{"report_id":"c9c35c5a-0006-4f4f-8586-ac18f99b92fe","version":6,"status":"done","tags":[],"date":"2026-02-03T09:31:24Z","url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"title":"USDTSHKA - Платим 30% ежедневно","dom":{"size":1479,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (443)","md5":"6b4ec454cf4b5bb775e7df6353ba6035","sha1":"9eb021f3e609c416d89030ba689b13c01d737003","sha256":"14ce0b1bc00a4d2970d1eccab33b7f52ffa482cdd52e533ecff682301e12ec38","sha512":"0fe4f1c5ffdc180ca5a87fbe65246c919ac06db45a46a143f2dee4d7ac4e5c281ec6cf0399da41e6a53ad5aad954309790ffaf722791519646dd0eef6ad16a18","ssdeep":"","tlshash":"8531cbb3e38f644d7242c02890f1f6b81e3ea018b7014e25bc34b733ab8dac658a2955","dom_hash":"domhash003fb3f0de8126b803198d4c3d676989","first_seen":"2026-02-03T08:54:56.083217Z","last_seen":"2026-02-03T09:31:28.837026Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T09:31:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-01T22:32:08.727296Z","alert_count":0,"request_count":4,"received_data":620129,"sent_data":1824,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cryptologos.cc","ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-13","domain_rank":572515,"first_seen":"2019-08-22T11:22:00Z","last_seen":"2026-02-01T00:56:44.591704Z","alert_count":0,"request_count":6,"received_data":820583,"sent_data":2806,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-01T22:29:52.319656Z","alert_count":0,"request_count":3,"received_data":25254,"sent_data":1642,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vsa91.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3066476,"first_seen":"2020-03-11T12:00:26Z","last_seen":"2026-01-30T17:09:03.634902Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-02-02T07:04:40.533881Z","alert_count":0,"request_count":1,"received_data":82361,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-02-02T03:49:18.065808Z","alert_count":0,"request_count":5,"received_data":7963,"sent_data":2710,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":2,"received_data":46374,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"usdtshka.icu.hexora.st8.ru","ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2007-02-27","domain_rank":0,"first_seen":"2026-02-03T08:54:51.442683Z","last_seen":"2026-02-03T08:54:51.442683Z","alert_count":0,"request_count":46,"received_data":1622612,"sent_data":23573,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":3,"received_data":365115,"sent_data":1605,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-02-02T02:44:29.284845Z","alert_count":0,"request_count":27,"received_data":1377139,"sent_data":12749,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-01T23:21:11.670157Z","alert_count":0,"request_count":4,"received_data":125003,"sent_data":1765,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":5,"received_data":121264,"sent_data":2685,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-02-02T04:36:37.022423Z","alert_count":0,"request_count":3,"received_data":375518,"sent_data":1754,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/dYIpZfq3iaIS.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c21943f1ba3ea8076407069730bc21f","sha1":"b151fcde1e2592b4a7d948d923842c40db99a5e3","sha256":"46b59ac4872b8dbe854dcc5abfd9a05e0ffb44a86f89e9d4f3b9debe2f2aa4a8","sha512":"b74535a365c4c74a2f9da71d0bea5be3a81d7768c106cd549f3f4cfba2bba90498c6c71b3a841236ca3a85715bb7903e375bbc5336a48445259a3f6d972e2d64","ssdeep":"","tlshash":"1d21d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1238,"data":"","first_seen":"2023-03-10T12:01:06Z","last_seen":"2026-08-14T19:57:37.930041Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-18T04:39:27.09876Z","times_seen":24293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/xv5XmCjJRYgr.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7b7f245d361390e332e902506977d60","sha1":"bf6f8e0078fe25f5cdc91565492d78b7363ac904","sha256":"de5591e013e80c7cadad861c3b40ae2331fd2a66fd8ac9a88983d02a0aa7194b","sha512":"bcd684c03075666ab07653f5779f7106c1a31c83308feb82be4b8a1208d1a3b2a5b5e0cb9320990e2b5ece2bdefedb3d442dd4beec33ddfee2e1a88573d71c73","ssdeep":"768:aCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RS0c7UuHjRUQuFBt33:pITMFC4dbMVRS0cgRDV","tlshash":"90137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44344,"data":"","first_seen":"2023-03-10T16:48:02Z","last_seen":"2026-08-15T09:04:12.722448Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-18T04:05:08.425261Z","times_seen":93741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7131a6ccba0953bdc4e2f4708db728e0","sha1":"0ec735d4e2f4743a4867b75b3b1f06eaaca8f2c4","sha256":"0a292049a3ffe8c0901e06fe16cc6b6dac40a26ab6f59a717249858d2457d738","sha512":"b3071372351d012505e9684882cdbff013db1f92136f03f0c39c5823c2ec8433562edd2e2baa0f084b8563afc7b884b38f8a9f2cf7105fc490d212396b2c4ec2","ssdeep":"96:zNC9Hqt7pEma7hY/rcK2JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"6ab1859af247b456c156225150ef3b1df33a281ca61ccdc4a669a5f218784cba077b3d","size":5261,"data":"","first_seen":"2026-02-02T04:19:47.905846Z","last_seen":"2026-02-11T07:20:02.794698Z","times_seen":4828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","size":40808,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-17T20:44:28.25122Z","times_seen":11811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/nKeDLhiGW1Lh.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8b08c786151d5a7829de25fb1e905b9","sha1":"09c92a251115c63e2fb9d054b64b1993cef92d1e","sha256":"950b9dbf7ec058483d46361745ec4193ff90ec3d50916d2587e736bdc8c056ab","sha512":"b494f97315b3001567c27bd73a4face2173e92750bbf17f68843937f267b27212eaeedd2752c2657797035c16ad4b1b053d87196090c047acf575dd7b2a29efa","ssdeep":"96:N42QroBC9m442yBLpLE+yGx+ywYvKKFKOKSxYK8JPPuRfenj0mwCKZKz:cB9m442yU+yc+ywKxYKFiwmwi","tlshash":"4fd1f009b0f420220437b4785fff9204be5d5007a446ee10bd9e17c45f9eb7da6b6b99","size":6492,"data":"","first_seen":"2026-02-03T08:54:56.186656Z","last_seen":"2026-02-03T09:31:28.83818Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6975d353b2c8d0197e14227c/1jfq430hl","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3825d3357c907c8d3a85c13b2f1f1aac","sha1":"549ad2eb7a2feb5d60c145900cecc7f73a594f21","sha256":"d642f3574fe86ebb5c1a3c732b94f1accbb144e487d1f2e95a7353154f3352a8","sha512":"96c678f59ee3edd4746e3ea3b65a5ffb1167b34011809cd3e8ed1d5b4e1423e1b23ebe97a4d51445fe1c0b307c3f8c6e857d18b086f46e15e79753a48eb00156","ssdeep":"","tlshash":"014111d75f4f1852932410e84cbefd0eb477a0e646d86892c70c9860b265aed2badd38","size":2123,"data":"","first_seen":"2026-02-03T08:54:56.144108Z","last_seen":"2026-02-03T09:31:28.847302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"762cb7fc6f7fced67ee0beabdbcd17b5","sha1":"00483ac598b97e67ba842c87cc07b09bd3cba007","sha256":"d73c0d55b46336922570f423448362916fdbfbc01e9e42025921d7a69b7f09a2","sha512":"52af997c98707c5822853f078ba3d1ed9fdd5a40f7ee6a00e6ed37b80a9518d9f317583c2f21dd8a32ad06aa0ad509ab1f221820c7b12e43dffbac1914437297","ssdeep":"","tlshash":"b04183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78c89815afb6","size":2306,"data":"","first_seen":"2026-02-02T04:19:47.879732Z","last_seen":"2026-02-11T07:20:02.674033Z","times_seen":4945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-18T04:05:08.410121Z","times_seen":50285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90003187cf00fc27542a9eb7d94f3788","sha1":"454d91d187104f0545509b67b7545b945e7c35ec","sha256":"8458da5780bb6d48a6f5c27c4e2fd4ace6b1557609f40de30b5ea0392dfb83fa","sha512":"daf1ce30f434ee8a0e997d02cf21be41ce5e891db94ed5d433dc0220b91e0dd39e8342942c0dd38c33a7802edc78094b0144b4801796ee945bfe155ce0c01e96","ssdeep":"384:UJw/U5YK8Hx9KJwThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJwThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"8652c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-02-02T04:19:47.875469Z","last_seen":"2026-02-11T07:20:02.745461Z","times_seen":4786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a282478137d226e131fcfee0b54f44","sha1":"df1631f2892574c45a45d8d6ea798395be44b001","sha256":"33fa11e0a8097e0aab469ecaa832bb67dffa56f6345175a417aa4af50e55af21","sha512":"fbc910c31842185147437e69cb97d3682c85e14df39f0b867df349560fa821801e838eadea35920fe5471b82495d6fe265653a01d9625618429f8455e2f49e3c","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFYUdZPkx3u4V5pfYMrlSf:4nmuTilGhmOx3u4V5pPrlSf","tlshash":"39a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-02-02T04:19:47.931298Z","last_seen":"2026-02-11T07:20:02.776096Z","times_seen":4819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/gKfpnRrifeTO.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a26a117ff59c944bbb654bf506f69786","sha1":"237c90127c99e91347536835096276b0add6d018","sha256":"cfa1739ee346d63a3d3cfdff8c18cbe8fdedbcb32d4b0895028c193ce828e7a5","sha512":"11a93fdbd393a5bdfa2cba36af8ec8a55ccf04b5e700c3c0572a5b499899e1091ff29ffb4bf5d11b9c69ece2963cf61f253ea67ad23e20e4644791bc17dd34fa","ssdeep":"96:irZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:iry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"04f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","size":8182,"data":"","first_seen":"2023-03-07T01:10:38Z","last_seen":"2026-08-17T18:21:14.836319Z","times_seen":8382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/JFK0w165QG8R.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"232168e6da121673aa7e9a3b04859be3","sha1":"78837fc4f2f5e44557b1084bb34a208e2bf7a606","sha256":"eec940cad5262fc05f5ae870883798cfb08c1abe08a9d4e647fc56d01a1eea23","sha512":"b64f6cb088231f1f106795b541f4ae4f393a8865e84bcd340505e25a371b394e7f619fda9a032979f55682660a7bb038e6387f7bba311732b06779cbb89253d2","ssdeep":"","tlshash":"9151730c7c98b5bf033b33b5449e860e22382d511603c5a0f06894a5f9b8c42326ff79","size":2602,"data":"","first_seen":"2026-02-03T08:54:56.202992Z","last_seen":"2026-02-03T09:31:28.891479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/1Jj7vB5QgZcm.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35445,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-18T05:22:46.450801Z","times_seen":26080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.5kpRRqOGFj0.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfpWpvJm3SqKuNUNb0RVam07_sNdTw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9988094cbb770b0990461c15d83817b8","sha1":"d18543a62a2b260c5db5d26e4acf7dc0853ce789","sha256":"1acda155b90867e8d54320e4c438d09326b65a32180e6af4ec370c88e8eef482","sha512":"24aa3a96720a271400f3870a7db6c6ef7f966567edb552be6acd4f4fc23d7e44cbade48ec87836526ddd06d549ff94c68217066d796d0709d0b184e2fc9590fc","ssdeep":"3072:IhdxVtgNR1w+cPmVRkp673A2zC8VYOf/xZ5YAjuIGToLdu0D/WOq2+Zje:W2Mxy3xSRaWQ","tlshash":"f584d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","size":373581,"data":"","first_seen":"2026-02-02T21:28:32.654985Z","last_seen":"2026-05-23T13:25:13.560493Z","times_seen":363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-18T04:05:08.461217Z","times_seen":51766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/assets/js/surf.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f06ed4011f727351e51b3c408a86779","sha1":"71e386b554f0778e6a5067678f40554871b6074d","sha256":"89dd5a30b4ae8d6bcfba3b5b9d0116af4c79caf8c59dc5a2ba829964c2e0c041","sha512":"a74ccd65ac222046c1a3201f82fa3a153876ab8520200f7c467f7aa09474065e2ee70789fe1b25f0b0d0c342eab3c1ca56cc5c5f8a685d8042df19d0059091e7","ssdeep":"","tlshash":"877188edfc5426b1a6736059977b4212efad602b40099b14bc8cb1d01fb80c8f54feae","size":3677,"data":"","first_seen":"2025-10-12T08:03:36.487732Z","last_seen":"2026-02-03T09:31:28.888632Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/R6Wkw5RZW0ED.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"65f1d21d5fcc9d21da758adababd0c3c","sha1":"e0661d07d64c00008bc9d013d16eec0a0f156dc7","sha256":"d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe","sha512":"de7d7dc739ced2e6cfa52c1809144180787adc3ad5f9b7597c72b9d9bd5eb2f21de06b1fc12b5034f2458de428b368772700a6665d3f2e02f148a300239e6183","ssdeep":"192:sANzVNUBOebwvXDA+mJ4fXOrTIjDJfiRxug9xx+EMZajp:PNbUBOjHmJcOgjDJaR1bMZip","tlshash":"2032d6cd70937109438ba07b21bf520ef2bd495859198954e099c8bdbd74ce8523bf6e","size":11084,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-17T18:48:02.950956Z","times_seen":6929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaa1988d3494efd2fb2852828b97950","sha1":"46948c9b423e9ae3078eb818b450d874ce89ccd2","sha256":"50cb7f8df087e8359ed5b994fc9fdc7d36bf9e4d12884babe6265f0ed7d45f3f","sha512":"273b8913f18cad19cf910f23f2bbe5fabaccb41aefcf6f5b72e631ea0fa8fdc3f21c4a8706c7e14519d6406dd71f6d689b8d983afb8a77d4a095740837392600","ssdeep":"","tlshash":"7ba011c082eb0228202b208a8022800023308e28838e0a80802b3cca30e0c23a0a0cb8","size":83,"data":"","first_seen":"2023-10-29T05:18:03Z","last_seen":"2026-05-23T18:30:29.812709Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/dl0oBt5SP2i0.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"38344b23b88103e2964753b7fc7da18e","sha1":"85e8ad901c174370272372112d2af8d7ce44a41e","sha256":"2597615b6993e6137aa2152e6dcd4bf8de109cb95effd026edf46cde8b118ed7","sha512":"87770af1452be5bdc62c0f24eee06f2b673653f2639da1bb8bb285e4e49413a24f17907e24283f2c8fd53a520e4582bd7745005215c3a1555b10398114e38b79","ssdeep":"","tlshash":"9d218b9938d57c6592b7701c6a6f22415231963fc28145e2adeeddfc34abdc13513a48","size":1266,"data":"","first_seen":"2023-03-13T20:15:21Z","last_seen":"2026-08-17T18:48:02.738245Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/qvKOCxXpDair.