3acbf6f67d36ced\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1864,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x110, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f0f17ffbb66d56f9d6fd9d73bfb9734","sha1":"64d556c40888672dd91be20c67402984eaa6c8db","sha256":"3fb8006bbdfdb0abeda2ee658baf44959c308cf3c448240c96877dfbc2d734c1","sha512":"9348ece0bdb589c5bdc3a3ea467660cf7c151bafc62101bfb4b7067ace6c93b13f4f723493b0353a0aff29f235328bdf29028e79078b813ded3058d97f191381","ssdeep":"","tlshash":"de311982f06fb1af42b248dc29c171b912a45919cba256397d79c2fbd8240c2a893263","first_seen":"2026-04-02T15:06:47.393543Z","last_seen":"2026-04-02T15:06:47.393543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":135,"dns":35,"connect":47,"send":0,"wait":102,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-C_2XZLRF.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/CookieNotice-C_2XZLRF.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://protectlaw-navi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/css\r\netag: W/\"7a23c7f397a71d4183dea444eaa68ff3\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:58 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: d2bdee2acbe674d9\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5810)","md5":"7a23c7f397a71d4183dea444eaa68ff3","sha1":"b44696206d8f6ff5ae24adf1aa3aff085174f76d","sha256":"3026a7c1ee4f9a50c6da733fd67dd3b5e2b96b66f4ed95b381441fdec5276d7f","sha512":"0e047af19e7e8f6ecedc27557966691bd7bae1d83d3bb6fbd600a06dfe00a6c241bbdb4be7e76f2a431bd5c6770ecabd6875912fb21906fd44496a9c7040e748","ssdeep":"48:eCebOZCebOps5i/s5i8XJjAcisGkcisG2UJUENqoCfNwJYCaiMwhXJuWw7VRfv06:eCebOZCebOl/8XJjwC1aiMUsb/","tlshash":"3cc1d07f6da9038eb65b4d1653dc5aa40109c26398720ede334338468fcbbeb15e9747","first_seen":"2026-01-29T05:38:46.593843Z","last_seen":"2026-04-21T00:45:59.671717Z","times_seen":52,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-DgQybnXG.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:15.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/maps-vendor-DgQybnXG.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/javascript\r\netag: W/\"8e1174e5d68533fdb7f2a36550804342\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: a2d8f8f4885a8b2f\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17734,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17733)","md5":"8e1174e5d68533fdb7f2a36550804342","sha1":"7ec309cc71bb6aa815ad439db920741e12644a1d","sha256":"0de5c6c629effbbaefd9c479a7faa0f723c1dc1723117d2daed4cc7930018926","sha512":"3ee188350ce6f4f809b966de53d089ab7d49fd32e4f5c512dcda2741f427aac14930d70931ac84da0e67e3f47bafeb5d07ed8a6d2cc319fdeef14bbb2975bf8e","ssdeep":"384:ZIMgWrWXrG6nZOsZ44hMBWVZtvhifp8CEm7QofBQrw9vwmn9Fja5PCSU1l0:ZIMVWXrGsOsZ48MBWVZtvhYp8CcofBZC","tlshash":"ec82c7d1b5f3f4ab82f508e1c13a4654bb368b0a9429e0f0a01cd56915e78dc6a7ff78","first_seen":"2026-04-02T15:06:47.395724Z","last_seen":"2026-06-01T15:18:51.63822Z","times_seen":6,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/crypto-vendor-CDjmgx-6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:15.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/crypto-vendor-CDjmgx-6.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:15 GMT\r\ncontent-type: text/javascript\r\netag: W/\"28134a627220142290d1330b54eae4ad\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 545e092f2f9db8db\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68911,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28134a627220142290d1330b54eae4ad","sha1":"08995b3c7e9a3c09270137f7272f4357243b1612","sha256":"69002b7763028cf5f54756af01b7b05916426503d33b6cbc1ad940d803448b31","sha512":"7b1ea9a8293c7e2fe8e2607162dace0ce48c3630d9499d5880cd1d61fd715de14e238163bc6aea99bdd78312ffb7a0c03f88f5654bbe5a698ef57657f78cfb61","ssdeep":"768:6weJAtk50znrah+NxrFkhrkL0ZLlwews5aNFZaZM9OT81390q/nqZzrtNASU9Ar5:reJAiWOwN/khQxewskt5cPtNPU9ArHMU","tlshash":"03633aca328870d163a764e0093f600b72b739a60a6c9588f554eaedac7c6dd4236d3d","first_seen":"2026-04-02T15:06:47.370542Z","last_seen":"2026-06-01T15:18:51.634119Z","times_seen":6,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/marquiz-vendor-BrM_Ykol.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/marquiz-vendor-BrM_Ykol.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"710c0a0d591b0cd13f0aa5fd7e3b8cf4\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 3d2fad76b5a65b85\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292557,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (38073)","md5":"710c0a0d591b0cd13f0aa5fd7e3b8cf4","sha1":"18707cac2626803a59b2941d5f74318d20d13457","sha256":"afb2bdcfe55bf3f67e2baa9b452ce2e97da81d4c0869a1c2d3d09f07fdd82cfd","sha512":"19ebe449158cfb503de16c530c8257d29b583e0042c64cc541a9979de3727144f43a0aa6314ed7ab03f1af83fec772730c4d8774317ca2ef960d850307bed75d","ssdeep":"6144:+LkkSJroogaZuoxzc98M32W7p8BV3fSkSJroODDfhz41f:+IkSoopsjkSoO/E","tlshash":"2f54c4c972d3f0a583a364b0406f480af23e6d65a84cd068f2b7d5e5bcb9909c177f69","first_seen":"2026-04-02T15:06:47.384922Z","last_seen":"2026-06-01T15:18:51.642528Z","times_seen":6,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-DgQybnXG.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protectlaw-navi.org/","date":"2026-04-02T15:06:16.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/maps-vendor-DgQybnXG.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://protectlaw-navi.org/\r\nOrigin: https://protectlaw-navi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Apr 2026 15:06:16 GMT\r\ncontent-type: text/javascript\r\netag: W/\"8e1174e5d68533fdb7f2a36550804342\"\r\nlast-modified: Tue, 31 Mar 2026 08:24:59 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 9b9637a9327d5b70\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17734,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17733)","md5":"8e1174e5d68533fdb7f2a36550804342","sha1":"7ec309cc71bb6aa815ad439db920741e12644a1d","sha256":"0de5c6c629effbbaefd9c479a7faa0f723c1dc1723117d2daed4cc7930018926","sha512":"3ee188350ce6f4f809b966de53d089ab7d49fd32e4f5c512dcda2741f427aac14930d70931ac84da0e67e3f47bafeb5d07ed8a6d2cc319fdeef14bbb2975bf8e","ssdeep":"384:ZIMgWrWXrG6nZOsZ44hMBWVZtvhifp8CEm7QofBQrw9vwmn9Fja5PCSU1l0:ZIMVWXrGsOsZ48MBWVZtvhYp8CcofBZC","tlshash":"ec82c7d1b5f3f4ab82f508e1c13a4654bb368b0a9429e0f0a01cd56915e78dc6a7ff78","first_seen":"2026-04-02T15:06:47.395724Z","last_seen":"2026-06-01T15:18:51.63822Z","times_seen":6,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}