{"report_id":"d3a1d329-9b4f-4c05-9c2e-71129b2578ee","version":6,"status":"done","tags":[],"date":"2025-09-08T06:39:57Z","url":{"schema":"http","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":0,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"title":"Губка Боб - 4 сезон 6 серия смотреть онлайн"},"submit":{"url":{"schema":"http","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":0,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-13T06:39:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T06:39:37Z","timestamp":1757313577,"ip_dst":{"addr":"89.38.99.213","port":3480,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"ip_src":{"addr":"172.18.0.20","port":43754,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-09-08T06:39:37.181031+0000\",\"flow_id\":745883250049831,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":43754,\"dest_ip\":\"89.38.99.213\",\"dest_port\":3480,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-09-08T06:39:37.181031+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T06:39:37Z","timestamp":1757313577,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":43754,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-09-08T06:39:37.208458+0000\",\"flow_id\":1940790396399178,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":43754,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-09-08T06:39:37.208458+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2025-09-04T05:27:00.918962Z","alert_count":0,"request_count":9,"received_data":1055537,"sent_data":4341,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pixel.dsp.onetarget.ru","ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-04-18","domain_rank":456581,"first_seen":"2024-03-13T16:04:45Z","last_seen":"2025-09-03T21:38:21.756417Z","alert_count":0,"request_count":1,"received_data":730,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1026--000b2432-b684-4f18-b58e-b19e6fe169ca.stbid.ru","ip":{"addr":"188.120.241.47","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2023-02-28","domain_rank":0,"first_seen":"2025-09-08T06:40:01.677889Z","last_seen":"2025-09-08T06:40:01.677889Z","alert_count":0,"request_count":1,"received_data":216,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"95853efe-8c7e-11f0-86e0-002590c0647c.n2.sync.bumlam.com","ip":{"addr":"78.24.221.171","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2015-08-10","domain_rank":0,"first_seen":"2025-09-08T06:40:01.644196Z","last_seen":"2025-09-08T06:40:01.644196Z","alert_count":0,"request_count":1,"received_data":305,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cr-frontend.weborama-tech.ru","ip":{"addr":"178.154.231.214","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-09","domain_rank":183201,"first_seen":"2023-07-27T11:09:06Z","last_seen":"2025-09-03T18:42:23.459645Z","alert_count":0,"request_count":1,"received_data":440,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.techdsp.ru","ip":{"addr":"78.24.181.219","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-10-09","domain_rank":660524,"first_seen":"2024-11-01T12:08:52Z","last_seen":"2025-09-03T21:38:21.658265Z","alert_count":0,"request_count":2,"received_data":889,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.opendsp.ru","ip":{"addr":"185.175.47.157","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-08-24","domain_rank":261604,"first_seen":"2022-09-01T11:01:38Z","last_seen":"2025-09-02T21:49:31.019798Z","alert_count":0,"request_count":2,"received_data":500,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adspector.io","ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2025-09-03T10:02:28.882651Z","alert_count":0,"request_count":1,"received_data":847,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sync.gonet-ads.com","ip":{"addr":"188.42.104.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2022-04-05","domain_rank":164679,"first_seen":"2023-02-03T11:32:31Z","last_seen":"2025-09-03T21:38:21.561946Z","alert_count":0,"request_count":1,"received_data":345,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adnitro.pro","ip":{"addr":"92.63.111.219","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2021-10-14","domain_rank":425512,"first_seen":"2021-10-27T06:49:39Z","last_seen":"2025-08-28T16:40:40.566475Z","alert_count":0,"request_count":3,"received_data":12318,"sent_data":1318,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssp.al-adtech.com","ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-01-16","domain_rank":164448,"first_seen":"2024-01-30T10:38:38Z","last_seen":"2025-09-01T18:18:11.518805Z","alert_count":0,"request_count":1,"received_data":713,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.adspend.space","ip":{"addr":"104.26.15.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-11","domain_rank":345453,"first_seen":"2022-10-20T06:12:42Z","last_seen":"2025-09-03T10:07:02.587917Z","alert_count":0,"request_count":2,"received_data":1821,"sent_data":1046,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a.atraffic.ru","ip":{"addr":"104.21.7.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-23","domain_rank":462678,"first_seen":"2025-01-20T15:30:50Z","last_seen":"2025-09-01T18:18:10.167851Z","alert_count":0,"request_count":1,"received_data":913,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ssp-rtb.sape.ru","ip":{"addr":"193.3.184.214","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2006-06-19","domain_rank":153781,"first_seen":"2016-02-02T17:01:03Z","last_seen":"2025-09-01T18:18:11.625918Z","alert_count":0,"request_count":3,"received_data":1706,"sent_data":1767,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"2-68be7a27d41e060001c1d9d8.id.adx.com.ru","ip":{"addr":"83.222.105.230","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":0,"first_seen":"2025-09-08T06:40:01.642144Z","last_seen":"2025-09-08T06:40:01.642144Z","alert_count":0,"request_count":1,"received_data":434,"sent_data":764,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kimberlite.io","ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-16","domain_rank":17539,"first_seen":"2017-09-14T05:18:59Z","last_seen":"2025-09-07T11:38:43.103242Z","alert_count":0,"request_count":4,"received_data":2519,"sent_data":1938,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adlook.tech","ip":{"addr":"213.171.19.224","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-08-06","domain_rank":368057,"first_seen":"2025-01-09T16:00:53Z","last_seen":"2025-09-03T21:38:21.862157Z","alert_count":0,"request_count":1,"received_data":462,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"t3.zcvh.net","ip":{"addr":"148.251.21.144","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2019-02-05","domain_rank":1548040,"first_seen":"2020-04-13T13:06:01Z","last_seen":"2025-09-03T11:58:38.287026Z","alert_count":0,"request_count":1,"received_data":181,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.bestssp.com","ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2016-05-05","domain_rank":673248,"first_seen":"2017-06-10T08:55:20Z","last_seen":"2025-09-03T21:51:17.176539Z","alert_count":0,"request_count":1,"received_data":332,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dm-eu.