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2d41e5c8fed838d9014fea53d45ce75","sha1":"bde98133f735398b27339c423a817e755329f7d1","sha256":"1f7723b6b9bfced0deba108df48e3287888dd986f1ff2d5133bacc9807ac0349","sha512":"d106cbd2987c4dcf20e5b2e17d5cd2ab17bd18444e46c2a1227d48ae9c4302052c6c11b3fd5ee249abf6cf35b7db95c677538c2dd2f8522a91263ef4d887aa9d","ssdeep":"","tlshash":"8351aae9b5ceb358535272b4282b314bf2ae9cf401cc5817f96619827c7830c867ba6d","size":2532,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-18T05:14:46.081409Z","times_seen":10355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"001632fb24c32fd2492b6fc0f37fb1d6","sha1":"65d1ed86118e6c142a3fb13cbde8c73bdfb2e072","sha256":"21582748103cf64e937df1f50980513b43804abfa6856be823ba6dbb4a17184b","sha512":"522549a32b4102fb29cbc35d7723b547b8d0efef857d6e886b68bd2c078dfb8835ad250c53eea33e80703ec2787d5233698fd4936fb920021da9967c16f3e4e8","ssdeep":"","tlshash":"65d02e4bbc031ab0993b222a032f956820b840030402ec44b0ecc1200f22600448b5c2","size":264,"data":"","first_seen":"2026-02-03T08:54:56.208246Z","last_seen":"2026-02-03T09:31:28.912206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324110,"data":"","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"580dac1d64dda2db7e6c9e3ec0104489","sha1":"f8d0084aae87030c9436a9299d27ff753e43ae81","sha256":"b70f42a6dbb50ad0efea5c5307f00333ea252acdf526a60e3e1e502665b48274","sha512":"f335cb544a60d404ef1e3f91897fa7e0d4e127d439cd5460299989374bbb87124f84325ab1c88893e99d6da7908510e68ad35691dc9619587ff4714e6e54ecb8","ssdeep":"","tlshash":"4a01dd5c32b84ab4066f2eab0bdf3544743721973502e6493cad8bc04f529181fb1bd6","size":732,"data":"","first_seen":"2026-02-03T08:54:56.209465Z","last_seen":"2026-02-03T09:31:28.912929Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfdfd6827b07ffbc94e482d2135d3bfd","sha1":"9713d6a6097502391dbc166803a9eb6ca7cfbe5f","sha256":"c36e0e7670b352436ca65b312421f7ac58a482bf45f28c2d27816da75512cc53","sha512":"a2e2efbf162d203fef7947bde5dc5de13237080b75804807857b1ebfda4d4b33410bc06baf4c7004216bba610ee1c6d59e68641b45db69104c71ce2dd72deee9","ssdeep":"","tlshash":"d9c08c47b030481a2886e119d38a478c32748408003609242680608a38b3f8c030d8a8","size":151,"data":"","first_seen":"2023-03-07T12:03:08Z","last_seen":"2026-05-30T01:59:19.392483Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/GhXQsn84gU44.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbcf92d20affc9bf044ead4928934775","sha1":"1077834850bbae85f6550eed289c81e5733b4484","sha256":"4c0bc3b9d95e2f86d59f974837f49ad6d18a4a2101cced22442ed08970bfc6ef","sha512":"de1e4654d597bee05cc1b0c7839f5ea819069a4a3bba79edf9776816d4e6dcaa90e21b14e0ed0aa3d5a7e64fa39f712ed66d80af1472a331bb09bf80f159beb9","ssdeep":"1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCf:MFRIpk0vSA0","tlshash":"2f73d7493254b87309ee55b68037460bf3255994b14b802cb9bdadde2b3dc8272b7f78","size":78694,"data":"","first_seen":"2023-03-07T01:24:09Z","last_seen":"2026-08-16T19:21:48.210067Z","times_seen":892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"01cece45c90a71db7d3616eb1b64ee64","sha1":"51ec46279d524491393c8a9d3ef1835c8947b961","sha256":"3a62321995cd73f8e559e86048958d42a12bedd237f56310881e8eff6cfb4ca7","sha512":"952bfdec446a7acfef9800e976fd6c9e12cb56c988c854644015a5b446171d2d90a8ca5c0b42b6399a57e2f952db2b83aace4f2a1b608a7aaaacaa1ee89679b3","ssdeep":"","tlshash":"8f01cb9376d41439c0ad102273bf81a6f8b126e75d3261e0541edc458db0e081faeeb9","size":724,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-08-17T13:29:00.798154Z","times_seen":4578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/Vvf6xoJeutxz.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-18T06:38:46.28184Z","times_seen":74034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0ee026917c32e8a6da66642d9460cd2","sha1":"e3291127132eb79427ad5d0792e7e93bbfc4cb41","sha256":"60735758c186f54b2843614e83be903067a0a03d9feb85b26bc382a19cde058c","sha512":"80fadb46b9c1e42fc9d4fdc68282a879d4fcdcaf20ec530b4a411376dfcad5ceecc5a052b03c6db67616423494a49dee9349354881de378ff98a716cab949adf","ssdeep":"","tlshash":"8b1121ba36c764a61326a46307bf400db3e527821a2a04f0e4a4d44d6f94e85a56fb8c","size":1002,"data":"","first_seen":"2023-03-07T01:38:59Z","last_seen":"2026-06-19T09:05:33.051465Z","times_seen":1821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2091857cd772d732e32d2e716beb8154","sha1":"9cf5c9208ec821602c61a22434ef8f6f1d514070","sha256":"8e215d8dba335cfab2a79b85fc2aa12e9bc8023656547e46b733fe38e94f7118","sha512":"750f06cff200787a40a800bd2284fae73c7d7b828689df2280258500a6012a892379e3f768767d41bbce2affaf2953aabf2c4dcc87176fc49ff43bd2f9fce6b3","ssdeep":"","tlshash":"21e0265d2a807d26925255d721f2ee4c74b33528a659d85199df8c082b18d89c528b98","size":334,"data":"","first_seen":"2026-02-03T08:54:56.213783Z","last_seen":"2026-02-03T09:31:28.915256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a8f8ef87ee77ab8bf950610a5bcab48","sha1":"7a432e589fe42ce094bc1c507ccfc34e8db6d48d","sha256":"8eaf356d15b9747f4cc4f5cd16ce8300e93b0ec56d5b317a576389dea3340dd5","sha512":"19f59d0eb241a41f4d3e845ca920e142ebc77eca80fab7edd3a9210a6d3c4cb85d43f588d2e9278ed7cf0726346ed439ea14bfcbb96e5bffb745b5bfb5edb93f","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fO3cErQYIMPdLMz9o115:kyWFW1W+fM4fVkBLMz9215","tlshash":"c534c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-02T04:19:47.929176Z","last_seen":"2026-02-11T07:20:02.796108Z","times_seen":4945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-18T05:24:18.748778Z","times_seen":18074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/jquery.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1860d4cedb72cf0e323b5f5f2ad907d","sha1":"20f329d6b2f42e4014601a1fb91b863359edd850","sha256":"68af4c5878b9d0040bc9bb8663e9018bbcddd89a2520d6470dfeafed4e2cfd3a","sha512":"c0c72b5fca56778b7b67daca31cb19b670058d031eecab78117211af367201e201d5620db1637e78c4b356d9993cbb249b54984e497d292bd36139b2f4fe435d","ssdeep":"1536:XP1vk7i6GUHdXXeyQazBu+4HhiO2AEeL/FoqqhJ7SerN5sVI6xcBIPv7E+nzms9t:K4UdoqhJvNPqcBQ7MfWWca98Hrp","tlshash":"e593d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","size":95925,"data":"","first_seen":"2023-03-07T01:19:53Z","last_seen":"2026-08-03T00:02:07.180132Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#231","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-18T00:03:52.209225Z","times_seen":37130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-18T04:05:08.38964Z","times_seen":42691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/dep/js/countUp.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"daef170698227a8694e9d25a2fa39cfc","sha1":"71eef3d3fb7243d91f94a775b912a9b2fd1cc5e3","sha256":"ca62bf44cda4d83b2b59128d5deb59e5789de3f2c029feb88a6e1533b4eeef6c","sha512":"41b0cd34b8fc80f63b8cf478c166b2bdb3730a553c0631bfca6455e90fb08dd0333b18d51192d917e95a0576b5bbb901aa9733ffbcecbb1224815569e6b2e036","ssdeep":"","tlshash":"ad51dec6643218636fa733a3291b03053831997178496cbca9bc36c62f5740ba3ce7bc","size":2608,"data":"","first_seen":"2023-03-12T07:25:36Z","last_seen":"2026-07-05T21:09:27.997288Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/mm4SaGppzuwD.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-18T06:42:45.999642Z","times_seen":24090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/35s6KPii5bX2.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6bc29eba3a03af2f99b046f621522da","sha1":"48a997ce3183b2f58a13fb771574e639930af73e","sha256":"554262ab4a4bf432d33cfe80f5ff8748b18548e82582647f19dd567e4e62b4dc","sha512":"a6e442836bf24d1f9c726316769800fe556bc38897bf9a8f5ed5079ab5448e15172c06ddca656dee018366f0c5c04f93bcfd2274cb61b864e7cf349548924474","ssdeep":"","tlshash":"50514145fb4e219d8a6630b9da0d528d070da13504aba4b5fd7e11880fd4c6ee20dbfd","size":2542,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-08-09T03:11:46.357923Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/kWgR569rgwl6.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d371492d2d201a4778bdee42cc8a7d7d","sha1":"624eff52ad3b7afbc9d12d85327429e35f6091c5","sha256":"b2da4717a12d5dae7eb556cf1c4ac6f0b7bba1a064742d382c1d9175aed2af2e","sha512":"dc2d507aa98bde3ef20c9c9ebf2306b2fa2805c144b766d36e6de486d7e0edaec490bbbbd294f4f80d0c4f6a5e84738b7cfede2d50a88d2ec3cd51bafcb48cd8","ssdeep":"","tlshash":"1e513114b10112f648ff24d33911b143a075093dc42ac14be97e86b21efec02aab6d4f","size":2948,"data":"","first_seen":"2026-02-03T08:54:56.197634Z","last_seen":"2026-02-03T09:31:28.894427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/_/translate_http/_/js/k=translate_http.tr.no.5kpRRqOGFj0.O/am=AAgG/d=1/rs=AN8SPfrYHRcRZudq9c3XENn5VELDqQJmuA/m=el_conf","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a009b39608037cfdf4a8872a7a6573aa","sha1":"2d5ca49b13f3bc84ac3fffbe4cea0bb8c1c15207","sha256":"52e1f04bc6daca5eeb73924ca0245b5ec13ecbf6f77cbc951e650eebcd8b70d4","sha512":"1e58f6274945cf5131badc3c866745b99fa4eb3a24fa9ab0a69df9f986a92220b0728436a279423bc92b26373fba3e577c566bf3a089ad4545722a34dbaf95b4","ssdeep":"1536:XIv4W/CjP2+e9JCTUHdBjHvK4e7yrh3N4eOdDNeziWwNWnt:Xc+e9J3jHvK4UBgziKt","tlshash":"b083b8ccb6a670658263f5b5413f000eb23f59a9f8484dacb288d8e1adf4949417bf7d","size":81658,"data":"","first_seen":"2026-02-03T09:31:28.857614Z","last_seen":"2026-02-03T09:31:28.857614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-18T04:05:08.45819Z","times_seen":93713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-18T04:05:08.44585Z","times_seen":67212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c318ee25d84857215976001a18a88020","sha1":"e1c29761fe848fd3bb506866b96cb1d97ccd2fdd","sha256":"77fd59826f3181dfdfe80bcf20f364d39735ce4f12971ff1f2840add3d5c2f1e","sha512":"407f37712ab4bb1df5259659da697dd7913f1922d3e9f36477e6c39b6a3131fb636fa848e468195f05f9b645030336498cac6ed9d808b13e0370cf659917769f","ssdeep":"192:0H9MawRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kwb9HkS316xAFKpLZEh","tlshash":"bf32a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-02-02T04:19:47.935703Z","last_seen":"2026-02-11T07:01:32.149671Z","times_seen":4644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/assets/js/template.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"152178e390e84f1007e8d1b65f093776","sha1":"a064c3424cad41bae4d13f379a06d0759b72fbde","sha256":"701aeb72165add99019e776453380dc07a8f2e2d9f3ff64771e11aa9a2267ed9","sha512":"87ed5953de2d1c29d96b38d2dcfbb5a6d6e85c6426cba5f4491124b753f94f324e8c2a860a8d6ff7c79e6546e690f3397e413ee60c1de38fd656103c77dd1e16","ssdeep":"96:fpHkohWOTe+Z8aOQxgV8CiGsp9CfULq+fULZLqy1x7+s3LhuBy7uQyasWQb4qJ1z:fpHptgQxgV8CiBqJBqymsbhuUuQyatHw","tlshash":"d8c1dd16b1f224a194bb78398bff42a4372d444b8189ca627c6d97c40f84715a3f6fde","size":6128,"data":"","first_seen":"2023-06-26T08:12:18Z","last_seen":"2026-05-23T18:30:29.728861Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef587b65b171c1d89e0701046588ecd4","sha1":"e5a70cba869c1fdc5780af5dbd402f535d2e8fe4","sha256":"8e848dbfc6aee1d6dbff36911e98eb04c3a836d335b6fe1d4b053df7cb69a557","sha512":"1f7470331aad3fa07a7fabf6f0dc4f560b7b12a2ea5e04abe108c96a05187eb2d2cc438f13e7c82f068d0b3e899b3e2858af5bff1d3687fcd0011a94908a2c69","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC/GN//h6LiJq:SzP2DRSLi8","tlshash":"2f822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745df245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-02-02T04:19:47.930338Z","last_seen":"2026-02-11T07:20:02.644201Z","times_seen":4825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/nKeDLhiGW1Lh.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/nKeDLhiGW1Lh.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:27:32 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1704\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (528)","md5":"b8b08c786151d5a7829de25fb1e905b9","sha1":"09c92a251115c63e2fb9d054b64b1993cef92d1e","sha256":"950b9dbf7ec058483d46361745ec4193ff90ec3d50916d2587e736bdc8c056ab","sha512":"b494f97315b3001567c27bd73a4face2173e92750bbf17f68843937f267b27212eaeedd2752c2657797035c16ad4b1b053d87196090c047acf575dd7b2a29efa","ssdeep":"96:N42QroBC9m442yBLpLE+yGx+ywYvKKFKOKSxYK8JPPuRfenj0mwCKZKz:cB9m442yU+yc+ywKxYKFiwmwi","tlshash":"4fd1f009b0f420220437b4785fff9204be5d5007a446ee10bd9e17c45f9eb7da6b6b99","first_seen":"2026-02-03T08:54:56.186656Z","last_seen":"2026-02-03T09:31:28.83818Z","times_seen":2,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":383,"dns":4,"connect":23,"send":0,"wait":24,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/ua.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/ua.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 574\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e2b587a3b15e34cb226afa3e572af279","sha1":"192d98c5d5d5b34123e8717c38b6733d8f7e5648","sha256":"4ec4c568d064866640e472adfb0b9f0f11162a94f179ea925f7b50cfe60fc470","sha512":"c7caf5055a177aeb344248c67aa4252c8864be09220523285ce4d3eaab9de757f93458e6e314655c1a2448879a87fe460dae2869f6c7ac9e6931c998e61f461a","ssdeep":"","tlshash":"d5f0e1e965101c78d51554d137a509b6da371d588aa20d6440648cbfaebc9c613aa163","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-08-14T13:41:02.980522Z","times_seen":499,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":481,"dns":0,"connect":55,"send":0,"wait":27,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150020\r\ncf-ray: 9c80e9c06bd6b4ff-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-24a04\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1068526\r\nexpires: Sun, 24 Jan 2027 09:31:03 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AA8HOp%2Frcc2rjjV0%2FrEtyrahW5PIlPaucwHXILJgN%2BGAj7R7Ep6wGVTsOwAW2ZtB3iFB%2B%2Fl5Lmw9zlTd6Aode%2FtONjppxTDbISu1ET8o7U4WWpnZ0J%2FYaa25DpKbaiY1oqtuqXkv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-18T06:35:15.059182Z","times_seen":41307,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":16,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2194\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c47b930883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"0a8f8ef87ee77ab8bf950610a5bcab48\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c39abc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"0a8f8ef87ee77ab8bf950610a5bcab48","sha1":"7a432e589fe42ce094bc1c507ccfc34e8db6d48d","sha256":"8eaf356d15b9747f4cc4f5cd16ce8300e93b0ec56d5b317a576389dea3340dd5","sha512":"19f59d0eb241a41f4d3e845ca920e142ebc77eca80fab7edd3a9210a6d3c4cb85d43f588d2e9278ed7cf0726346ed439ea14bfcbb96e5bffb745b5bfb5edb93f","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fO3cErQYIMPdLMz9o115:kyWFW1W+fM4fVkBLMz9215","tlshash":"c534c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-02T04:19:47.929176Z","last_seen":"2026-02-11T07:20:02.796108Z","times_seen":4945,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2194\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9c80e9c98c530883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-18T04:05:08.413941Z","times_seen":36166,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 04:10:43 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105220\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c92c9f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-18T04:05:08.456502Z","times_seen":39339,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /sweetalert/dist/sweetalert.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 55\r\ncf-ray: 9c80e9bc4d727129-OSL\r\nlocation: /sweetalert@2.1.2/dist/sweetalert.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":24,"connect":2,"send":0,"wait":31,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/Vvf6xoJeutxz.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/Vvf6xoJeutxz.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:24:15 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7346\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-18T06:38:46.28184Z","times_seen":74034,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":238,"dns":1,"connect":22,"send":0,"wait":24,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 23:39:07 GMT\r\nexpires: Thu, 28 Jan 2027 23:39:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 467516\r\nlast-modified: Wed, 10 Sep 2025 16:22:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22788, version 1.0","md5":"15481e4eab6dc3277d89f1d5871cf08f","sha1":"25ba8a978a3a493ec9f835f7f2cdefe16b55b295","sha256":"2d797dd8b35dcb3413e1af9d7052b3f4f8c341a147cdcb01f4f06af80db53289","sha512":"bb5ba24476faa25680e6644dba33a98afca6ef0936f7be6ee3888d09c2d7b658ccfaae395f173ded5331529e4548b25d923490be1363132ed30e0e368812dace","ssdeep":"384:Jc/2c7dFz93/eRqONl+60qnSY8IkG5zjP2Z8VgG0BFrnIZbp/QPGIZgdT9mEl4/2:JM2c7dZ9vkq68606SVzGJ2uuubbYgDmM","tlshash":"36a2d0de44d674a2d12f32f43c832d1c13bd3558075ad59b6b1a068bf2bca7621e3527","first_seen":"2025-09-11T19:29:34.815552Z","last_seen":"2026-08-18T06:18:18.540485Z","times_seen":9693,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":14,"receive":1,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6975d353b2c8d0197e14227c/1jfq430hl","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /6975d353b2c8d0197e14227c/1jfq430hl HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69802381f63\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9c80e9c18d6f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"3825d3357c907c8d3a85c13b2f1f1aac","sha1":"549ad2eb7a2feb5d60c145900cecc7f73a594f21","sha256":"d642f3574fe86ebb5c1a3c732b94f1accbb144e487d1f2e95a7353154f3352a8","sha512":"96c678f59ee3edd4746e3ea3b65a5ffb1167b34011809cd3e8ed1d5b4e1423e1b23ebe97a4d51445fe1c0b307c3f8c6e857d18b086f46e15e79753a48eb00156","ssdeep":"","tlshash":"014111d75f4f1852932410e84cbefd0eb477a0e646d86892c70c9860b265aed2badd38","first_seen":"2026-02-03T08:54:56.144108Z","last_seen":"2026-02-03T09:31:28.847302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":36,"dns":3,"connect":4,"send":0,"wait":11,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/jquery.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/jquery.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 12:47:26 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 33270\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":95925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1860d4cedb72cf0e323b5f5f2ad907d","sha1":"20f329d6b2f42e4014601a1fb91b863359edd850","sha256":"68af4c5878b9d0040bc9bb8663e9018bbcddd89a2520d6470dfeafed4e2cfd3a","sha512":"c0c72b5fca56778b7b67daca31cb19b670058d031eecab78117211af367201e201d5620db1637e78c4b356d9993cbb249b54984e497d292bd36139b2f4fe435d","ssdeep":"1536:XP1vk7i6GUHdXXeyQazBu+4HhiO2AEeL/FoqqhJ7SerN5sVI6xcBIPv7E+nzms9t:K4UdoqhJvNPqcBQ7MfWWca98Hrp","tlshash":"e593d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","first_seen":"2023-03-07T01:19:53Z","last_seen":"2026-08-03T00:02:07.180132Z","times_seen":39,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":106,"dns":0,"connect":23,"send":0,"wait":56,"receive":51,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/binance-usd-busd-logo.png?v=029","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 08:52:11 GMT","end":"Sun, 15 Mar 2026 09:50:48 GMT"},"fingerprint":{"sha1":"DC:49:52:20:76:53:C2:D9:F0:EF:C9:09:62:1A:FB:47:15:F4:D6:86","sha256":"47:87:EA:27:6A:15:76:C1:27:14:A9:C7:D1:21:97:B9:08:8F:B5:83:4F:38:27:43:1B:63:0A:C4:8D:75:02:9C"}}},"request":{"raw":"GET /logos/binance-usd-busd-logo.png?v=029 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 60914\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 08:54:27 GMT\r\nlast-modified: Fri, 20 Nov 2020 22:18:12 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2195\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NExD7RvqrB%2F0ndoNNojdXPTVYfKZxYNZM8NbE9F%2FsIcxMq8DxwAx2A7ziRkQYYb%2B4FvRkIZGu7CUtP2EI1h1ABjKVDSP9PGUpiwM5A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c80e9be7f1cb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2006 x 2006, 8-bit/color RGBA, non-interlaced","md5":"a578efd2f6b8bd112665c493a0c51d89","sha1":"d532c432267e4a580cc62d9ea2351b52a751351a","sha256":"e818edeb85c00d1056b2785e3175acda6a5a7dc4f7d96d340b5aac0c2e631c02","sha512":"59fd699d43c8fc4ab6fa46241eb28789a5f6b4c1779962ed7c207e1ca4a7d1d7a1cd3db4538a8e25b9f3a530d5677dd1a6ff7b471d39c107a2b4771b6178584b","ssdeep":"768:VP9aIKbJobQvJp9TPK+mNIZubAhpG29HGrEjBrSu1irEqAIK6fK8YnGUGYnzV58M:LuNog9mLyubAh4K74u1RfaSnBFsq","tlshash":"f9536e7ce9999e114cb46754eb0ed1cfabe903aec4b4700b480e24947f54be7e2e75a0","first_seen":"2023-05-31T01:01:46Z","last_seen":"2026-07-30T20:56:49.954199Z","times_seen":14,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":286,"dns":0,"connect":1,"send":0,"wait":10,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/1Jj7vB5QgZcm.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/1Jj7vB5QgZcm.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:24:32 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 9847\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-18T05:22:46.450801Z","times_seen":26080,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":263,"dns":0,"connect":30,"send":0,"wait":26,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/us.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/us.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 830\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2e87070269567df94c2a3d2c792fd926","sha1":"75b0a61311c8a421e7cbcb734b71f2b0bd1c5741","sha256":"c1d7eeef61038f399b31885c6ebfbab44954165ce471d0a1d5c902c860cb70c2","sha512":"acac9b15a95d032725b664a1b343c7459338e273db1c78f0c5bee22309da5daf1ab71a7640dbfb53e228329e9acc24db85a2ec723d13466b31106d769cc6fc2f","ssdeep":"","tlshash":"240186e32240c6abed6e212317af680014724dda9b37b318991afe3f1c84118fd0a670","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-08-16T05:06:22.324781Z","times_seen":741,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":582,"dns":1,"connect":23,"send":0,"wait":24,"receive":2,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 16:23:26 GMT\r\nexpires: Sun, 31 Jan 2027 16:23:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 234457\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-18T06:38:46.314012Z","times_seen":57434,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vsa91.tawk.to/s/?k=6981c0581587ab6bf864e596\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTc1ZDM1M2IyYzhkMDE5N2UxNDIyN2MiLCJ2aWQiOiI2OTc1ZDM1M2IyYzhkMDE5N2UxNDIyN2MtN1I5QTRVWlNRTnJjYTlXcTFiVll1Iiwic2lkIjoiNjk4MWMwNTgxNTg3YWI2YmY4NjRlNTk2IiwiaWF0IjoxNzcwMTExMDY0LCJleHAiOjE3NzAxMTI4NjQsImp0aSI6InVBbXduRFVEYW1OalVLYU9zdHFtSiJ9.KJ6GV-KmGWnFsIDl9aX_JmUNtJySYb5H4H6iwFgNNVg6skVE3fQhKnBgeKYKjhYSC0X0DZGObrSp5TF5iNmfvA\u0026EIO=3\u0026transport=websocket\u0026__t=PmYrrYc","fqdn":"vsa91.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /s/?k=6981c0581587ab6bf864e596\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTc1ZDM1M2IyYzhkMDE5N2UxNDIyN2MiLCJ2aWQiOiI2OTc1ZDM1M2IyYzhkMDE5N2UxNDIyN2MtN1I5QTRVWlNRTnJjYTlXcTFiVll1Iiwic2lkIjoiNjk4MWMwNTgxNTg3YWI2YmY4NjRlNTk2IiwiaWF0IjoxNzcwMTExMDY0LCJleHAiOjE3NzAxMTI4NjQsImp0aSI6InVBbXduRFVEYW1OalVLYU9zdHFtSiJ9.KJ6GV-KmGWnFsIDl9aX_JmUNtJySYb5H4H6iwFgNNVg6skVE3fQhKnBgeKYKjhYSC0X0DZGObrSp5TF5iNmfvA\u0026EIO=3\u0026transport=websocket\u0026__t=PmYrrYc HTTP/1.1\r\nHost: vsa91.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9E5wHZcnoWbK699zVHW1dw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 03 Feb 2026 09:31:04 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: dA9J2qOUlX2VgRTEuswjlK2cYJo=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9c80e9c80dde1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":18,"connect":18,"send":0,"wait":449,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:13.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1189\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1189,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"En\",null,\"TE_20260201\",null,null,[4,0]]],1871,[[\"1770111063530\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"6D8161DD-0372-4B96-B33B-582E51A5E1A2\\\",[\\\"https://usdtshka.icu.hexora.st8.ru\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"http/1.1\\\",[],[],[],[null,1000000],[null,10000000],[null,13000000],[null,13000000],[null,68000000],[null,39000000],null,[null,96000000],[null,240000000],8486,8008,37682]],[\\\"translate:page_load_to_initialized\\\",[null,240000000],[1,347000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1770111073531\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://usdtshka.icu.hexora.st8.ru\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 03 Feb 2026 09:31:13 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-18T06:32:07.485576Z","times_seen":589550,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 04:10:43 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c90c9a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-18T04:05:08.467598Z","times_seen":34364,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"13a25-1yL6mYLaiqSN+IJRuxiX8Twds7k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\nage: 3616103\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-18T05:24:18.748778Z","times_seen":18074,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":33,"connect":25,"send":0,"wait":17,"receive":7,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/images/R2VKj0oYRVVc.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/images/R2VKj0oYRVVc.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 23 Jan 2026 12:50:37 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 41113\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1169 x 147, 8-bit/color RGBA, non-interlaced","md5":"cabf27fd2a2927861e606dd8affe84a6","sha1":"868732e52b9c348f6d832967c10d513800fde4a8","sha256":"ce2aa4073fdb3f8bcf2e6b2718666b28bcfde840905167a350fa74c8ec5f1164","sha512":"394e9aeda910a3c2f775ab8fcf6254074827421b796b298284f9fe6a6bbe2ff9e2b6a8993e633ea0d542d8cb59474cdd5e7c0d291e985fbacda05ff4075c355a","ssdeep":"768:jWhrjC1bUvgtiyG6wX3S7CKBE3Tm4bHc7nZjQWJY5WhJtiha5ZLTVlxW:xUvLyCSWcoTmQcFJJ5ihmHDW","tlshash":"7c03f11be541c0bacdc9774845f24bfe8a1f7ae895c1ed46e804939fb32578c893a706","first_seen":"2026-02-03T08:54:56.192317Z","last_seen":"2026-02-03T09:31:28.85566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":499,"dns":0,"connect":27,"send":0,"wait":41,"receive":25,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 02:38:40 GMT\r\nexpires: Tue, 02 Feb 2027 02:38:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 111143\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-18T04:51:54.317603Z","times_seen":75055,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:13.