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":74067,"first_seen":"2021-01-25T11:48:59Z","last_seen":"2025-09-01T18:18:10.244881Z","alert_count":0,"request_count":1,"received_data":404,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssp.bidvol.com","ip":{"addr":"194.85.16.25","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"domain_registered":"2019-09-24","domain_rank":199701,"first_seen":"2020-02-22T12:37:29Z","last_seen":"2025-09-02T14:30:36.836439Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api1647107188.delivembd.ws","ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"domain_registered":"2021-11-08","domain_rank":0,"first_seen":"2025-09-08T06:40:01.651404Z","last_seen":"2025-09-08T06:40:01.651404Z","alert_count":0,"request_count":1,"received_data":17222,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.lotus-dsp.ru","ip":{"addr":"213.171.19.214","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-12-05","domain_rank":395207,"first_seen":"2023-12-09T00:32:38Z","last_seen":"2025-09-01T18:18:10.770157Z","alert_count":0,"request_count":1,"received_data":565,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.kinogram.best","ip":{"addr":"185.191.124.203","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"Seychelles","country_code":"SC"},"domain_registered":"2020-03-27","domain_rank":393547,"first_seen":"2020-09-05T14:27:12Z","last_seen":"2025-08-31T21:50:22.163086Z","alert_count":0,"request_count":1,"received_data":17257,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dmp.otm-r.com","ip":{"addr":"194.55.244.184","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-01-16","domain_rank":124233,"first_seen":"2017-02-03T07:19:51Z","last_seen":"2025-09-01T18:18:12.088722Z","alert_count":0,"request_count":2,"received_data":1068,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn-rtb.sape.ru","ip":{"addr":"193.3.184.46","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2006-06-19","domain_rank":284640,"first_seen":"2014-10-06T19:55:24Z","last_seen":"2025-09-07T04:27:46.005192Z","alert_count":0,"request_count":1,"received_data":18727,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pxltag.com","ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-25","domain_rank":49711,"first_seen":"2025-06-01T19:45:52.576875Z","last_seen":"2025-09-03T21:38:21.659037Z","alert_count":0,"request_count":1,"received_data":358,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gubka-bob.top","ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"domain_registered":"2023-12-28","domain_rank":844539,"first_seen":"2025-09-08T06:40:01.706463Z","last_seen":"2025-09-08T06:40:01.706463Z","alert_count":0,"request_count":54,"received_data":2652481,"sent_data":28619,"comment":"","tags":null,"fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI:1.12.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.3.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DataLife Engine","description":"","website":"https://dle-news.ru","common_platform_enumeration":"cpe:2.3:a:dleviet:datalife_engine:*:*:*:*:*:*:*:*","icon":"DataLife Engine.svg","categories":["CMS"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"sync.upravel.com","ip":{"addr":"93.189.58.210","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-25","domain_rank":187521,"first_seen":"2017-05-29T09:13:46Z","last_seen":"2025-09-07T16:25:40.246688Z","alert_count":0,"request_count":5,"received_data":4206,"sent_data":2539,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pix.bumlam.com","ip":{"addr":"31.172.81.4","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":386640,"first_seen":"2022-03-29T09:19:43Z","last_seen":"2025-09-03T18:42:23.535702Z","alert_count":0,"request_count":3,"received_data":2243,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cs.agency2.ru","ip":{"addr":"23.111.107.44","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"domain_registered":"2008-10-06","domain_rank":520394,"first_seen":"2022-04-29T14:24:02Z","last_seen":"2025-09-03T21:38:22.171446Z","alert_count":0,"request_count":1,"received_data":766,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.adiam.tech","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-23","domain_rank":297000,"first_seen":"2024-03-15T20:38:51Z","last_seen":"2025-09-01T18:18:10.892548Z","alert_count":0,"request_count":1,"received_data":915,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"5--2--68be7a27d41e060001c1d9d8.stbid.ru","ip":{"addr":"62.109.24.241","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2023-02-28","domain_rank":0,"first_seen":"2025-09-08T06:40:01.687657Z","last_seen":"2025-09-08T06:40:01.687657Z","alert_count":0,"request_count":1,"received_data":360,"sent_data":677,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.stiven-king.com","ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"domain_registered":"2019-09-28","domain_rank":587715,"first_seen":"2020-06-14T12:52:00Z","last_seen":"2025-09-03T07:32:55.365158Z","alert_count":0,"request_count":1,"received_data":1201,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.utraff.com","ip":{"addr":"172.67.145.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-27","domain_rank":179342,"first_seen":"2019-02-27T10:01:37Z","last_seen":"2025-09-03T18:42:23.567291Z","alert_count":0,"request_count":1,"received_data":1011,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stats.myangular.life","ip":{"addr":"162.55.243.89","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-09-14","domain_rank":580824,"first_seen":"2020-10-07T08:18:10Z","last_seen":"2025-09-07T18:41:47.866952Z","alert_count":0,"request_count":1,"received_data":181,"sent_data":566,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","ip":{"addr":"52.31.147.121","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2015-10-09","domain_rank":503952,"first_seen":"2024-09-06T07:52:31Z","last_seen":"2025-09-01T18:18:11.103323Z","alert_count":0,"request_count":1,"received_data":588,"sent_data":782,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.bringads.ru","ip":{"addr":"213.171.19.229","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2025-02-06","domain_rank":412835,"first_seen":"2025-05-20T10:33:46.598539Z","last_seen":"2025-09-04T08:56:43.642253Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"exchange.buzzoola.com","ip":{"addr":"45.138.161.68","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2010-08-11","domain_rank":80108,"first_seen":"2014-10-17T15:20:27Z","last_seen":"2025-09-08T03:17:11.37288Z","alert_count":0,"request_count":2,"received_data":778,"sent_data":1197,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"acint.net","ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":7617,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2025-09-01T18:18:11.333191Z","alert_count":0,"request_count":6,"received_data":33622,"sent_data":10281,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mediatoday.ru","ip":{"addr":"194.186.91.200","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2008-03-02","domain_rank":40250,"first_seen":"2013-05-20T20:53:32Z","last_seen":"2025-09-07T22:19:36.945767Z","alert_count":0,"request_count":1,"received_data":870,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kodir2.github.io","ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":792705,"first_seen":"2021-10-12T10:39:10Z","last_seen":"2025-09-07T01:46:14.225624Z","alert_count":0,"request_count":1,"received_data":4281,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"api.delivembd.ws","ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"domain_registered":"2021-11-08","domain_rank":0,"first_seen":"2022-01-26T16:24:28Z","last_seen":"2025-08-24T19:34:55.209921Z","alert_count":0,"request_count":3,"received_data":34080,"sent_data":1520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dm.