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://usdtshka.icu.hexora.st8.ru\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 03 Feb 2026 09:31:13 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CKEC; Domain=.google.com; Expires=Sun, 02-Aug-2026 09:31:02 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81658,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"a009b39608037cfdf4a8872a7a6573aa","sha1":"2d5ca49b13f3bc84ac3fffbe4cea0bb8c1c15207","sha256":"52e1f04bc6daca5eeb73924ca0245b5ec13ecbf6f77cbc951e650eebcd8b70d4","sha512":"1e58f6274945cf5131badc3c866745b99fa4eb3a24fa9ab0a69df9f986a92220b0728436a279423bc92b26373fba3e577c566bf3a089ad4545722a34dbaf95b4","ssdeep":"1536:XIv4W/CjP2+e9JCTUHdBjHvK4e7yrh3N4eOdDNeziWwNWnt:Xc+e9J3jHvK4UBgziKt","tlshash":"b083b8ccb6a670658263f5b5413f000eb23f59a9f8484dacb288d8e1adf4949417bf7d","first_seen":"2026-02-03T09:31:28.857614Z","last_seen":"2026-02-03T09:31:28.857614Z","times_seen":1,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":183,"dns":4,"connect":7,"send":0,"wait":27,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"b8a282478137d226e131fcfee0b54f44\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c79c6b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b8a282478137d226e131fcfee0b54f44","sha1":"df1631f2892574c45a45d8d6ea798395be44b001","sha256":"33fa11e0a8097e0aab469ecaa832bb67dffa56f6345175a417aa4af50e55af21","sha512":"fbc910c31842185147437e69cb97d3682c85e14df39f0b867df349560fa821801e838eadea35920fe5471b82495d6fe265653a01d9625618429f8455e2f49e3c","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFYUdZPkx3u4V5pfYMrlSf:4nmuTilGhmOx3u4V5pPrlSf","tlshash":"39a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-02-02T04:19:47.931298Z","last_seen":"2026-02-11T07:20:02.776096Z","times_seen":4819,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"7131a6ccba0953bdc4e2f4708db728e0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c79c6c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"7131a6ccba0953bdc4e2f4708db728e0","sha1":"0ec735d4e2f4743a4867b75b3b1f06eaaca8f2c4","sha256":"0a292049a3ffe8c0901e06fe16cc6b6dac40a26ab6f59a717249858d2457d738","sha512":"b3071372351d012505e9684882cdbff013db1f92136f03f0c39c5823c2ec8433562edd2e2baa0f084b8563afc7b884b38f8a9f2cf7105fc490d212396b2c4ec2","ssdeep":"96:zNC9Hqt7pEma7hY/rcK2JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYMLRIvgx43nVY","tlshash":"6ab1859af247b456c156225150ef3b1df33a281ca61ccdc4a669a5f218784cba077b3d","first_seen":"2026-02-02T04:19:47.905846Z","last_seen":"2026-02-11T07:20:02.794698Z","times_seen":4828,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9c80e9bc4d6c7129-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 3896112\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 03 Feb 2027 09:31:02 GMT\r\nlast-modified: Sun, 26 Oct 2025 23:27:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\nfly-request-id: 01K8HDJRGH614A319Y1CPHT2M4-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-18T04:49:44.216296Z","times_seen":45263,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":19,"connect":1,"send":0,"wait":34,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/assets/js/template.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /assets/js/template.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 17 Oct 2022 16:52:01 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1758\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6128,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"152178e390e84f1007e8d1b65f093776","sha1":"a064c3424cad41bae4d13f379a06d0759b72fbde","sha256":"701aeb72165add99019e776453380dc07a8f2e2d9f3ff64771e11aa9a2267ed9","sha512":"87ed5953de2d1c29d96b38d2dcfbb5a6d6e85c6426cba5f4491124b753f94f324e8c2a860a8d6ff7c79e6546e690f3397e413ee60c1de38fd656103c77dd1e16","ssdeep":"96:fpHkohWOTe+Z8aOQxgV8CiGsp9CfULq+fULZLqy1x7+s3LhuBy7uQyasWQb4qJ1z:fpHptgQxgV8CiBqJBqymsbhuUuQyatHw","tlshash":"d8c1dd16b1f224a194bb78398bff42a4372d444b8189ca627c6d97c40f84715a3f6fde","first_seen":"2023-06-26T08:12:18Z","last_seen":"2026-05-23T18:30:29.728861Z","times_seen":9,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":136,"dns":0,"connect":25,"send":0,"wait":26,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/bd.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/bd.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 998\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4ca06cc43cb4583621b15579bf442277","sha1":"f11c7647aa9cb58e6033d479eb021682e01157d9","sha256":"bcce012504ef3ade83802b67982bbade6d3c94cbd07bbd0d1e085f5e5a80e976","sha512":"a5cec0c4789b23cdadee2034366631c4ad699d30d75306ea5ff8d14b568415e6862216f4d594a59f894ade83a4638c4c43a7fb818e9879b451c95b572c1e3b08","ssdeep":"","tlshash":"4511c4d50a84035eda36d0b202ce1b7af9cb7ba98a300205680c99171ea2a7970b80ed","first_seen":"2023-07-10T20:05:15Z","last_seen":"2026-08-03T00:02:07.169751Z","times_seen":25,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":742,"dns":1,"connect":28,"send":0,"wait":23,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.5kpRRqOGFj0.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfpWpvJm3SqKuNUNb0RVam07_sNdTw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.5kpRRqOGFj0.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfpWpvJm3SqKuNUNb0RVam07_sNdTw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 105728\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 18:28:57 GMT\r\nexpires: Tue, 02 Feb 2027 18:28:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 31 Jan 2026 06:10:37 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 54126\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":373581,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"9988094cbb770b0990461c15d83817b8","sha1":"d18543a62a2b260c5db5d26e4acf7dc0853ce789","sha256":"1acda155b90867e8d54320e4c438d09326b65a32180e6af4ec370c88e8eef482","sha512":"24aa3a96720a271400f3870a7db6c6ef7f966567edb552be6acd4f4fc23d7e44cbade48ec87836526ddd06d549ff94c68217066d796d0709d0b184e2fc9590fc","ssdeep":"3072:IhdxVtgNR1w+cPmVRkp673A2zC8VYOf/xZ5YAjuIGToLdu0D/WOq2+Zje:W2Mxy3xSRaWQ","tlshash":"f584d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","first_seen":"2026-02-02T21:28:32.654985Z","last_seen":"2026-05-23T13:25:13.560493Z","times_seen":363,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 188\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":188,"data":"{\"p\":\"6975d353b2c8d0197e14227c\",\"w\":\"1jfq430hl\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://usdtshka.icu.hexora.st8.ru/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"65ibgxKIOxegmg6qRH8fG\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-ggmn\r\naccess-control-allow-origin: https://usdtshka.icu.hexora.st8.ru\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9c80e9c57bb40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f299b4547fcf13225327fa25ac447d3a","sha1":"1cf2796369883d353aabf5b51194dd6eafbf6a25","sha256":"2768c85aa7568decad22503fca5ade39cccb53289f8aea6afe82730919618b56","sha512":"cd9ac9beee745937a0fa9dd1e74057613ca9cb9a130be6613074efb1fefbbe0355bcc0b425065b1b3b48570f459617f488dd1a9dab7c0ea2e517987bb5fa2857","ssdeep":"","tlshash":"5e11c8098f4a2fab2ad7afd114456c8419cda2b1bac0008de0f41c5571ea2be090347d","first_seen":"2026-02-03T09:31:28.863916Z","last_seen":"2026-02-03T09:31:28.863916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:05.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 94\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":94,"data":"{\"logData\":\"{\\\"socket\\\":564,\\\"register\\\":0,\\\"widget\\\":1611,\\\"script\\\":1064,\\\"download\\\":547}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-ggmn\r\naccess-control-allow-origin: https://usdtshka.icu.hexora.st8.ru\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Feb 2026 09:31:05 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9c80e9cddcfc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-05-10T02:19:39.188302Z","times_seen":38514,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/style.css?id=132763","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/style.css?id=132763 HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 20 Dec 2025 16:15:04 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1895\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5091,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1522)","md5":"0547bedc4a59b66d2f718862be47bf4c","sha1":"5a4285f5bd5fc6189c0a119369fa101d65cc8bd7","sha256":"5eba52bd400e86bbe5b6ba96be01ff6a0a7753cd099f90cda832677bd85557a0","sha512":"09dfe3a84792def58f3131eb6d654fb3af0b716bd8bf5832a6d67113c70d001a05b2a12ed06fda4fc78057a0579e4ce07ac7beddbc0c5d032b772803cb976f67","ssdeep":"48:JyUotCqJf6oFDosEjqJV1ag9w+w/Tfz/vehEEdXkHVu48NUdO54eThEk5qJBA6Bh:eCqhxFc21xw57oNmU4ChvqJ3B1wzZbk","tlshash":"fbb163b1d706110bb137e66aa2d0fac92176a053e4534b39fea27464cb021e86af374d","first_seen":"2026-02-03T08:54:56.128399Z","last_seen":"2026-02-03T09:31:28.865947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":75,"dns":1,"connect":27,"send":0,"wait":29,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/ru.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/ru.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 487\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5ddf50d1327e2ecc28a980e93b9f538a","sha1":"581fa9ecc609a1a07fca205b6c9751e8c28f1ebb","sha256":"1bdc7040f02e999a17f291b59767d4101adefa2d89775272ac7c66f37c710fff","sha512":"2375f58bfd0c3fe7b54258a6b222e285dbf4b4e30e87f76387ec5e1033906d0a04eb78481ee8c78460934f5c1de26007a6488d7857d59d8ca8b7b3fe31228f0d","ssdeep":"","tlshash":"a1f054ee2d01086d493cd918106b0fe1d45b0cb50ae64414d0dab2c43e2278fa8f8ac1","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-08-16T10:48:47.573264Z","times_seen":1215,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":471,"dns":0,"connect":36,"send":0,"wait":23,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/gKfpnRrifeTO.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/gKfpnRrifeTO.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:27:08 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2702\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152)","md5":"a26a117ff59c944bbb654bf506f69786","sha1":"237c90127c99e91347536835096276b0add6d018","sha256":"cfa1739ee346d63a3d3cfdff8c18cbe8fdedbcb32d4b0895028c193ce828e7a5","sha512":"11a93fdbd393a5bdfa2cba36af8ec8a55ccf04b5e700c3c0572a5b499899e1091ff29ffb4bf5d11b9c69ece2963cf61f253ea67ad23e20e4644791bc17dd34fa","ssdeep":"96:irZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:iry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"04f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:10:38Z","last_seen":"2026-08-17T18:21:14.836319Z","times_seen":8382,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":383,"dns":1,"connect":23,"send":0,"wait":28,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:05.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 41275\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 03 Feb 2026 09:31:05 GMT\r\nage: 2196395\r\nx-served-by: cache-fra-etou8220027-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"475622e60286d667b5e7f14f82caa1f9","sha1":"43a14d5da04c517a71084e7c51e0743e14f0f176","sha256":"45459d9462c3613554e4c6777d6a09517c34237c5b17e10c75b707552c6e5da2","sha512":"3b40bc52e32e22de2db674f6da296e3233178ca0c4a6fa3a8cd47b094da9fb903fde58827563b0389233ecd090800c49c8da6545d56d9105ad3e42f9bd01bbb1","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifxK4h3dfEm+C/ove:Q/drlyogMVc6FIKV+uKgdfEm+Cl","tlshash":"b2646f7d86506deee994902d86db3b4af9883c0493ed1276f66441cb37ba43a33487dc","first_seen":"2025-09-09T11:45:44.557287Z","last_seen":"2026-06-06T17:16:11.27359Z","times_seen":244,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/ae.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/ae.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 563\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"dbbaf02cf2c4e47cbcfdbe0d31d12b96","sha1":"767790e81ed2eb7d25b1416824ec996a6969fc35","sha256":"ab6e2352ae53d1dba645ec56d0b6a2b5a39780634c81d6bf5708322b2d5ed0b9","sha512":"5ca027305a4aa1a93d06d4d78903e8598663784a373d260f174eaa271566c68e05bd4ef0e45f49434f5c3c9dfeb0d160ebf5ec22a3d515fa10598b024fc52a88","ssdeep":"","tlshash":"2ef096ff3f486d19c438713fc10706344d5b28c80bab32889174216d0cd28a4e375e05","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-08-17T02:59:08.596466Z","times_seen":47,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":681,"dns":8,"connect":27,"send":0,"wait":23,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/es.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/es.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 873\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8bf31a924501d6db655fe75696b5f046","sha1":"94ba0f8d4db0c35c1246a55fcbd6e0ef3cd7f0e2","sha256":"5ae9561f31199bf8a892f797a69db1bc5d477e2f8318f2b7e95487f025f66f28","sha512":"37dac360a5ac86e3e0cb6672eab5db6baf1514225741615696d09cadd93492f3c666bb6c385d12475046fa21c1672250b8cee13b83f629d80b3a8aec752491dd","ssdeep":"","tlshash":"f31163e9cb60dc1da704955134135b78ef920fa9036f296d861490ffecaa61ca5d0325","first_seen":"2023-04-08T21:50:50Z","last_seen":"2026-08-17T21:44:36.598827Z","times_seen":1828,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":595,"dns":0,"connect":46,"send":0,"wait":25,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 11:01:39 GMT\r\nexpires: Sun, 31 Jan 2027 11:01:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253764\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-08-17T17:28:09.115438Z","times_seen":6084,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":148,"dns":1,"connect":7,"send":0,"wait":9,"receive":9,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c79c691a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:05.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Tue, 03 Feb 2026 09:31:05 GMT\r\nage: 3814382\r\nx-served-by: cache-fra-etou8220168-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-18T04:05:08.482883Z","times_seen":21407,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/eNtOheNltGn7.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/eNtOheNltGn7.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 10 Jun 2023 20:55:47 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 707\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2799,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5267330dc0a16fab8b7d4f4ac4f06590","sha1":"e1f73020850cebbd4c397146cb4ec82a0bbb4c50","sha256":"d3dd38c6cc49ff09a201eeb50ea107fae078cbf8885a3b21f0071c580057a561","sha512":"592ab91e69aa42d368be48cc56ac91d772c27a1c21c8be7223b507ceee166018687fe6f7f3c8cdc479821070e13cbb75600c4a1b53c68202533843e7692c405c","ssdeep":"","tlshash":"025145b6d13f01804351ea8527aba350df94b02dd8e9ec79d0526e8cfaf5e1883863dd","first_seen":"2026-02-03T08:54:56.167154Z","last_seen":"2026-02-03T09:31:28.872901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":75,"dns":1,"connect":33,"send":0,"wait":25,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/it.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/it.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 642\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"922efc02f080135a63137dde4ffea287","sha1":"a4583be3e579a69a03a0d1f09995fdb6d1244f7d","sha256":"510116996dc4979a225c07962d84bb76e2b6340234c2c5e4280596ad08a632cb","sha512":"5d5cf4ee23afce714be0555318fbfabd0461aeae4530bd5f12d8fac947045438f97cf4a045751698514ace1465d6ae70c3f7d62cbc68437009d40553ffd7ff2b","ssdeep":"","tlshash":"bbf023a9016071eec83e2bf201410af955170da89b720008c04ff8d53c6e428c394686","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-08-15T10:44:22.163517Z","times_seen":1495,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":597,"dns":3,"connect":46,"send":0,"wait":31,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c78c631a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/images/nsdV8iHMWE3v.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/images/nsdV8iHMWE3v.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 20 Dec 2025 21:22:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 69679\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"a440d4b512f4d2b9b63d3ab8818fc9e3","sha1":"90dac8c11ffff8e0b345d11a55049c088eff2165","sha256":"2de63cb5ac9431e6febcd4dfd7527d98654452bddd468fe45b93e22cef67ae15","sha512":"90debb4d79ff0b1136fabe5809b8e6b88259a5668240f25ebdcb6b5e844a9b84415a7b37cf87fccdd68e1cd4a686a2ba8265d603cfa513a83cb87f7b41adff0c","ssdeep":"1536:3XWmI8g4DLn+3MeMpH3NGLxHDzRcS7qN0iN1EkVU0nr8rTO:y4DLGMzpdGdHDzSOO0iN1uNC","tlshash":"5f63bea34a3ad985caa1847cb9bb1fc07668a135e5099dcf537ef71cf2421e36d920d0","first_seen":"2023-05-02T11:54:15Z","last_seen":"2026-08-17T14:07:06.713276Z","times_seen":488,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":496,"dns":0,"connect":34,"send":0,"wait":25,"receive":83,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 11:01:39 GMT\r\nexpires: Sun, 31 Jan 2027 11:01:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253764\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-08-17T17:28:09.115438Z","times_seen":6084,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c39ab30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-18T04:05:08.44585Z","times_seen":67212,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/languages/ru.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/languages/ru.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"57f659469ba055c55008ec40b4547025\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2194\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c75bf80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16972,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"edb77ca1d2a115c8ab6aeb4c80feadbc","sha1":"4c86c0d5fa9f7d3a35d4a329e8b5fcaa6cd182b8","sha256":"1808603b236b50225b6494ecee222a02c7c89723eb9a4012e8607d55f4da4279","sha512":"4ada0f318a01f9e8d5ddeb925bd1768f75751f1882d4fc1b11ba47366a9530987bdae6d1e25a5bc7368c85804136fa7822749f3273a0886cc6492629f386a321","ssdeep":"192:XR5lZdA/47HIeAwmw1wxo39f5plgmb0x/cv9/UhNbej1dMiTsOnr6:vq/cAwmw1wx0f5plex/cv9/Uhd4ysm","tlshash":"31728861c6566dff0147f01ae8047a0a38a585ff2f553225776c3c7e2bee82e823924d","first_seen":"2025-06-30T18:54:58.953028Z","last_seen":"2026-02-15T03:24:41.362982Z","times_seen":65,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18778\r\ncf-ray: 9c80e9bc1c911ae6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64cac444-495a\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1644986\r\nexpires: Sun, 24 Jan 2027 09:31:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XrOb91G6fhUC2FgWR2OfBZVYJZ%2FC3QpQjqnmjt7NFgkdyPRoyelM8OEFE0kPuCwWgUJPdVQ%2BMpgBJ2Q6RMDxFNJ9siLIivFNw8faENY1YFyccu1hbRm4rqoA9ZfNwyb0au3nM24Q\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-18T06:02:33.56323Z","times_seen":47066,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":15,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/ethereum-eth-logo.png?v=029","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 08:52:11 GMT","end":"Sun, 15 Mar 2026 09:50:48 GMT"},"fingerprint":{"sha1":"DC:49:52:20:76:53:C2:D9:F0:EF:C9:09:62:1A:FB:47:15:F4:D6:86","sha256":"47:87:EA:27:6A:15:76:C1:27:14:A9:C7:D1:21:97:B9:08:8F:B5:83:4F:38:27:43:1B:63:0A:C4:8D:75:02:9C"}}},"request":{"raw":"GET /logos/ethereum-eth-logo.png?v=029 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 160579\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 08:54:27 GMT\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2195\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxyPHd2z2WSDn3bCg9rqEMKn596443dKJ2wZ8YhiUqg7slJ5%2F3%2BQoEqSd83hXuUNj4mUCYVA9cldN5qxmS%2BAT3i8eEjugcxypE9GgQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c80e9be7f2fb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-17T19:32:51.975537Z","times_seen":1617,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":284,"dns":0,"connect":1,"send":0,"wait":8,"receive":4,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/R6Wkw5RZW0ED.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/R6Wkw5RZW0ED.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:22:18 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4511\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11084), with no line terminators","md5":"65f1d21d5fcc9d21da758adababd0c3c","sha1":"e0661d07d64c00008bc9d013d16eec0a0f156dc7","sha256":"d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe","sha512":"de7d7dc739ced2e6cfa52c1809144180787adc3ad5f9b7597c72b9d9bd5eb2f21de06b1fc12b5034f2458de428b368772700a6665d3f2e02f148a300239e6183","ssdeep":"192:sANzVNUBOebwvXDA+mJ4fXOrTIjDJfiRxug9xx+EMZajp:PNbUBOjHmJcOgjDJaR1bMZip","tlshash":"2032d6cd70937109438ba07b21bf520ef2bd495859198954e099c8bdbd74ce8523bf6e","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-17T18:48:02.950956Z","times_seen":6929,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":162,"dns":0,"connect":48,"send":0,"wait":27,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/pk.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/pk.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 969\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d9aaabe924982d2f966289da0e307ce2","sha1":"d39fdaa7d4f2eff29648ce2ad9b626c373bb503a","sha256":"586dfe1126887a6525c4f7063501e5895eb0be75b7c39b27f4f6e9c8ea660c3b","sha512":"85eb203f524ba3b534befc96f1429259b1b6ef9b7678c22087e6db22351bf496764b868780502757b0a8f2a6e4f1cf44ab315f4a65bf23b240622d6fb6b884fc","ssdeep":"","tlshash":"99110cfd03b8500ebe3beb1cf0151008c69f28e8201f1817f5ad57a999fe6e105ec115","first_seen":"2023-07-10T20:05:15Z","last_seen":"2026-08-03T00:02:07.223267Z","times_seen":30,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":732,"dns":10,"connect":30,"send":0,"wait":24,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c79c681a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-18T04:05:08.410121Z","times_seen":50285,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 04:10:43 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c90c991a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-18T04:05:08.457342Z","times_seen":50097,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 04:10:43 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c92ca01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-06-15T21:26:04.429831Z","times_seen":27805,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/mm4SaGppzuwD.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/mm4SaGppzuwD.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:23:28 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1810\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-18T06:42:45.999642Z","times_seen":24090,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":233,"dns":0,"connect":23,"send":0,"wait":35,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/tr.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/tr.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 923\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":923,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f9619dd9adc7fbb5244483ca00cace60","sha1":"4970f612a0e86100cf07629da3b9ea12af8891e5","sha256":"d11d2b8956d975cff1ea2a49763f6eec736506498be297be7ac1c4363cc95ee5","sha512":"a7517b1bc260669d644b2c61a533abc00cedfdb859254047ef6b41af111b9a09141c4cbb5871b13014a86978cd1730ae77f8dfc7cf6a27a2bbf46b69f0b70d81","ssdeep":"","tlshash":"de11c4d8f640b028237946efd102c9aee92fa5e65c8323c89109b08d738720d2292ba0","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-08-14T13:41:02.952584Z","times_seen":723,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":741,"dns":1,"connect":29,"send":0,"wait":24,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 109808\r\ncf-ray: 9c80e9c06bd9b4ff-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-1acf0\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1072209\r\nexpires: Sun, 24 Jan 2027 09:31:03 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9dSI2gWNOeYTe8cvzIZ7D4HHAy1zWpD%2FJRkolN18xjMHT%2BOq0ISLaSSnzHSII0VQwvxEIaatlOAN1%2Fq92IarINlaayFGo%2FJ2bojozfkKX%2Ff46YfXdNmMq%2BSKI%2FcL1%2BZ9kDGbP2hI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109808,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280","md5":"005c9aa92b564b73b7582cc4f1fa49cb","sha1":"373361ed756b1fe68ce2f5968d467826b6973bb5","sha256":"faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1","sha512":"cf057683226d25fab8518295d9a2bbc7261b85a0e911d323f949719b6484beb99843887ac634e58f21988c5af3b8d825b8289cbfe29b2d4e1817016be1499bba","ssdeep":"1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK","tlshash":"56b312cbe021d582bdee1c5b69ba14bf61180424427dbe9dc306746bbf16e023d0bd27","first_seen":"2023-08-04T22:28:11Z","last_seen":"2026-08-18T06:35:15.231741Z","times_seen":31107,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":37,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-w544\r\naccess-control-allow-origin: https://usdtshka.icu.hexora.st8.ru\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Feb 2026 09:31:05 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9c80e9cb0ccd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/xv5XmCjJRYgr.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/xv5XmCjJRYgr.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:26:15 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 11414\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":44344,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31998)","md5":"c7b7f245d361390e332e902506977d60","sha1":"bf6f8e0078fe25f5cdc91565492d78b7363ac904","sha256":"de5591e013e80c7cadad861c3b40ae2331fd2a66fd8ac9a88983d02a0aa7194b","sha512":"bcd684c03075666ab07653f5779f7106c1a31c83308feb82be4b8a1208d1a3b2a5b5e0cb9320990e2b5ece2bdefedb3d442dd4beec33ddfee2e1a88573d71c73","ssdeep":"768:aCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RS0c7UuHjRUQuFBt33:pITMFC4dbMVRS0cgRDV","tlshash":"90137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-10T16:48:02Z","last_seen":"2026-08-15T09:04:12.722448Z","times_seen":345,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":351,"dns":3,"connect":24,"send":0,"wait":26,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/M0iaRoAtkUjn.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/M0iaRoAtkUjn.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 10:52:29 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 22900\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":155801,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65307)","md5":"e65b2168d860760555b88d93cfe17e8a","sha1":"7888a9ef7cc31412433afc11abdc996dc77bb499","sha256":"17df1c557c711a6b2db80a392fbdb015693a058d35594a91266a41c5e88b3d80","sha512":"72bffc0f18c9490782a6e13b25b0cae9158d0a8521f70612004b49e5574f0a93f187ac4a9841dce3fe08ba703026ebb1f8b5bf06dd7a416e0a458bf67587a98a","ssdeep":"1536:d0boW83RipVVsEBpy0cuJcWG2RWb59yVUpz600I4fT:d0boryVUpz600I4fT","tlshash":"0be3a3d7f581241dd4a7c259a0d1bffd052f4686e3025babb0277bb88b4a6c70963e4c","first_seen":"2026-02-03T08:54:56.181479Z","last_seen":"2026-02-03T09:31:28.883003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":67,"dns":1,"connect":23,"send":0,"wait":29,"receive":23,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/lGgrwKQ83XFn.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/lGgrwKQ83XFn.