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":93939,"first_seen":"2018-08-22T12:51:55Z","last_seen":"2025-09-02T21:49:30.37237Z","alert_count":0,"request_count":1,"received_data":344,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"test.showvid.ws","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-04-06","domain_rank":634042,"first_seen":"2025-03-01T23:00:14.608841Z","last_seen":"2025-09-07T18:41:47.129312Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hye1eaipby4w.xh8007l.ws","ip":{"addr":"141.95.45.147","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2024-09-04","domain_rank":637476,"first_seen":"2025-06-14T10:34:14.470827Z","last_seen":"2025-09-03T07:32:55.197178Z","alert_count":0,"request_count":2,"received_data":352315,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.new-programmatic.com","ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":172258,"first_seen":"2020-02-18T20:50:06Z","last_seen":"2025-09-03T18:42:23.629095Z","alert_count":0,"request_count":1,"received_data":215,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dsp.solta.io","ip":{"addr":"217.199.220.72","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-19","domain_rank":369782,"first_seen":"2022-09-21T16:47:56Z","last_seen":"2025-09-03T04:49:13.942421Z","alert_count":0,"request_count":1,"received_data":250,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtb.dynotech.io","ip":{"addr":"77.223.121.51","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-04-24","domain_rank":372920,"first_seen":"2024-06-21T10:32:20Z","last_seen":"2025-09-03T21:38:22.266457Z","alert_count":0,"request_count":1,"received_data":201,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.linkssp.ru","ip":{"addr":"188.246.224.210","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-18","domain_rank":431263,"first_seen":"2025-05-28T20:33:39.660871Z","last_seen":"2025-09-01T18:18:11.687419Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"videoroll.net","ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2015-03-31","domain_rank":150386,"first_seen":"2015-11-17T06:44:09Z","last_seen":"2025-09-01T06:56:15.2972Z","alert_count":0,"request_count":2,"received_data":65208,"sent_data":881,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-statistics.dsp.nt.technology","ip":{"addr":"52.213.164.16","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2019-02-02","domain_rank":50490,"first_seen":"2025-01-30T05:42:21.300558Z","last_seen":"2025-09-03T21:51:16.546866Z","alert_count":0,"request_count":1,"received_data":588,"sent_data":792,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mc.acint.net","ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":245226,"first_seen":"2024-01-29T15:31:01Z","last_seen":"2025-09-06T15:06:20.826805Z","alert_count":0,"request_count":15,"received_data":6068,"sent_data":29164,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cmr.bidderstack.com","ip":{"addr":"185.149.242.234","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2017-04-25","domain_rank":274973,"first_seen":"2024-06-26T06:54:13Z","last_seen":"2025-09-01T18:43:05.121562Z","alert_count":0,"request_count":2,"received_data":542,"sent_data":897,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"adx.com.ru","ip":{"addr":"83.222.105.114","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":4001,"first_seen":"2017-06-05T16:30:42Z","last_seen":"2025-09-03T18:42:23.751458Z","alert_count":0,"request_count":2,"received_data":928,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"otclick-adv.ru","ip":{"addr":"139.45.228.145","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"domain_registered":"2011-01-17","domain_rank":27130,"first_seen":"2015-09-17T11:20:30Z","last_seen":"2025-09-01T18:18:11.132471Z","alert_count":0,"request_count":1,"received_data":700,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2025-09-03T16:25:51.309214Z","alert_count":0,"request_count":2,"received_data":35179,"sent_data":885,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ck.silvermob.com","ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-25","domain_rank":416424,"first_seen":"2025-03-13T10:51:02.742077Z","last_seen":"2025-09-03T21:38:22.751937Z","alert_count":0,"request_count":1,"received_data":636,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"a.videohead.tech","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-30","domain_rank":516081,"first_seen":"2023-06-07T20:20:13Z","last_seen":"2025-09-02T21:49:31.066957Z","alert_count":0,"request_count":1,"received_data":919,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"match.qtarget.tech","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-12-26","domain_rank":701462,"first_seen":"2023-01-28T17:26:52Z","last_seen":"2025-09-07T22:19:37.104735Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sp.kombinat.digital","ip":{"addr":"77.223.103.139","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-04-16","domain_rank":596572,"first_seen":"2025-07-09T21:59:17.553875Z","last_seen":"2025-09-05T05:39:25.560471Z","alert_count":0,"request_count":1,"received_data":493,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dvgroup.com","ip":{"addr":"82.148.21.217","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-12","domain_rank":429256,"first_seen":"2024-09-03T12:22:07Z","last_seen":"2025-09-03T21:38:21.732324Z","alert_count":0,"request_count":1,"received_data":250,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-09-03T15:45:09.010629Z","alert_count":0,"request_count":1,"received_data":98149,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.acint.net","ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":175167,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2025-09-01T18:18:10.618164Z","alert_count":0,"request_count":10,"received_data":51799,"sent_data":14018,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.myangular.life","ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-09-14","domain_rank":419104,"first_seen":"2023-03-21T17:21:49Z","last_seen":"2025-09-06T01:29:11.923219Z","alert_count":0,"request_count":15,"received_data":2799,"sent_data":7225,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yandex.ru","ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2025-09-04T08:38:32.196536Z","alert_count":0,"request_count":2,"received_data":601409,"sent_data":841,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-03T15:27:27.695589Z","alert_count":0,"request_count":4,"received_data":1269873,"sent_data":1902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.bumlam.com","ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":29016,"first_seen":"2015-08-10T21:04:25Z","last_seen":"2025-09-01T13:47:28.443759Z","alert_count":0,"request_count":3,"received_data":1959,"sent_data":1563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tube.buzzoola.com","ip":{"addr":"151.236.127.225","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2010-08-11","domain_rank":205387,"first_seen":"2013-05-29T20:05:56Z","last_seen":"2025-09-02T21:49:30.170884Z","alert_count":0,"request_count":1,"received_data":13779,"sent_data":393,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.ohmy.bid","ip":{"addr":"37.0.127.199","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-06-09","domain_rank":283479,"first_seen":"2023-05-23T09:17:10Z","last_seen":"2025-09-01T18:18:11.481875Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-03T15:20:50.935949Z","alert_count":0,"request_count":1,"received_data":254693,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"id.adx.bid","ip":{"addr":"104.26.1.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-17","domain_rank":667222,"first_seen":"2025-05-16T21:23:24.922522Z","last_seen":"2025-09-05T05:39:25.550742Z","alert_count":0,"request_count":1,"received_data":990,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"statmedia.ru","ip":{"addr":"46.161.36.23","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-25","domain_rank":27502,"first_seen":"2015-08-17T13:20:07Z","last_seen":"2025-09-01T18:18:10.822781Z","alert_count":0,"request_count":1,"received_data":265,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bid.sspnet.tech","ip":{"addr":"5.35.15.155","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-10-17","domain_rank":512084,"first_seen":"2025-08-19T17:30:43.164294Z","last_seen":"2025-09-03T04:49:14.233601Z","alert_count":0,"request_count":1,"received_data":305,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T06:39:37Z","timestamp":1757313577,"ip_dst":{"addr":"89.38.99.213","port":3480,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"ip_src":{"addr":"172.18.0.20","port":43754,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-09-08T06:39:37.181031+0000\",\"flow_id\":745883250049831,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":43754,\"dest_ip\":\"89.38.99.213\",\"dest_port\":3480,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-09-08T06:39:37.181031+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-08T06:39:37Z","timestamp":1757313577,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":43754,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-09-08T06:39:37.208458+0000\",\"flow_id\":1940790396399178,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":43754,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-09-08T06:39:37.208458+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.delivembd.ws/js/listen-player.js","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6887db2427e1d808d93574f28e79ecd","sha1":"cc4b86a6c9f4321ff2e37a1a22754c99bfd946be","sha256":"ddd6b7873cdb5e272393254bb9afc90a18058bd6bd3b474f80bc8a4655bd8bc0","sha512":"956d5e0223a69418dd51a7e4ac9b5bb0b263988cf51447f6f3ba33405c058c3f966d05399f5d81428bb09b011d27cba82da2b6afe950f14a2f70bccdce469898","ssdeep":"","tlshash":"2c413109fb88dc2141b772f34f17a26e7430514485874f59fc8aaaf96a9d2bb0e65d0c","size":2173,"data":"","first_seen":"2024-11-12T13:00:30.036653Z","last_seen":"2026-04-04T14:02:45.795941Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/player.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b5cac8db1cbc5a3d8c50d86d3abe19a","sha1":"f8812f073f7dd7409a414b9af0f2a4c53a50d396","sha256":"866962a8f99f293c19bea8956ca02c6bf9adc43db31b0effdf1964bfd73f657d","sha512":"18cddea74b04437bb050f8e867134c55f5622d0cf9d2821cda9545f75b42a0de2df23b0eec6719aec8ccf33da335f0a32e83f37d1fcfc9f44988166ddb2cba8e","ssdeep":"12288:tcYViuwJL/TPfX818p898beIeZWeWRhv/Hf2C6/nEYIs:tcqWLjX818p898beIeZWeWRhv///6/ks","tlshash":"5df419ddb2d2f0624393b078407f510bb33a6915984c8158f236e9d5ae79a8e6237f3d","size":725850,"data":"","first_seen":"2025-07-30T14:51:17.880266Z","last_seen":"2025-10-09T21:00:59.602176Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/dash.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84eee3ca3b339eebee1fa872f1ece64a","sha1":"ac28843b7fcdc5023f65c747e51f009562b1c478","sha256":"94a1443f69cfc9942e6a9d2ed2fc644702e271683b2e703f9adf65113a430ed5","sha512":"950800fb3fcc5b88bb7db70b7b530fbbaf4d8af61ca8ea1f9e25d203337ea76199bae40845b67284e711ab65200c9bed17a65f50769bfda6d066cc1cdc89ffac","ssdeep":"","tlshash":"9eb0921bb1c53b2834af3a902ceb2d25682690a16c2640c1f72895d4642e61c1a43dc8","size":113,"data":"","first_seen":"2023-03-07T01:18:03Z","last_seen":"2026-03-28T12:09:07.077207Z","times_seen":700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/modernizr.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"198237e30ba3e64cf519e1d8028b5339","sha1":"6934499560ef958a1ba710c73b0cb6d3ab89f731","sha256":"d83c8c684c71b22436e90b2de30f4346a6691d1a40e93a19285864ee5725108a","sha512":"1f57df8333fe6d0d1933f7dd7874d60b115b2edb0184e5c65be63a0bee033ca3a2a90c138610bcd23dca882ea15253cf0e202736228b1668f426627ed4a6d9a6","ssdeep":"192:GlkoK8Wn3+DtZq1OjaSJJJkSeIUHVbqLDDhWwpy8b7z:SkoK8W4tZq1OjakrwHV8Hh1pz","tlshash":"7f12d8c97642f216879760ba50bf460ff139d86ab8184c50e059d9f8bd709f8067bf2e","size":9827,"data":"","first_seen":"2023-03-11T14:34:01Z","last_seen":"2026-04-04T12:15:01.275375Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?_=1757313573458","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c2e757843ce4697d6af10931c6e0eb","sha1":"a898bd7b3cf807462b27129a8f6d25650eb67932","sha256":"3cc45c1e54f3c1cf9dc576ad37127f9659747f85bb2877f3fbc720b04b3b06bb","sha512":"db4757580115015955ecec81bc4f46a81aa99a68857c3449816c4948ec81f032973d20f97fa33d87d57b093e5a5c4602cf0f95ee9349753e68288b61c94c1fa1","ssdeep":"","tlshash":"12110b7b3d80e639865894e4a03fc31cb1a224997850cd9110cee889e61cacadd2d5ac","size":993,"data":"","first_seen":"2025-09-02T17:06:30.247455Z","last_seen":"2025-09-08T15:19:05.515309Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e6e9483b581a0aa1fb43df22c9bf319","sha1":"c6c376f822ac3fa3c6cd2d84bf3b74b715571d9e","sha256":"817e661e7be518919a631e26562dbab5033cd5692688a8835253a4cec7be03e4","sha512":"db61f75e4ea0df92d14264e711854544f36999763eced74204468a41001f02270543a0b1bedff8ba8402b0fd80007c97af9284c4e6f7691914efb3112bf4282f","ssdeep":"6144:eCn7oNCcuS4WDGj/6IxjVl4PzghzER8toio0bYzo:eCn7okcVI/l4PzgSWt3bYE","tlshash":"3394f9e97565b4f202e391e5843f160fe33b6929741d90a1b722d8d1ac29d5f2223f3e","size":448069,"data":"","first_seen":"2025-09-08T06:40:13.812599Z","last_seen":"2025-09-08T06:40:13.812599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/513c12ab02dbc080b84e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4fc5bd55a1f9c85ca23e5a991d7615a","sha1":"90da8bb3a51ace567bd644aec35a6a53fe5a1882","sha256":"373af56653ea42bfe13eb89f1fee384d3c34b06e33ac3514af5325946e6477f9","sha512":"863f2f5a5af0b682d258afab885c835c5a32552d05897a6640910ca587099d3dd8ff506c7e78ff802dc245bf116222b67c5e641ed83ca3dcfea3d726a50a73cf","ssdeep":"192:cweZ36c4CJPAUacdFxzyZnBJJV++ANkejiMG3NV3NVV7qrPESO2dWnPS8ezFLlb6:cw2KNCJPAryQZFVknierPzOl3t","tlshash":"f172f9fd7520b0201bdb3076517f191ff378292e744884a06606edfa29b491fa197fac","size":16655,"data":"","first_seen":"2025-09-05T07:26:16.629853Z","last_seen":"2025-09-08T06:40:13.848683Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/scripts.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6a61f7c7f477d7270c5ae6d8ed3e2f4","sha1":"922dbae05ec3133d3927ad81efd29d5dd5116adf","sha256":"d0de606d9f80e0f50f9fc82f1b70791fdd752c2a03ffb8884515a7250b5022b1","sha512":"6c66f9450166e0d4040a67a91d0de3abc9cc5badb8a903014cb2f026c0024e4439e32d1c0e43dee56b7df794ecf5a63011d6302cf5261d442a29e740002803c0","ssdeep":"768:wzWuc+tm6ZvZjj9YgOr8L/YVs1IPzExG/erZQQjTWZ7NcGhcARrk2W:wnlsds1IPzPeVjAr1W","tlshash":"37f2b709e200372588e711e5a10ac04e73fbf6b97e17c0f076d987da616d82d86e77e6","size":36458,"data":"","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.756115Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/slick.min.