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 10:53:03 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 33832\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":174208,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"f7be5ce2c6117c4961b8310175a19f77","sha1":"7835f4375db1bf87360bcc88cfd02ced2f4b4a69","sha256":"fbdef18cc70f85b2c75d3ec7cc18d9c31fe81c695d8da932c55ab1ded6ee090b","sha512":"5384a0215ea51024dbecb6409e13e3640a7b46ef965174928bd696d66b15cf0ca99ab46562305593c57df2fe31d63dbcaf4d60676edece03cf1554d8b4b829f3","ssdeep":"1536:Kwv1E8SIZlJ/Zg9ADlnIZ+mqX56xdWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmhp:N1E1IZ3/g2ln++1gNbqMAXH/","tlshash":"27047fb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2026-02-03T08:54:56.100378Z","last_seen":"2026-02-03T09:31:28.883556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":76,"dns":1,"connect":22,"send":0,"wait":32,"receive":20,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: \"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1314805\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c97ca51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-08-18T04:05:08.470854Z","times_seen":39808,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/dogecoin-doge-logo.png?v=029","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 08:52:11 GMT","end":"Sun, 15 Mar 2026 09:50:48 GMT"},"fingerprint":{"sha1":"DC:49:52:20:76:53:C2:D9:F0:EF:C9:09:62:1A:FB:47:15:F4:D6:86","sha256":"47:87:EA:27:6A:15:76:C1:27:14:A9:C7:D1:21:97:B9:08:8F:B5:83:4F:38:27:43:1B:63:0A:C4:8D:75:02:9C"}}},"request":{"raw":"GET /logos/dogecoin-doge-logo.png?v=029 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 332322\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 08:54:27 GMT\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2195\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZAA6xy3F14RiWaWYxMKq76fdUb5%2FNzEhVVSo4xzpMjtVgz%2BPobO1RU0TpcM9xml3b9tQxR4XpQ66Rg0BVLfS7iPeAp7wkDPzaDJxA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c80e9be3ee9b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":332322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"e596c8c071005a2579b3b602e6af5d5c","sha1":"bb4b571c915b293a3f0fb9ed77f0f591d79a5309","sha256":"5b07ee1cd60b3309b66e5d5bba4e39016684ae1ba78a943899f7dff5a9fb5f0d","sha512":"24ad7cf36cefc3e89a704966111ee413c7c559f1be4a66fb8265950bb835e924e9c66296cd34f765e6bbee7b31b472154ca58204307ec8e8e4fb29839c2e70bf","ssdeep":"6144:WwPjVx2nabbHd73hT1N5eHbdizIEgSR/QFQbDTzJ1DrfLHP2zCo5BOZSpWxmxC8:NPZ0nqTd73h1veHbdizIaF/XrvHuzzHb","tlshash":"ce64230c455489b5d83b8a3365f88f9d47f2a2e60b772b25853011cb4f29befc98d639","first_seen":"2023-10-26T11:09:32Z","last_seen":"2026-08-02T03:55:04.082436Z","times_seen":446,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":281,"dns":1,"connect":1,"send":0,"wait":13,"receive":15,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/de.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/de.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 602\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8a2ba86f3b7de7562445967e2c21843b","sha1":"3046cd0b51721f180c2dc75513fd4bfd316b45b5","sha256":"cc318f3be9ba75def2af54bd9d0fab4f3e316517de9bf138e40dee06d332602d","sha512":"bbfe0899d1e796e1635d12332d6e5ecc21c78c7073419b14236660d6524861ad078644a0de96c914a07988584105a4d503a7ba9f29480be720ce541ad7ebeb5f","ssdeep":"","tlshash":"8df002a8839266668e5b12f3c0031dd44dbb0db4573f3518622ba8be0b61e0263806f0","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-08-17T20:41:05.369513Z","times_seen":1601,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":607,"dns":0,"connect":42,"send":0,"wait":28,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 18:34:38 GMT\r\nexpires: Tue, 02 Feb 2027 18:34:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 53785\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":50,"dns":3,"connect":23,"send":0,"wait":22,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/images/favicon.ico","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/images/favicon.ico HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15; rsite=https%3A%2F%2Fusdtshka.icu.hexora.st8.ru%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 20 Dec 2025 22:58:09 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3538\r\nConnection: close\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3515,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"38782daefee6240f0b76b567628924a7","sha1":"d5e4162a84b354184fe437a03a5093f361771e0c","sha256":"a0e54ded994027127a01a1e1328feced66f4696a6776ab375d02aec4e292bd52","sha512":"56777056e9adf0234093d51339c5ef009aa7205254f17be6f7c6cc09c0e2fe20df0623c24e5f575b3f060975cd7a2791ebccdc508bf12e291560410a173d4f79","ssdeep":"","tlshash":"9d715c7c95918dd6da0d88192d288fe4b3dd4aa9328ed5e3008457cde443af7352ef17","first_seen":"2026-02-03T08:54:56.102204Z","last_seen":"2026-02-03T09:31:28.886752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":23,"send":0,"wait":24,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/bitcoin-btc-logo.png?v=029","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 08:52:11 GMT","end":"Sun, 15 Mar 2026 09:50:48 GMT"},"fingerprint":{"sha1":"DC:49:52:20:76:53:C2:D9:F0:EF:C9:09:62:1A:FB:47:15:F4:D6:86","sha256":"47:87:EA:27:6A:15:76:C1:27:14:A9:C7:D1:21:97:B9:08:8F:B5:83:4F:38:27:43:1B:63:0A:C4:8D:75:02:9C"}}},"request":{"raw":"GET /logos/bitcoin-btc-logo.png?v=029 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 87786\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 08:54:27 GMT\r\nlast-modified: Fri, 20 Nov 2020 22:18:12 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2195\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dPD8sNiD4R25AHO0%2FTd1ZZ3FPlmL8BZU7orpcWc2aTB%2FYLpDGrWKNNR7ocmnbSwFKjgBLXZEBezRjak2BaqYGuKd31jxPGpQazQqQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c80e9be4eedb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"d6a21bc3c9efb83425341d0e319f8110","sha1":"f2e3c72421dba14abc3d3e5f47527a8871845a85","sha256":"fc600df9cffdbed77b88c6f4efdb491310f0f84d1b2d58387958c3c41e950476","sha512":"d2f6ca081bb1101677532559318db1f55a345c2137a8b8a326cd0941341dbebae13a4227552619b3618f1321805d7e992e923db3a87deb87de06341d625935a4","ssdeep":"1536:L+ktmrYWswbPcfmsyLnWvN4yKuATOz/ccPPfIXsMSKCo1weydaPAgZbdL:ntmrnbxHWVCgcQwXsKtAsZL","tlshash":"f083f1138c1ece75d8554afcfabb8fc1f70026bdc131add5a8385d68b499980125b8ee","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-17T04:13:44.654912Z","times_seen":1661,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":282,"dns":1,"connect":1,"send":0,"wait":12,"receive":4,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/lTZYtVRTN7kP.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/lTZYtVRTN7kP.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:17:32 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 921\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3070,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3070), with no line terminators","md5":"75761bad4cbbe02347c78e77902f26b3","sha1":"7d609e61459e21dd4e3bc9ddd17904352444b042","sha256":"1d68f1ee5ed97619035e8e6819f1025bd3568a54b1d6bdc37a5cc7d834a81a0a","sha512":"85f7c0f26902710643e690edb372b705ba7bf152329c213288be02cfd34b844481d83e11bf5c8cef5d59007afc614054adbdfaea6d577e2424c6c02e26bd2e4d","ssdeep":"","tlshash":"9251ed75d551216ff07fca3bbac53b68253dd20368324a9ef244ea07834a16998da70b","first_seen":"2023-04-19T13:24:01Z","last_seen":"2026-08-05T18:25:21.476709Z","times_seen":197,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":100,"dns":1,"connect":24,"send":0,"wait":24,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/assets/js/surf.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /assets/js/surf.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 17 Oct 2022 16:52:01 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 667\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3f06ed4011f727351e51b3c408a86779","sha1":"71e386b554f0778e6a5067678f40554871b6074d","sha256":"89dd5a30b4ae8d6bcfba3b5b9d0116af4c79caf8c59dc5a2ba829964c2e0c041","sha512":"a74ccd65ac222046c1a3201f82fa3a153876ab8520200f7c467f7aa09474065e2ee70789fe1b25f0b0d0c342eab3c1ca56cc5c5f8a685d8042df19d0059091e7","ssdeep":"","tlshash":"877188edfc5426b1a6736059977b4212efad602b40099b14bc8cb1d01fb80c8f54feae","first_seen":"2025-10-12T08:03:36.487732Z","last_seen":"2026-02-03T09:31:28.888632Z","times_seen":3,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":121,"dns":0,"connect":22,"send":0,"wait":35,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/35s6KPii5bX2.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/35s6KPii5bX2.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:26:28 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 922\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a6bc29eba3a03af2f99b046f621522da","sha1":"48a997ce3183b2f58a13fb771574e639930af73e","sha256":"554262ab4a4bf432d33cfe80f5ff8748b18548e82582647f19dd567e4e62b4dc","sha512":"a6e442836bf24d1f9c726316769800fe556bc38897bf9a8f5ed5079ab5448e15172c06ddca656dee018366f0c5c04f93bcfd2274cb61b864e7cf349548924474","ssdeep":"","tlshash":"50514145fb4e219d8a6630b9da0d528d070da13504aba4b5fd7e11880fd4c6ee20dbfd","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-08-09T03:11:46.357923Z","times_seen":335,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":362,"dns":0,"connect":23,"send":0,"wait":24,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-xhpn\r\naccess-control-allow-origin: https://usdtshka.icu.hexora.st8.ru\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9c80e9c47b970883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"90003187cf00fc27542a9eb7d94f3788\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c79c671a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"90003187cf00fc27542a9eb7d94f3788","sha1":"454d91d187104f0545509b67b7545b945e7c35ec","sha256":"8458da5780bb6d48a6f5c27c4e2fd4ace6b1557609f40de30b5ea0392dfb83fa","sha512":"daf1ce30f434ee8a0e997d02cf21be41ce5e891db94ed5d433dc0220b91e0dd39e8342942c0dd38c33a7802edc78094b0144b4801796ee945bfe155ce0c01e96","ssdeep":"384:UJw/U5YK8Hx9KJwThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJwThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"8652c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-02-02T04:19:47.875469Z","last_seen":"2026-02-11T07:20:02.745461Z","times_seen":4786,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/vHBUKhflmUlG.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/vHBUKhflmUlG.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:16:57 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 5270\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-08-18T05:58:46.780435Z","times_seen":32709,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":74,"dns":1,"connect":32,"send":0,"wait":29,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/bnb-bnb-logo.png?v=029","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 08:52:11 GMT","end":"Sun, 15 Mar 2026 09:50:48 GMT"},"fingerprint":{"sha1":"DC:49:52:20:76:53:C2:D9:F0:EF:C9:09:62:1A:FB:47:15:F4:D6:86","sha256":"47:87:EA:27:6A:15:76:C1:27:14:A9:C7:D1:21:97:B9:08:8F:B5:83:4F:38:27:43:1B:63:0A:C4:8D:75:02:9C"}}},"request":{"raw":"GET /logos/bnb-bnb-logo.png?v=029 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 104712\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 08:54:27 GMT\r\nlast-modified: Fri, 25 Feb 2022 07:07:33 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2195\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkat1oTcb1lWz6A%2BSDuTAt9dxPOew5vjMGzD4I4EDIRelEjHBO2eFTRo5XZKvhOz29uwMW%2BnZPenI0wWfVqYx5VL%2F0BRY5eo2dgE3A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c80e9be6f13b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":104712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"9faf561e1bbd427d5d739b539249357f","sha1":"fbfac48e3c8c1caa9d17b8a38281eeef0d996d43","sha256":"86d65436ed9470ff4447f0ffd6426fe2622577421866e49933d2615bdb2a1a18","sha512":"aff23cde575e2cc346d303da8f1b432981bbbdeacbc02cd64f8808add90933033b8f0121cdb48b406e24fbc47234cccbcea1ba8b90b83ebfb0165f76087e04ba","ssdeep":"1536:FdYeBHIGj69qzWK89JQJV+04SoKLSc/viVXad7CL2gKpjc4f5XdG6YJhonwT/sv:zYnW64z03Q2pKrd7CKlac0JGwDsv","tlshash":"3ca302b6a3a5ec45e9939e3cec3e2ee2d774837fca4c5dd07ad09201121463aba154dc","first_seen":"2023-05-31T01:01:46Z","last_seen":"2026-08-10T19:13:12.504385Z","times_seen":327,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":288,"dns":0,"connect":1,"send":0,"wait":9,"receive":3,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/JFK0w165QG8R.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/JFK0w165QG8R.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:27:49 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1265\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2300)","md5":"232168e6da121673aa7e9a3b04859be3","sha1":"78837fc4f2f5e44557b1084bb34a208e2bf7a606","sha256":"eec940cad5262fc05f5ae870883798cfb08c1abe08a9d4e647fc56d01a1eea23","sha512":"b64f6cb088231f1f106795b541f4ae4f393a8865e84bcd340505e25a371b394e7f619fda9a032979f55682660a7bb038e6387f7bba311732b06779cbb89253d2","ssdeep":"","tlshash":"9151730c7c98b5bf033b33b5449e860e22382d511603c5a0f06894a5f9b8c42326ff79","first_seen":"2026-02-03T08:54:56.202992Z","last_seen":"2026-02-03T09:31:28.891479Z","times_seen":2,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":386,"dns":0,"connect":30,"send":0,"wait":30,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9c80e9c39aca0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-18T04:05:08.425261Z","times_seen":93741,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"ef587b65b171c1d89e0701046588ecd4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c78c641a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"ef587b65b171c1d89e0701046588ecd4","sha1":"e5a70cba869c1fdc5780af5dbd402f535d2e8fe4","sha256":"8e848dbfc6aee1d6dbff36911e98eb04c3a836d335b6fe1d4b053df7cb69a557","sha512":"1f7470331aad3fa07a7fabf6f0dc4f560b7b12a2ea5e04abe108c96a05187eb2d2cc438f13e7c82f068d0b3e899b3e2858af5bff1d3687fcd0011a94908a2c69","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC/GN//h6LiJq:SzP2DRSLi8","tlshash":"2f822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745df245a8cc2906af3d","first_seen":"2026-02-02T04:19:47.930338Z","last_seen":"2026-02-11T07:20:02.644201Z","times_seen":4825,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 04:10:43 GMT\r\netag: W/\"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105305\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c90c981a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-08-18T04:05:08.411915Z","times_seen":39160,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/images/tzYfjiKVVgOK.