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-04T17:41:09.753648Z","times_seen":77333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api1647107188.delivembd.ws/embed/movie/634?season=4\u0026episode=6","fqdn":"api1647107188.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"eventHandler","is_inline":false,"md5":"f527542f54348fe15e3fa560476af012","sha1":"776e7dcad0e2e2614926750e9de94539cce12845","sha256":"dc70b1e8b1ac7676ee6055b4528e133d4165e1540988c236fccb7be0ab8ed72d","sha512":"84eda7c11770d3a6949776aeccfb5c84149f09cc214787a198acf9ee7552365ea4695b877ed5be1c8a0946835bb7f9f07144460422f37130a7336ce1161431a4","ssdeep":"","tlshash":"e37000a028888808ac0800020338802808e8020a3280e20882280a0882002aa8020880","size":22,"data":"","first_seen":"2024-05-16T03:29:54Z","last_seen":"2026-04-04T14:02:45.833423Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"eventHandler","is_inline":false,"md5":"736ccf60e52f45844046d9577b4e4d55","sha1":"4e06aa6094ab1abc109df55f97eed66b0ea6be12","sha256":"ae19acd2924aac3fa4e7e0ec52b3c90c364999471059b9c6b3247a58fcd161f4","sha512":"c74cf91de2d370ef103ad6e377fe6165c78bb9d80afb02bc9665db576f21c995642d500fb6e76a738c520789085a13404246d0563d5104ccbe60802eb75330aa","ssdeep":"","tlshash":"bf70002028e0880cac0800a20228802028f80a02b828ca0ae2282a0c820c2820830800","size":25,"data":"","first_seen":"2024-05-16T03:29:55Z","last_seen":"2026-04-04T14:02:45.83035Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"618c62b040170e3a71fabb91223bfe9b","sha1":"b81827606ce1f91c981e4b677051276afcf38a9e","sha256":"d95b10c59ae46ac9c011c3583a86fcb6a31dd5327be847c77aa0056ca64a93a0","sha512":"871ea29e0ab1a283ea3e2c3cbbfddd0aca84333fe44c6f94c9958fe502d03a46418e645a9eee0edc5f04ca93effc14defe153ab795a1b18fe8623149b08dec2c","ssdeep":"","tlshash":"4db092baaa047475402e1936373a1191d1214020a882980d0b1668733cf676ba9c6596","size":119,"data":"","first_seen":"2024-06-18T08:07:50Z","last_seen":"2026-04-04T14:02:45.832874Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/09ce5379a789fb3107e3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"baddef51b890816fad4a51d6b784bae9","sha1":"82e3291abd88862509869fd08852e8e0224b0011","sha256":"5bc210794ae27085d0ae34aeb131c6f5ac90ea22378f6461261b13eebcf8f919","sha512":"7b68f7b29260afec0dfe2c50f17889c9b400c5a2bb4e66e28d4ed2d9ea2513a20a05e5a6f52df5447e9577b159d9cce7d3484e8cde3803ea63b970fe859296f9","ssdeep":"384:jwGM8OfyTXllN2MlpW57/c+2DoeEL+PYwI:cXjfyTXllhOLc+bwI","tlshash":"0f62e7a87494b4a513db20bb413f150ff3ba6879644d80a0f222d8e97efc89d4167f6c","size":15152,"data":"","first_seen":"2025-09-05T07:26:16.715968Z","last_seen":"2025-09-08T06:40:13.73979Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adnitro.pro/js/adnitro_static_banner.js","fqdn":"adnitro.pro","domain":"adnitro.pro","tld":"pro"},"ip":{"addr":"92.63.111.219","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ad28350d2ed167e56d80a85a5762ef","sha1":"3991ecb74154be2c7f9a6bc5e117f1b5291a4e86","sha256":"7b060cc2afcf6c732988bd4f4550960f2b6fdf233b7b0d26feafe531ce72aaa5","sha512":"e04acca72119ae4e4fee1418b1410a327d67eaf826a232121a74a1795a24079d7d1b736278c9aacf2dc228605e8a1aeac9c6706ea4bea66c64a5aab876a017bd","ssdeep":"96:K275rqlrMvQF5stAo4GiKV2756kvGzvi7UOMLaHG+MzDSo0fghd4XH:K275srMvQFKAo4oYUOqTh6","tlshash":"37f1c00a1d14993bc4b337b54bab9d08fe37113b50508411bf6d89d0afb296ac276fe9","size":7915,"data":"","first_seen":"2025-09-08T06:40:13.834102Z","last_seen":"2025-09-28T09:32:35.435898Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://4619c593-5640-4563-9e8f-573018096c29/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-04T17:37:44.984636Z","times_seen":152179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/masha/masha.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"bace6a73a06526c54ff13e5cd5444ebc","sha1":"74118370c5fa437859cc98f93eba80c9383ef4d6","sha256":"7f6b7a582b06ccb53ef0932c7a5a024158e40de06dc1b7915c26880ec16d7293","sha512":"31ecfb75a25177ecac9ad58f703664c7a60768073a92b1bd2190ee7ebdfcdb806429e61d07398f34ff92b8984cdc0e597120e73c74bb9a88710a7b9b31a2aa00","ssdeep":"384:67zkp9O6Xf5uMKVnDogOqFEpA4sztDMrJlv1jx4/FfBjEtypafvUjAX1pgdZ6akd:YzkpZKDbOq2l4Rsr1e/st1UjrNkPfnci","tlshash":"7bb2c9987181363fe1ab225c64ff27086132185ae8485a78f97cccd2bd64a5a007ff7d","size":25185,"data":"","first_seen":"2023-03-07T01:18:03Z","last_seen":"2026-04-03T12:10:42.758911Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/jqueryui.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"76e44239f637f06b0b44796305344af0","sha1":"0880527943a8d76334b189e84037c405a12857f6","sha256":"2f0253a9ee6c26c1c960191a7f349ced5600d94d5fe6e7bfc3dcc9125a963e99","sha512":"7d7bb7ada0e07896de583244517409fcb3790ead3dc1e9f29d8477f9e020386b7fce3da664864dce16747bcea6bc1fb4afa86fb903999f9b3d155faba83cf7e1","ssdeep":"1536:c05yNdkV1zLQlPe2Yw3kub7wwxFLn0IR0CoKdu33iiHiQJFiB8JYMyO:gNs6iyu3yiHiQJFNJbyO","tlshash":"6893198c7245352796ffe265603f660eb2376168a50a805cb03cc8ea5e7de142177fbe","size":96352,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-04-04T08:27:39.577681Z","times_seen":702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api1647107188.delivembd.ws/embed/movie/634?season=4\u0026episode=6","fqdn":"api1647107188.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"618c62b040170e3a71fabb91223bfe9b","sha1":"b81827606ce1f91c981e4b677051276afcf38a9e","sha256":"d95b10c59ae46ac9c011c3583a86fcb6a31dd5327be847c77aa0056ca64a93a0","sha512":"871ea29e0ab1a283ea3e2c3cbbfddd0aca84333fe44c6f94c9958fe502d03a46418e645a9eee0edc5f04ca93effc14defe153ab795a1b18fe8623149b08dec2c","ssdeep":"","tlshash":"4db092baaa047475402e1936373a1191d1214020a882980d0b1668733cf676ba9c6596","size":119,"data":"","first_seen":"2024-06-18T08:07:50Z","last_seen":"2026-04-04T14:02:45.832874Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1757313574345","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","size":32169,"data":"","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb79b31042ecea9864c779c07d8d8f17","sha1":"8f870ce272c630daa35f9b58817bf697361557f5","sha256":"b2e1d27471fb381d6e169ac274d164e41b7824a27785162a65d2f105312456d3","sha512":"6f23b4a0d66f5713e71970e8202ee37e1856d8eb9faedbeb33a11021a834b80708db306b3d78d3645daee52b42e801e332312e4b57cb0677ee48891772e069e4","ssdeep":"3072:QI3cJPyFbfydJY7g8nd242Qqs5apgu8/6UFnRmDze+/3y3GPAnvYf5aGX1rfeDpT:QG+ksMtcP5apTx","tlshash":"95e31a9d7a95f4b6439360e4843f2a0ef33f5529a41d44a0ba23d4e36c3596f9223f39","size":150032,"data":"","first_seen":"2025-09-08T06:40:13.709696Z","last_seen":"2025-09-08T06:40:13.709696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"475503f96037440e29963d9be8f65e1e","sha1":"9c07100b1911721aa404193e31a26b8b1e64d1a8","sha256":"9b7fca7bd47356bd538e5601b870fb1123ef92770852e74c09c1b875f642cd73","sha512":"cdded0adf812a1eac96a2c49b21900a308c5ee50dc439495c4e5f3a6c3a91121eaa09539ce153b232bbfaa7b2b4a119dc0ad133390dc44c0ad735c5ffc7d3534","ssdeep":"192:kDJeoiYwl+unnW3urjrwZibIXbDIyU/oE2zdpv09:kDJ3iWunxVIXbVE9","tlshash":"3ff1faffe72d9477035230aa693f52ed643c457a4c45cae3fc14a55c287805ec936ab4","size":8160,"data":"","first_seen":"2025-09-08T06:40:13.859095Z","last_seen":"2025-09-08T06:40:13.859095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/libs.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"742dbbf251ac1b9f12d25d69cdae684e","sha1":"ef2242ccc9a4dba98336de5b96bfe6a1daf75618","sha256":"41268e680ca73d5330f40f1d1df14b4267b3a71fae8a1063e0969e47c6059bd7","sha512":"97f8f0ebfb1d69dfa936aa3cd7cb6b5dcc12feb9d4df9d3c46b8fae04247877b2d990c4c9e4dd15fdc332a6a3fdbc67b33dd1306728ccfcedc49030af1fe5e31","ssdeep":"","tlshash":"5b511f2dff9e2aca01667463100f44cc73b8ff524a03cc19ad5c50e87da9555b6aaf1d","size":2984,"data":"","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.811291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"136eb7d284c1e0b00587b48578737aff","sha1":"b07cc1a79ecadb1196cb3237c06433e80d72941e","sha256":"f6b936dca75619f414beaf6059f3abd7b70b29f551fad98129db93dea4ef2d8b","sha512":"ec544444173c21d0382ec71295458f7e1d280ffd79a49acfdc316cc134ef97eccb0f5f43184ebd2aea8512cc1cfaa29a61965d731c955d3997082aab38774b80","ssdeep":"","tlshash":"d1f005953ced44248377012527fbd148743969292c0bfd15f54cc4412f9deac14bb94c","size":537,"data":"","first_seen":"2025-09-08T06:40:13.860612Z","last_seen":"2025-09-08T06:40:13.860612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api1647107188.delivembd.ws/embed/movie/634?season=4\u0026episode=6","fqdn":"api1647107188.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c50e90479fb7d9682a89407a59be634","sha1":"2183351d791c487b2673b3e7d135f7dc13006d7c","sha256":"3ae2d965a9e180c967ad0e23efed1134775ffe250e5c58f6467c89bf88feb5cc","sha512":"722c8790023719e87dbf395f510257bf45b75f4bc702882bfc59debe20bc6ba7cf7f1c93151ee3801a2d8d010b2cee1b4c0d9a2cb2073d8d4db9929818060493","ssdeep":"192:k6hLeoiYwl+unnW3urjrwZibIXbDIyU/oE2zdpv09:k6hL3iWunxVIXbVE9","tlshash":"a7f10affe72d94b7435230aaa93f52ed643c453a4c45cae3fc14a55c287805ec926ab4","size":8170,"data":"","first_seen":"2025-09-08T06:40:13.864104Z","last_seen":"2025-09-08T06:40:13.864104Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api1647107188.delivembd.ws/cdn.js","fqdn":"api1647107188.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"70f56b87511684d937281409faa0eb65","sha1":"f4c37ed549001abaa56f244795dafc12d29a4704","sha256":"a7d7702ed4717f22aa3018948ff3d5107ce039e1002ae35449461d571431fb88","sha512":"ab6893bf36a12ac59cde22547f7b533a14236bfb961537b6a9c56182bab6d34a72be09f3ac803e16ed14fee4ceb3ab67dec3ecb61793e09d21b9cd035bbed734","ssdeep":"384:BGHj+ekXGanQYtSdumPsydVpcLXqiJuzODgwZF04m5Rc/JNFRiM5:Gj+ekXGanQYtSdVPsydVpCXqiJuzODJf","tlshash":"0c52c784b6947a3303c3d1b5a23f2507b338162510508188b355eefd6e7e98976d6f7e","size":14035,"data":"","first_seen":"2024-09-29T20:09:03Z","last_seen":"2026-01-08T14:08:18.567632Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.stiven-king.com/storage.html","fqdn":"api.stiven-king.com","domain":"stiven-king.com","tld":"com"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"57c78269d4e6c13e4b8aa6a1168fa381","sha1":"510ac82be904efdff319491c55781c27a099b033","sha256":"0412a05acf9176e17d9e59d59c1a0e97d14f92d1e26d1015a7e3d50d56369d32","sha512":"ad45126e02a41ab215814ba361cd9a3d578ed47fe404425a83373776a371f84fc5e9542d629fcc27c6cae297ac0a67f711688ce8dee15704889af5e11201e5d2","ssdeep":"","tlshash":"2b017b17f78d0a0083d010fe6c183899923eb221653d7eb57c06910039ccd1f1379e5a","size":664,"data":"","first_seen":"2025-03-03T02:31:56.611279Z","last_seen":"2026-04-04T14:02:45.838601Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc0c8005b851977ed4fddc4875a7a8ed","sha1":"f2c2e164ecee8847e842b3e1a7cf3819e15828d8","sha256":"e11b97f456e5cc926347d7230cc09b55223a863e257de25c186b2f2c208c113d","sha512":"67ee2934becc653b812d6d2bf00bb9ef761114ab6ce99477ac14367d40a075847203fb275b819ec7c27fa19fd1c58d1ad897c26285f409fa61ca1c51eb17b21f","ssdeep":"","tlshash":"dc2153d3e08e747742483257a5391bdf36e80574f94d8e0cfc3ac8191dda19c16328a5","size":1365,"data":"","first_seen":"2024-08-20T20:49:04.050804Z","last_seen":"2025-09-08T06:40:13.86671Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/ru_RU/sdk.js#xfbml=1\u0026version=v2.9\u0026appId=868929056516405","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-04T17:37:44.991221Z","times_seen":147158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/189.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1893ae6cfae2491f183c6957bfaf111c","sha1":"783eda638034ad951c3b876f414d5e0d82d5d0f2","sha256":"b997508348cbb72e8657a3be8327d0dca53a2a7cdce7f84f55dc2b85669cbd41","sha512":"a7646eecd39b05c1977481fa8d278f68454e7f7f7019c3da0fe6c7559e7b56bb9837fa3e04e63ab5b7a854083f4a1c4c5e9dae52a92bb95629c912b9f1b31e9b","ssdeep":"6144:O+gwcLclmpj+MlqY1y1Q/8LoitXHIsie/uNv4mrcpZbI:OBw2QaliK4mwzs","tlshash":"66b41ac876d0f0a2428710b5983f210aa2365c6e980db054fbb5edd5bd7869e123bf7d","size":525721,"data":"","first_seen":"2025-08-01T23:26:54.667261Z","last_seen":"2026-03-28T12:09:07.066142Z","times_seen":368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-04-04T16:04:19.665716Z","times_seen":16471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/skins/codemirror/js/code.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c512304dad90f09725326cd1dbab09e","sha1":"1a044453cf93eb0a9ad999804153ec462a896a24","sha256":"66f056dcaf459407d7e2047c26f02134ea349c7b4b576a21915febfee5c4b3b0","sha512":"fdf858a9ad8f160ea015872b65712eb9e734a9cf117293323df04cf5e8d6ac1d1e573c5735b200af04ce5c07ab39843dbb544a55d01aa45297a4fa0637af60cc","ssdeep":"6144:Vy5JIu/ocV0l7In0xUbZnj7gynurnu1lVk72n+BdDtc:VyjIuJV0l7In0xUhVurubMDu","tlshash":"df544ac975953123d6d331a4a0bf020bb139ac5be80895a4f66dc6d83db49ac527ff38","size":306310,"data":"","first_seen":"2023-03-07T15:04:12Z","last_seen":"2026-03-25T21:50:53.178607Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/theme-classic.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3817a593a783d84d3a8961e9217cfcd3","sha1":"b07638fc3ccb0a648f11387f9aaf0c0cc495810b","sha256":"4923443b03f5775bed83d4ed6d9bc317db28d767aa0a6669583d5c4ba598e098","sha512":"a664cedc0bc35e559752ced457b580effb7565800ca20b59fd4feb1f119a2e1e2d677751a0e74bed949b9fe5e798a6172a516ff7ee9dd02a98f7c85801da0730","ssdeep":"192:+BObqlFcSwm7bRxeopTYgxWiGdIJppCt+L4jQIiGV4+eOtBmi1hPXMow6Tn9:xtSFezgxWiGdInLGV4+eOTmGPXMoX9","tlshash":"6f62653e42d4d295989bcafccf3ad821641e50e6c095c36ee2e6836027d2bddf12e564","size":15063,"data":"","first_seen":"2025-07-30T14:51:18.006801Z","last_seen":"2025-10-09T21:00:59.603069Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T17:45:20.982463Z","times_seen":67276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/aci.js","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","size":31372,"data":"","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"Function","is_inline":false,"md5":"e32686f0d25279481ed5e0ab26da37e9","sha1":"3691e0447f90b4d82957696408f8e20a5be0959b","sha256":"3542ceead2b41196f073643e2bbeceedc1f63f329d349ac562d94596058def28","sha512":"c17eca4a54ae8b4984ac5fe105559e18be997b33714d386a5e6b875a90b141899bff93d7815cacc69b096e2e81ee4c4b76a8bc8fc85b249572f14ea05ce29b91","ssdeep":"","tlshash":"c280044d11401100ddf3315040371c4400d411705ccc4c5100c4f4550d510351305c5c","size":37,"data":"","first_seen":"2023-04-13T20:32:43Z","last_seen":"2026-04-04T14:02:45.837244Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f361dff768018a82926e3acdeb481e49","sha1":"05a83bb123b154b754660f810aa3bdee1dd50bf4","sha256":"5cad3ae8968a5412f2f59c7d77439dcc8c595e83d612e390794fe205d70fbeb8","sha512":"0c14d1cd9c4ad4ec693806d53706552671c613ce8a08e32c1ca4042a0d92d495c13bd8795496da9337aec7e6091a288ceb5dc5e54019c5c6bd8e7cf7190855f6","ssdeep":"","tlshash":"2fe0723b8b0984fb03fc0270fa32eb41a82009399a427bf8b15285a831360dbf00138c","size":310,"data":"","first_seen":"2025-09-08T06:40:13.869519Z","last_seen":"2025-09-08T06:40:13.869519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/cdn.js","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"70f56b87511684d937281409faa0eb65","sha1":"f4c37ed549001abaa56f244795dafc12d29a4704","sha256":"a7d7702ed4717f22aa3018948ff3d5107ce039e1002ae35449461d571431fb88","sha512":"ab6893bf36a12ac59cde22547f7b533a14236bfb961537b6a9c56182bab6d34a72be09f3ac803e16ed14fee4ceb3ab67dec3ecb61793e09d21b9cd035bbed734","ssdeep":"384:BGHj+ekXGanQYtSdumPsydVpcLXqiJuzODgwZF04m5Rc/JNFRiM5:Gj+ekXGanQYtSdVPsydVpCXqiJuzODJf","tlshash":"0c52c784b6947a3303c3d1b5a23f2507b338162510508188b355eefd6e7e98976d6f7e","size":14035,"data":"","first_seen":"2024-09-29T20:09:03Z","last_seen":"2026-01-08T14:08:18.567632Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"d57e1f8e7a871283da520255a39f79d8","sha1":"4449887de476c95704a50099a57b30480cd0e7be","sha256":"b87c93946879071bb0ebc99fcb41c693ee9395d10b2afa3409cc98ed3e1e3df3","sha512":"a98a69bc099788b8a56e3bebcad55db739f13b5cf750044691ee20b48e4fa532e2331c28727249953b8f2743d8b810bdadc542ea957deb442e4f346175636f3a","ssdeep":"","tlshash":"3821add8fb9d348b153561a41a2f56cd603ef1338cc3cc276c69a1806ca663eb37588c","size":1275,"data":"","first_seen":"2024-10-20T14:54:18.237701Z","last_seen":"2025-10-27T15:54:07.447226Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/e081b95eae982706f4cc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"49c6f6cb0607960b6f505b0dcd302d97","sha1":"0d41413b8ab620685a10e321b7de7ce8b6232320","sha256":"65427d68ab4ea74d924ae2fe16de03c7d537bfe6cc7aed67944f439f0d42ff5b","sha512":"952f007b9fdccdb78ce74a604f3331b84d3860da2a82a4e78d2fdcbec08df78da2c9831492c2843a820ee1d1898e8ff03726f4588f2ca3d9f8e97fbe7bd1c8de","ssdeep":"192:+w3gNinD7umI+xbmiwv8Y5gUT0tWGOpjsZYPe/W6UGcMrI:+wQNiDdxaiwReUT0t1ONjPe/W6UGcMM","tlshash":"11121a8b33b9a87786b75170b42f250e92364107242dd4e4e3d6d9a228f744fae13f0e","size":9211,"data":"","first_seen":"2025-09-05T09:13:17.815918Z","last_seen":"2025-09-08T06:40:13.808958Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a36f4e0e473e1e1d5502acae0c28047","sha1":"4ad08387c0a72c4c4ae9dda31eca5aa8e4dc6367","sha256":"fa94d39ca40d729dcd9a59905a1a260b4886d5cedc8cda48d1496a023a93a014","sha512":"350aa98f9b6bcca22305004c9679d48bb9de5a125144065fbb3b63eded87b3782e2f37bfc39a95d5d160b9f23142239e9a16b64cab6543ac739979aa07896f85","ssdeep":"","tlshash":"0751d80df10db83a52b6216b106b118a1739982ad64abbece03159f0de3c85b5c27d5f","size":2696,"data":"","first_seen":"2024-08-20T20:49:04.051817Z","last_seen":"2025-09-08T06:40:13.873331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e86bfdf0cda52aa682e2215953d6dc8","sha1":"4074ad8cc88603929a1b6134f068bc6435148fca","sha256":"e7842e79f3615430159d3884a4ada3a029f3b056e1c07af0b8bc578532ff0467","sha512":"46e3527b90396bc81dae1b867c568bc2467955815459cb74253cd42a37435121d7fe7da88ee9a6ec21dde7d3941665d810773d1ed8ebf2e0aaae886386593a18","ssdeep":"","tlshash":"19e07d0e2dd070251ef8147b063549ac315d55085641c8544d8ec56d7ba0fe10eecfdc","size":317,"data":"","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.874454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/share.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba105677edec0156a3cee2f45830adb","sha1":"1a41e7c0fb0c70991332fae2b0023a6d35a4af80","sha256":"77b923d6fd76d50e9728f2786c10de9ab04d7853b863244de8f4f9ab612f8bd3","sha512":"f070ec0c402df8be50033078b470993257512d29c09fdc0d051ab6ede5f105307b35c9ba6c5baa7b268980760da805045bd7cf244bd195944e286d288cd5d732","ssdeep":"","tlshash":"f561d23613a318369547f1759a2fb6487032651b2945bc0b7d1c40e00f249bb55f8bf8","size":3224,"data":"","first_seen":"2023-03-13T15:26:07Z","last_seen":"2025-09-08T06:40:13.794555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api1647107188.delivembd.ws/embed/movie/634?season=4\u0026episode=6","fqdn":"api1647107188.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"Function","is_inline":false,"md5":"e32686f0d25279481ed5e0ab26da37e9","sha1":"3691e0447f90b4d82957696408f8e20a5be0959b","sha256":"3542ceead2b41196f073643e2bbeceedc1f63f329d349ac562d94596058def28","sha512":"c17eca4a54ae8b4984ac5fe105559e18be997b33714d386a5e6b875a90b141899bff93d7815cacc69b096e2e81ee4c4b76a8bc8fc85b249572f14ea05ce29b91","ssdeep":"","tlshash":"c280044d11401100ddf3315040371c4400d411705ccc4c5100c4f4550d510351305c5c","size":37,"data":"","first_seen":"2023-04-13T20:32:43Z","last_seen":"2026-04-04T14:02:45.837244Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/services/get_sspuid?callback=cid_68be7a263_96563553","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8630a88f82a95405171a6d83f71aacd","sha1":"d58abcdbe7b683134640f2fceffad16eb23d7953","sha256":"1af8191cf6672e791191b58e70ac6d67050e0987af887c8df4b0701750869c00","sha512":"45bc630619f958bd5b164f531b22423158c284563d34e1966a5bf080c84305899894e5e32c12103e0540824ef429a464dc2deefdda4225818cf5d1397bbbe147","ssdeep":"","tlshash":"aeb0121091d84f5995d4108114601656e111720ab5f6051c2410e42a408d1c768d58e3","size":92,"data":"","first_seen":"2025-09-08T06:40:13.802216Z","last_seen":"2025-09-08T06:40:13.802216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3674c73bf73f632c0b295e069b4f5f95","sha1":"cfab87023075bb0af0bcce69860bc4ea7b09820b","sha256":"20bb2b1c0b66e0b01f85154f1434f94457593d8c7031c333f06b5bbd5291e7cf","sha512":"b73f5b569f700bf22a40a39196f1b86d84a05691c4f8568a893eeabda3371fff4bdbbbb58895b06c2b70171a8400592f1b61a907d5a3042d402a469e38694f2f","ssdeep":"","tlshash":"bdf0c01605b70c11015508f9e3fa0525b801330f2cdac44ebcddea495f1c88ad057acc","size":525,"data":"","first_seen":"2025-09-08T06:40:13.879183Z","last_seen":"2025-09-08T06:40:13.879183Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"be6d4892239445924066a757b4fe350a","sha1":"08866a9cc30f6a4ccc0e616bdbf755d612f6ac17","sha256":"778d98422d563b6a33ed04d57d5f06b7cfec748a346a995fcdf88a8518605b4e","sha512":"d4b85ddf786110d8aa33c4ed131dac1940b3a1168b2c48448c575d44d1089d4a308af65600e4c6a6b19b0b6fe5a82652bed6e861cc1888c46535559ae2ed362a","ssdeep":"","tlshash":"2d219bb9db1d0668811014eddd1d22ce633c512aa538e4fa3c7b9155aec8e9d03a1eca","size":1366,"data":"","first_seen":"2023-03-07T18:12:22Z","last_seen":"2026-04-03T17:02:33.420857Z","times_seen":398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adnitro.pro/js/matching_code.min.js","fqdn":"adnitro.pro","domain":"adnitro.pro","tld":"pro"},"ip":{"addr":"92.63.111.219","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fded13b32e212918a26285c80c4e7480","sha1":"99d6c941d9f0b9d6a00dd152fdc5326e190faa40","sha256":"7725f94c6cb61834c4d4b32b0a5ca99416dd449a6fa070f8746b4d7bfd72bc61","sha512":"6460379608ea776d0868c4d8af00ca53bcb6b7577190f854839b4fad1637d78b5be415530fe454834f28bfc4bae532fe37e5853ab1e0d2422caed7a98057cd24","ssdeep":"","tlshash":"5ff0752e7b936019c12e235d497f470f5021e41b6c270244e272cd61be90dd304bb97c","size":520,"data":"","first_seen":"2025-03-07T11:52:02.499879Z","last_seen":"2025-12-23T13:05:39.654404Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad0f78a16cfeafbc5c6ebb5167ff02ce","sha1":"0b779e03a75bed852fe1adf701131c0b9ec49ae9","sha256":"4db1c81b47bd2dc1f89b945feb891f05ae9ea8611945111ef4c05a5a3a0b2df6","sha512":"ef2b726864caec9190dba2ddac41ee1ab6871bf918b4836347cd8e9dc3d434ea8802146e2512b3f8685506ca262c6375187cdbc344a762f4b34aafa741fbc0c4","ssdeep":"96:+R4efYLjnsvsDAypkSOmjUtIGovdHtglQ8m4LJdtXdiUK:vefYfn6sDAypJOmj8fovdHtglQ8m4tdo","tlshash":"fe9164200d68d19a0223314be8ca6c163cd8947eef0ad25db85d1fae7bd631943367ed","size":4419,"data":"","first_seen":"2025-09-08T06:40:13.9009Z","last_seen":"2025-09-08T06:40:13.9009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/editor/jscripts/froala/editor.