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/images/tzYfjiKVVgOK.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 26 Jan 2026 23:37:41 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 139178\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":139178,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"bdcf6bc9a29d2edf6de4139232197d4a","sha1":"ecea12780c392e97716aaf696685cd2e59ef715b","sha256":"dfb316b3de7dae2b715f6b33400ce1468cff39a8b9a71b7f28beaaf06a88963b","sha512":"5208eae0392b908c6f1dcd373426e81bd810ff8bc95cf88792ed447d399982464bc51b29a89386fb40c85a279f0ea4943a9f521fc94d9a689e26bfb8b617eade","ssdeep":"3072:NDvYYVk34dGg+QQ4ajvkAH8mM1/Wx6pHPZ0lxZ8I46jA7GvhTJst:NDVkodGg9Q4U8Y8mM1/Wx6wlxZ8I46jn","tlshash":"22d312541d6ad718dc1be4fe1a011e226ff0c50f93d2acb31e876a713ae9845d4bdba0","first_seen":"2026-02-03T08:54:56.123823Z","last_seen":"2026-07-16T07:54:25.773527Z","times_seen":5,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":493,"dns":0,"connect":29,"send":0,"wait":35,"receive":99,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/kWgR569rgwl6.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/kWgR569rgwl6.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:26:47 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1040\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2948,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2826)","md5":"d371492d2d201a4778bdee42cc8a7d7d","sha1":"624eff52ad3b7afbc9d12d85327429e35f6091c5","sha256":"b2da4717a12d5dae7eb556cf1c4ac6f0b7bba1a064742d382c1d9175aed2af2e","sha512":"dc2d507aa98bde3ef20c9c9ebf2306b2fa2805c144b766d36e6de486d7e0edaec490bbbbd294f4f80d0c4f6a5e84738b7cfede2d50a88d2ec3cd51bafcb48cd8","ssdeep":"","tlshash":"1e513114b10112f648ff24d33911b143a075093dc42ac14be97e86b21efec02aab6d4f","first_seen":"2026-02-03T08:54:56.197634Z","last_seen":"2026-02-03T09:31:28.894427Z","times_seen":2,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":369,"dns":0,"connect":23,"send":0,"wait":23,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"44b9fc99078bcfe4490fb15034bc1e15\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c39ab90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/LFtCxlhAg6ah.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/LFtCxlhAg6ah.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 23 Jan 2026 12:58:41 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 12197\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":75013,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"f0dfbe5ebea5a54855fbf59f88d2abbc","sha1":"d04b4059a87351149a97048b7b773544a3f70836","sha256":"868c286854257e314bf6bea983219c41f1526d914c0efecc6559d03ffa514090","sha512":"e6485ff2fecbd9faea632f0564501881ee15065d5ceb41771d63d240da97738de040780d82ce4a2af03e6701aa4c4ac6a9e4cb7d36d974348f234ef4df5826d9","ssdeep":"1536:r9GaGLub5kcRnZY6wn9qyUzekCTTj1NPCW9fSWyYAU5jaxJlAb3FUDoEFNWbBp1b:2LAkcRZvwgBekCTTj1NPCYfSWyYAU5jr","tlshash":"7f7363d66bb51904742fe89868929790636c40c3f50fcabdbaf2305cee893d81977f49","first_seen":"2026-02-03T08:54:56.122812Z","last_seen":"2026-02-03T09:31:28.895532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":103,"dns":0,"connect":25,"send":0,"wait":27,"receive":20,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/dYIpZfq3iaIS.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/dYIpZfq3iaIS.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:21:22 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 653\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238), with no line terminators","md5":"3c21943f1ba3ea8076407069730bc21f","sha1":"b151fcde1e2592b4a7d948d923842c40db99a5e3","sha256":"46b59ac4872b8dbe854dcc5abfd9a05e0ffb44a86f89e9d4f3b9debe2f2aa4a8","sha512":"b74535a365c4c74a2f9da71d0bea5be3a81d7768c106cd549f3f4cfba2bba90498c6c71b3a841236ca3a85715bb7903e375bbc5336a48445259a3f6d972e2d64","ssdeep":"","tlshash":"1d21d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-10T12:01:06Z","last_seen":"2026-08-14T19:57:37.930041Z","times_seen":250,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":156,"dns":0,"connect":39,"send":0,"wait":28,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/dl0oBt5SP2i0.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/dl0oBt5SP2i0.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:24:46 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 602\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1266), with no line terminators","md5":"38344b23b88103e2964753b7fc7da18e","sha1":"85e8ad901c174370272372112d2af8d7ce44a41e","sha256":"2597615b6993e6137aa2152e6dcd4bf8de109cb95effd026edf46cde8b118ed7","sha512":"87770af1452be5bdc62c0f24eee06f2b673653f2639da1bb8bb285e4e49413a24f17907e24283f2c8fd53a520e4582bd7745005215c3a1555b10398114e38b79","ssdeep":"","tlshash":"9d218b9938d57c6592b7701c6a6f22415231963fc28145e2adeeddfc34abdc13513a48","first_seen":"2023-03-13T20:15:21Z","last_seen":"2026-08-17T18:48:02.738245Z","times_seen":458,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":281,"dns":12,"connect":24,"send":0,"wait":23,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Exo+2:wght@400;700\u0026family=Orbitron:wght@900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Exo+2:wght@400;700\u0026family=Orbitron:wght@900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 03 Feb 2026 09:31:02 GMT\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4106,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a04dd0ae739b35db0f13a94b3cfb5516","sha1":"bd4757c81e18820d99bfec6aea48b30336cccd39","sha256":"aa0c681bf9b1159c9271055b03e213e8180652bc8f5cca4f381f515f80f55413","sha512":"ad9db3196fcc3e1707faeedee5e739294077f86d3c3102376e6d9de1e5308397cefa09a8daa49539a9d8f6034fa12425263bb393cf238cdcdfc1b22ce0c4915d","ssdeep":"96:MOEapcOEaRCFZOhOEaJ9OEaBJc+udOEaFNNOpapcOpaRCFZOhOpaJ9OpaBJc+udk:jpzRHucx5/p2RHLFxA3e","tlshash":"0581aaa0042bd400eb971dca23cf7e3aae5f6115b480d57a5ffd08d8acdad62136971d","first_seen":"2026-02-03T08:54:56.107928Z","last_seen":"2026-02-03T09:31:28.897047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":22,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/dep/js/countUp.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /dep/js/countUp.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 15 Jan 2023 15:29:19 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 977\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2608,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2608), with no line terminators","md5":"daef170698227a8694e9d25a2fa39cfc","sha1":"71eef3d3fb7243d91f94a775b912a9b2fd1cc5e3","sha256":"ca62bf44cda4d83b2b59128d5deb59e5789de3f2c029feb88a6e1533b4eeef6c","sha512":"41b0cd34b8fc80f63b8cf478c166b2bdb3730a553c0631bfca6455e90fb08dd0333b18d51192d917e95a0576b5bbb901aa9733ffbcecbb1224815569e6b2e036","ssdeep":"","tlshash":"ad51dec6643218636fa733a3291b03053831997178496cbca9bc36c62f5740ba3ce7bc","first_seen":"2023-03-12T07:25:36Z","last_seen":"2026-07-05T21:09:27.997288Z","times_seen":39,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":106,"dns":3,"connect":22,"send":0,"wait":30,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/tether-usdt-logo.png?v=029","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"172.67.188.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 08:52:11 GMT","end":"Sun, 15 Mar 2026 09:50:48 GMT"},"fingerprint":{"sha1":"DC:49:52:20:76:53:C2:D9:F0:EF:C9:09:62:1A:FB:47:15:F4:D6:86","sha256":"47:87:EA:27:6A:15:76:C1:27:14:A9:C7:D1:21:97:B9:08:8F:B5:83:4F:38:27:43:1B:63:0A:C4:8D:75:02:9C"}}},"request":{"raw":"GET /logos/tether-usdt-logo.png?v=029 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 69679\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 08:54:27 GMT\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2195\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=znup0Dd6GHVFSmmgKRTmi2kKXtnHqdCaA5N1rmujcJ%2Brk1M0hAhT%2Fi4rXIz4x3og%2FreuAzUWFDQOC8iiJ%2Fp8mT7uxyEK7HqMaRV9zg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c80e9be5f05b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"a440d4b512f4d2b9b63d3ab8818fc9e3","sha1":"90dac8c11ffff8e0b345d11a55049c088eff2165","sha256":"2de63cb5ac9431e6febcd4dfd7527d98654452bddd468fe45b93e22cef67ae15","sha512":"90debb4d79ff0b1136fabe5809b8e6b88259a5668240f25ebdcb6b5e844a9b84415a7b37cf87fccdd68e1cd4a686a2ba8265d603cfa513a83cb87f7b41adff0c","ssdeep":"1536:3XWmI8g4DLn+3MeMpH3NGLxHDzRcS7qN0iN1EkVU0nr8rTO:y4DLGMzpdGdHDzSOO0iN1uNC","tlshash":"5f63bea34a3ad985caa1847cb9bb1fc07668a135e5099dcf537ef71cf2421e36d920d0","first_seen":"2023-05-02T11:54:15Z","last_seen":"2026-08-17T14:07:06.713276Z","times_seen":488,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":290,"dns":0,"connect":1,"send":0,"wait":12,"receive":2,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Barlow:wght@400;500;600;700;800;900\u0026family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Barlow:wght@400;500;600;700;800;900\u0026family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 03 Feb 2026 09:31:02 GMT\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40896,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"abafd3bc07971cabeb346ebca4ebee96","sha1":"10e7f76de9d0245b1bbe1911a208e5ad158ebfc8","sha256":"ca32dd7b7eeae494b9dfe4090f5f5b75153f8a0005d94b59b0e504ad1565ceeb","sha512":"894b1a6c96537e334b78da744f855fd5e0d5c68f530be04c328918db9d95d3df93be9a569844c0b6217589a395dd23e299d2d37aa854c274907b7a2ddad4731b","ssdeep":"768:SgDSDjDGDUDB4DiLDZD1D5CJmwBUiRDfMTcfFBhiEymDcTYeBai75tdmtC0BQiVA:Y0rAwyl","tlshash":"a3030ca1041b50009b834ce223cebf35fe1e52117041d1b9abfdababaddbc66536935d","first_seen":"2025-11-26T08:07:13.725382Z","last_seen":"2026-02-03T09:31:28.898083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c80e9bc3d5a7129-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 46334\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 03 Feb 2027 09:31:02 GMT\r\nlast-modified: Tue, 08 Jul 2025 08:14:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\nfly-request-id: 01JZMHK6A5YDBGTRS8NHGNQCS4-ord\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-18T04:39:27.09876Z","times_seen":24293,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":23,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"762cb7fc6f7fced67ee0beabdbcd17b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c39abe0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"762cb7fc6f7fced67ee0beabdbcd17b5","sha1":"00483ac598b97e67ba842c87cc07b09bd3cba007","sha256":"d73c0d55b46336922570f423448362916fdbfbc01e9e42025921d7a69b7f09a2","sha512":"52af997c98707c5822853f078ba3d1ed9fdd5a40f7ee6a00e6ed37b80a9518d9f317583c2f21dd8a32ad06aa0ad509ab1f221820c7b12e43dffbac1914437297","ssdeep":"","tlshash":"b04183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78c89815afb6","first_seen":"2026-02-02T04:19:47.879732Z","last_seen":"2026-02-11T07:20:02.674033Z","times_seen":4945,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"c318ee25d84857215976001a18a88020\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105306\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c79c651a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"c318ee25d84857215976001a18a88020","sha1":"e1c29761fe848fd3bb506866b96cb1d97ccd2fdd","sha256":"77fd59826f3181dfdfe80bcf20f364d39735ce4f12971ff1f2840add3d5c2f1e","sha512":"407f37712ab4bb1df5259659da697dd7913f1922d3e9f36477e6c39b6a3131fb636fa848e468195f05f9b645030336498cac6ed9d808b13e0370cf659917769f","ssdeep":"192:0H9MawRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:Kwb9HkS316xAFKpLZEh","tlshash":"bf32a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-02-02T04:19:47.935703Z","last_seen":"2026-02-11T07:01:32.149671Z","times_seen":4644,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T09:31:01.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15; path=/\nrsite=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":37682,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (974), with CRLF, LF line terminators","md5":"5127ee17fef06d97417548efaf8bdbd7","sha1":"8a894ef3923c15edb8adeccb9a781207946dcd37","sha256":"a7459e7a0a50384753648690c9be5b1cc9a7dfa9203a148b3b04f439d568fc1d","sha512":"f4bd4c13c6b83ed151ab9b1dfb8775b8a96a41bffa6af22a41d67ccf3014b89dcfc6b72d4e09a79dde83a461dada744c9f721755cd1d7df4e66f6dd6f241cc2b","ssdeep":"384:9g0n8vFZ+ugW3/Ipe2vB5EvUNDlFHPNfs9qKfvFP7xdzWmi:GZfD3/Ipe05EvCD3HFfs9P9zzti","tlshash":"f7f2633968e1516301a392d56bb61b1bff9ad50bca1b8a4177fc07874fe2dc9cca3508","first_seen":"2026-02-03T08:54:56.15632Z","last_seen":"2026-02-03T09:31:28.900364Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":55,"dns":2,"connect":23,"send":0,"wait":150,"receive":22,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/fr.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/fr.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 637\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"930f08c6829077e96cf25d58f26bd6d3","sha1":"0dfa244548435053bbebd2ed5914e2785f0f3dc3","sha256":"594f333e3a8fe65a0466e4f9c140dab97e6b6a073579edf130a87b86614d7ec8","sha512":"34b8e8c8f95a135cccd845a2513c69d0fc3489a2df5b347dae0b5c65f6b1d218c1c976332d97f69d40f38159ab7b51c8d8cfb40d32bd45f24162320727d2a6d9","ssdeep":"","tlshash":"92f0839a22c1602d852411d530320900f4bb0f1002d13ef694be84b3281e7cbb19179d","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-08-17T20:41:05.308806Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":682,"dns":8,"connect":28,"send":0,"wait":24,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/3yUYx1nwMP5p.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/3yUYx1nwMP5p.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: rsite=https%3A%2F%2Fusdtshka.icu.hexora.st8.ru%2F; expires=Tue, 17-Feb-2026 09:31:02 GMT; Max-Age=1209600; path=/\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":13522,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (974), with CRLF line terminators","md5":"8c5223bbea2fcbca3d6482ae6b7c65a8","sha1":"1baa89671cbaee0e3416369b86fec919997ba493","sha256":"450eec9fdde9830494801801e63fcf7b24840aa480210e41775f6cbde58cfaa6","sha512":"cb0f086eb0440591da6f964f95e71074e2f7d22c374330cb97d1a3514a7ac40fc15934933a0180892e24fc308c231c83d6dda432d516bdb88619ff2a08238d75","ssdeep":"192:BpFg0n8vF72OLpwN4tOAXI36O473XPZeKfzjfxBVUGPEdP+TBxdRBWmi:9g0n8vFZ+ugW3/gKfvFP7xdzWmi","tlshash":"8852b81f7d82986b023246a5d77b635cfa65810bcb178c18b3ec115b6fb0bd84d67e48","first_seen":"2026-02-03T08:54:56.147187Z","last_seen":"2026-02-03T09:31:28.901754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":96,"dns":5,"connect":24,"send":0,"wait":145,"receive":20,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:19:22 GMT\r\nexpires: Sat, 30 Jan 2027 13:19:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 331901\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-18T04:51:54.327558Z","times_seen":80071,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/GhXQsn84gU44.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/GhXQsn84gU44.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:22:47 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 22411\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":78694,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"cbcf92d20affc9bf044ead4928934775","sha1":"1077834850bbae85f6550eed289c81e5733b4484","sha256":"4c0bc3b9d95e2f86d59f974837f49ad6d18a4a2101cced22442ed08970bfc6ef","sha512":"de1e4654d597bee05cc1b0c7839f5ea819069a4a3bba79edf9776816d4e6dcaa90e21b14e0ed0aa3d5a7e64fa39f712ed66d80af1472a331bb09bf80f159beb9","ssdeep":"1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCf:MFRIpk0vSA0","tlshash":"2f73d7493254b87309ee55b68037460bf3255994b14b802cb9bdadde2b3dc8272b7f78","first_seen":"2023-03-07T01:24:09Z","last_seen":"2026-08-16T19:21:48.210067Z","times_seen":892,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":226,"dns":0,"connect":23,"send":0,"wait":35,"receive":18,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/lang/ms.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/lang/ms.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 29 Jun 2022 04:29:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1387\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"78480973f903d9f97824d31b8acf9484","sha1":"32d35416f2b683be456a12a65761db9e38006984","sha256":"14349cba3e4a9cb4a1f37de42167b654cc34eb2a616870eb44f28c3a0e3bbc91","sha512":"fe846b579b258c95cc1981843b4e8ae0ce419788c20b34b8f5eda2885f12f84aa6a3eb71c628a102361270a2bb6585405c367465d109ca9c44e94240d83ff086","ssdeep":"","tlshash":"2121d8ec606b2bbe812447a3856b0b211b5362b657ff6546046d7c7a2424de433f03c5","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-08-03T00:02:07.176581Z","times_seen":18,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":741,"dns":1,"connect":29,"send":0,"wait":24,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJMMIlzdpvBhQQL_SC3X9yhF25-T1nysimBoWgz.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/orbitron/v35/yMJMMIlzdpvBhQQL_SC3X9yhF25-T1nysimBoWgz.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 6400\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:21:48 GMT\r\nexpires: Sat, 30 Jan 2027 13:21:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 331755\r\nlast-modified: Thu, 04 Sep 2025 17:04:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6400, version 1.0","md5":"803e9313ecefd6fd1fddb4051948d28e","sha1":"f80aff9e80e7d448b2e783cd1676f44920ac1d9d","sha256":"ce87e6a1b1955bbc7b1d2d1c30fb5b53af5e34edb5b93a33e28068054892ef74","sha512":"a24c46667630368d2146e2bdff9690b98a43991d57685c40ce6dd5652b38c33aec342590e65f8ebfcccd662f9a72b998081bc9a5a7be686739a264015343b56c","ssdeep":"96:q7EE2LXvU92kqAMQZtCaZnkdfObxRlLQV0mi7lZ6OURU0d44m4gDmeS+F:qQtLc920XnkoNRlw0m8lZIJ44mZpv","tlshash":"a3d18faec97613afc602b8f70dfd00de91cc930616aae70cb1398959f6e15650750d61","first_seen":"2025-06-26T22:06:00.047299Z","last_seen":"2026-08-16T20:51:39.608904Z","times_seen":94,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":164,"dns":3,"connect":7,"send":0,"wait":12,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/css/qbB5h1pwlO44.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/css/qbB5h1pwlO44.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:17:17 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1566\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-08-18T05:59:22.723972Z","times_seen":5227,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":86,"dns":0,"connect":23,"send":0,"wait":24,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9c80e9c39ab00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-18T04:05:08.45819Z","times_seen":93713,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\nage: 2959369\r\nx-served-by: cache-fra-etou8220062-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-08-18T04:35:05.183394Z","times_seen":25460,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":40,"connect":30,"send":0,"wait":23,"receive":5,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/images/1052.png","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/images/1052.png HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:03 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 21 Dec 2025 07:06:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3515\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:03 GMT\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"38782daefee6240f0b76b567628924a7","sha1":"d5e4162a84b354184fe437a03a5093f361771e0c","sha256":"a0e54ded994027127a01a1e1328feced66f4696a6776ab375d02aec4e292bd52","sha512":"56777056e9adf0234093d51339c5ef009aa7205254f17be6f7c6cc09c0e2fe20df0623c24e5f575b3f060975cd7a2791ebccdc508bf12e291560410a173d4f79","ssdeep":"","tlshash":"9d715c7c95918dd6da0d88192d288fe4b3dd4aa9328ed5e3008457cde443af7352ef17","first_seen":"2026-02-03T08:54:56.102204Z","last_seen":"2026-02-03T09:31:28.886752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":492,"dns":0,"connect":32,"send":0,"wait":29,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/js/qvKOCxXpDair.js","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/js/qvKOCxXpDair.js HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 14 May 2023 11:25:52 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 817\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2532), with no line terminators","md5":"e2d41e5c8fed838d9014fea53d45ce75","sha1":"bde98133f735398b27339c423a817e755329f7d1","sha256":"1f7723b6b9bfced0deba108df48e3287888dd986f1ff2d5133bacc9807ac0349","sha512":"d106cbd2987c4dcf20e5b2e17d5cd2ab17bd18444e46c2a1227d48ae9c4302052c6c11b3fd5ee249abf6cf35b7db95c677538c2dd2f8522a91263ef4d887aa9d","ssdeep":"","tlshash":"8351aae9b5ceb358535272b4282b314bf2ae9cf401cc5817f96619827c7830c867ba6d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-18T05:14:46.081409Z","times_seen":10355,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":281,"dns":12,"connect":24,"send":0,"wait":28,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:03 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"586d518585b166811a617b7f5060f71e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2194\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c47b920883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"586d518585b166811a617b7f5060f71e","sha1":"6ea81179776e5977ac49304b176923e61409393e","sha256":"2cc3a63ae0b79ab96b21a927c9f9a192ff287e877df5e54ee0b0dbe33debb900","sha512":"df7a3a88b5effe5f52c27897e20995a32973ae1b34aa260e42286833c68838afd61fcd0d4cc057ed5d8c941280e2e5167cdf394add607763363bdc96f4a099ac","ssdeep":"192:ImwHJ/LrnzPLEgVE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:sxLrnzXE1iN+xkDOy+Hp8/5Avy","tlshash":"18224369ce504ea702c29646399f35437624829b1f54382eb78891ac0f8ed6f71f77ce","first_seen":"2025-07-18T03:22:00.530906Z","last_seen":"2026-06-13T18:18:43.529078Z","times_seen":30250,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69802381f63/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:04.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69802381f63/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Feb 2026 04:10:44 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 105395\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9c80e9c79c661a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-18T04:05:08.38964Z","times_seen":42691,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:05.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Feb 2026 09:31:05 GMT\r\ncontent-type: font/woff\r\ncontent-length: 93868\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2195\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9c80e9cf6cf00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-18T04:05:08.413941Z","times_seen":36166,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert@2.1.2/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /sweetalert@2.1.2/dist/sweetalert.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 09:31:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c80e9bd988576ef-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1568709\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 03 Feb 2027 09:31:02 GMT\r\nlast-modified: Wed, 02 Jul 2025 23:04:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:KsRuvuRtUVvobe66OFtOQfjP8WA2SzYsmm4VPfMnxms=:\r\nfly-request-id: 01JZ6P48MKWHZPM05MD8XBPBCE-ord\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40808), with no line terminators","md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-17T20:44:28.25122Z","times_seen":11811,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6975d353b2c8d0197e14227c\u0026widgetId=1jfq430hl\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:03.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6975d353b2c8d0197e14227c\u0026widgetId=1jfq430hl\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nOrigin: https://usdtshka.icu.hexora.st8.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-dsxr\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-3-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 03 Feb 2026 09:31:04 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9c80e9c46b8e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f1c31f21122dd4fb134104fcc82ee65a","sha1":"1d715adf4041d1b8b9d2fd7365fbe4ebf4e5dce4","sha256":"24cd1804e027c0fabbf4d329c4ec345118a39606fc9cdf284c1697b1e40f7074","sha512":"6b463e965cf0d6da5943f34483c06ae942988bb4a10fd72f11e46bc7f73ff822d313fc51f1c1995ecdd3770c7336303ceedbb637d5a4e02c2b60e71c89aa9517","ssdeep":"","tlshash":"00717430490eac79938cd25be0da3e23796d847be784161d91a86d3da3fb59c121170b","first_seen":"2026-02-03T08:54:56.096701Z","last_seen":"2026-02-03T09:31:28.908132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtshka.icu.hexora.st8.ru/load/icons/fontawesome/all.min.css","fqdn":"usdtshka.icu.hexora.st8.ru","domain":"st8.ru","tld":"ru"},"ip":{"addr":"212.32.225.148","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtshka.icu.hexora.st8.ru/","date":"2026-02-03T09:31:02.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.usdtshka.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:50:35 GMT","end":"Sat, 25 Apr 2026 23:50:34 GMT"},"fingerprint":{"sha1":"23:70:4F:5B:10:C3:F2:C4:DF:3B:0B:95:10:98:E2:02:BD:59:C1:64","sha256":"F9:6B:2A:69:E5:ED:1B:28:3A:72:6C:AA:65:FA:04:B8:8A:98:76:48:47:39:9D:3C:A3:B8:76:20:B6:99:D1:9E"}}},"request":{"raw":"GET /load/icons/fontawesome/all.min.css HTTP/1.1\r\nHost: usdtshka.icu.hexora.st8.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtshka.icu.hexora.st8.ru/\r\nCookie: PHPSESSID=92481d2e5acb17a4029299ed99587a15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 03 Feb 2026 09:31:02 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 17 Oct 2022 16:52:01 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=1209600\r\nExpires: Tue, 17 Feb 2026 09:31:02 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":465747,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65360)","md5":"502a5f280ca86953b49763a7c1a52bd3","sha1":"70e0ec03d13dcccde1d0b87a1bc19c4e93932402","sha256":"9b86b6299d962d699cb1f3927528f4e6d7a2ad93abef1167a9c356566e33e2f6","sha512":"bc19c648550c7de801301937bc1d4e833a2c2eceecc3229520b9649b6df6497b274d30af8db4cc0c0db900bac5e8689aadd9896e6a3c2bce2be0748620b1d953","ssdeep":"3072:MlCBy5vzoH+oF/6iCdUMA+Wr6aJN0ugNcHE/9o4pZQT:ACBSzoHDF/amH6aJcNcHE/9oF","tlshash":"baa4c6a0a05510dcb3d7e60f5b02b629e4b7f33ed9814f4fe1d9484e0dd3a6871867aa","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-05-23T18:30:29.744653Z","times_seen":10,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":71,"dns":1,"connect":23,"send":0,"wait":34,"receive":50,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}