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1383a9aceeb03f223a9d9c68dd6a118","sha1":"89f6876010ab6630eb2c95323f37b0f5bc1699ec","sha256":"995aa05f276fa268a3d6090b48bd4f798f6aa6f1131c9af1b540115fa1730b97","sha512":"b6b8bfcf3b570bef64e9f378d6cce9bb8cc0f7f02e9ce3cdf46f03a34d1707a2309a2b042f70dbcbd0f54d614a3ce5b766801ae55672f49614964205904b0ed8","ssdeep":"6144:MD27euNOXd0wtndU0TAYFjd/nZwp/7EUJa+O7JZvl8edhGCHEl:vrNOXd1UcAYzvxUM+O1Zt8edhGd","tlshash":"acb43b9c729039b722ef206d64ef140a70379917e50ac520fc2ad9f61db8e45226bf7d","size":517029,"data":"","first_seen":"2023-03-10T12:34:56Z","last_seen":"2026-03-09T08:07:25.087456Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d5c1e9aef7238dab4aac49145d75b2a","sha1":"0925118369d791dd0d15f6012a66b3da81a27009","sha256":"d7e9a085fffa125b931505f97cbc06136ca6db974b0b577bbc3bfeb59c314428","sha512":"1b850bf807c9c2844aec467347017acac812ca76d127f6cec0fbaced19c08cc939bd2f228b73d90aa53f20d49e46799e5f969d12a07ca94f86cd5941770fc018","ssdeep":"","tlshash":"ced0a7a9b33e552656eb608248a516c924384049798a0c8edc6e45a004add9a015f43f","size":225,"data":"","first_seen":"2023-03-07T01:18:03Z","last_seen":"2025-12-23T15:56:38.01307Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"eventHandler","is_inline":false,"md5":"f527542f54348fe15e3fa560476af012","sha1":"776e7dcad0e2e2614926750e9de94539cce12845","sha256":"dc70b1e8b1ac7676ee6055b4528e133d4165e1540988c236fccb7be0ab8ed72d","sha512":"84eda7c11770d3a6949776aeccfb5c84149f09cc214787a198acf9ee7552365ea4695b877ed5be1c8a0946835bb7f9f07144460422f37130a7336ce1161431a4","ssdeep":"","tlshash":"e37000a028888808ac0800020338802808e8020a3280e20882280a0882002aa8020880","size":22,"data":"","first_seen":"2024-05-16T03:29:54Z","last_seen":"2026-04-04T14:02:45.833423Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"72211d85e3c1e5c7140a18a65d7b5bcd","sha1":"142c5db072bd4a6d048a1e6e7d001f8ac24ec561","sha256":"ede6c700aa6c4fc752fb69d6b3f1e06ec5df915d6d799e031e5487f737bbc38b","sha512":"e92872686b01f7c42cd215de419657009b100b2086f2174c0748d539930658d3194c2818504ef7586832fa53fc9494e6e22d4a8f57c5543951c203abb312115e","ssdeep":"","tlshash":"673199538399a17bf45d849d637b33185d76210b5c957ce4bd2d260a7f0c39f20b118c","size":1625,"data":"","first_seen":"2025-09-08T06:40:13.914174Z","last_seen":"2025-09-08T06:40:13.914174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/71dc0830fb89dce63ad2.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b53609bd5957a918f3a5c4b75ac73bc7","sha1":"ff112de3fc15926c4b2abce866aacd75a0bbf844","sha256":"dae8b55e5a0533d756f0c6ec2a2013f8e2f34ce746a6af9c72e08e9c5bea72fe","sha512":"e3f44d5ae7486575b8943558e0dadcd9cc99244c0874eea9ca4199e8498aa2f9dbc7b8fb50e7ee65d721aa841261ead28343123880085f7ee8ad71a39dd476e6","ssdeep":"12288:5f044f5LonhBNnzBHO3puGj2lkOhbR8aASBkqjcINKc:5f0LNqO3puGj2yOBR/ASBkqjcINKc","tlshash":"71e4e8d9fa5070b542e790e9c03f160ea23f751a700994e4b726ede16878a8f6123f7d","size":706570,"data":"","first_seen":"2025-09-05T07:26:16.693661Z","last_seen":"2025-09-08T06:40:13.80659Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"eventHandler","is_inline":false,"md5":"3e99e07ddc00e1bc13d94892819be0d7","sha1":"c605fa66eff4426b7735e9701322e8c40040a4b9","sha256":"8f06597b2185bcf43a38d0e2108b6c3d9b4949ce8cc905f418037ff4f1fa0078","sha512":"cb4a144a94ced5436a7d9e346878a20e03a7c87264c01e07583b07ed134f57eefecb119468f325357195de5def7e3aac2357471d4d76adfd3381e3aefe295aac","ssdeep":"","tlshash":"067000302c22c0200080808e0820e008300008828080c0ca3000c00880a00820820a00","size":18,"data":"","first_seen":"2024-08-20T20:49:04.053793Z","last_seen":"2025-09-08T06:40:13.925848Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"eventHandler","is_inline":false,"md5":"271a771033318431f91f04561a4f2e73","sha1":"76eab57cea61be9df91d35e187238d0c1b502ccd","sha256":"733295cc94219e46775d133b3445e38c52c264ef8c6049e680223eb7142229cf","sha512":"69032b8131901cee82bce90a3276b0d38a145b12b6fd04c0706d7ee88f2989103a994fdb8a78551979d7c8f0a44e774ab53a464d1346db1b9513125e1f1fbeaf","ssdeep":"","tlshash":"126000303c33cc0000c0c30c000c00c0000000c300000003f000c0ccc0c00330c3cf00","size":14,"data":"","first_seen":"2024-08-20T20:49:04.059377Z","last_seen":"2025-09-08T06:40:13.927082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/js/vid_vpaut_script.js","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e42ed2bc445a40dd71ecdd77bce2231","sha1":"642b53ff7185c1da2dddb8b4bbebabf0a1ff615b","sha256":"70b2aeb20f4a1e808b3532334355d38cecbe71b817a71d7f586c7763b8e21ed0","sha512":"376c370e633b98702db8e40815df19a42bce6de751f0e2a8a43d438583189118d53554311ed6fa00ca90786f32e158f3ac21cd08a61663e38bb4069f4c2c8457","ssdeep":"768:91XZdKV7S+tuXsKt8XIqtowlmbtrm+n/y2aH2:XXZkFS+tuFt8XIqtowlmbtrm+n/y2aW","tlshash":"5353c73f1965143b8ab66b3fab2ab048fd31902b174145203d5c69a57f74da061f2ff8","size":64750,"data":"","first_seen":"2025-03-03T02:31:56.606478Z","last_seen":"2025-10-01T23:24:06.827394Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"635e3f8c156afb85860fc0110e591516","sha1":"44766665b8484298048831a4d9a36f2921c10663","sha256":"2d8760b9c29acc5175fbb6dbdd4a1aef1f9dd2bb88045d6ab1b8115fb54faae4","sha512":"fac0f88df6c7578af8b4a433bf8ebcca82f16dd32c12c68601db6c4d156c6d65d5a38695b8fbafee0c5b1396a067c74983d169dbaba82fa94778c26ae7a85518","ssdeep":"","tlshash":"a73173fdeb4c945b3108e4c18c5d12b63c3d8343ee4229e7fc5c6d25236c868a6c987a","size":1864,"data":"","first_seen":"2025-09-08T06:40:13.934221Z","last_seen":"2025-09-08T06:40:13.934221Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/jquery.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85582,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-04T14:12:03.370729Z","times_seen":11372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"0df6decce2cccf8587029c8fd70bd303","sha1":"fbd563b5f91bc41b407e4c6bd8bba0389ac21399","sha256":"595446a7e63e28f6d4dec9e161db22dc8670e2f21f30e376be478acbf2daa933","sha512":"3dfd0b946185b0eda6e2bfe01d93fb6411f14553535a8d9f1a03aad9801c21e4aba45c85809533265af432485d1d83475572988330e5590d4213b8409f903f59","ssdeep":"","tlshash":"31e0860cb0a6b110027bf5be8d7f53042a29a41b370e8cd4b98c9cf85f54338d961954","size":364,"data":"","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.941094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"eval","is_inline":false,"md5":"401f07f4b30ef3b96f0f6fdc95a51dfe","sha1":"5ee7ab09cadec093a9bbd82c3abe5fe10b5204c6","sha256":"d62c3d8ef101756e8bfb9c627ccd87d0a90c2e86c8ee6949e56ec58ce57e04b6","sha512":"f32b9f60c4ea950fd768337e8c0d2c8f0702660aa1553db4536674d434b7139e8a4b4803e991ab097dd650e3903df4149d74a3b3e0b685d178d220204b2dd755","ssdeep":"","tlshash":"5931df5cf3dc7bf410af2223596b2684af262d024b17d645d1c5d2702e0ca07b9b3d0a","size":1497,"data":"","first_seen":"2023-03-13T15:26:08Z","last_seen":"2025-09-08T06:40:13.942623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cd84eee52b8526429262e303847837a","sha1":"2e7436c3f8cf72b76f8e70e2b9503a2727b9e4c2","sha256":"a6a563c0fb543acdcbf20663b5db31f48b95b0daacee933450638cfca9d9ee44","sha512":"3bf2aa8a22b92ce77139ebacc1d46ebd8e033683de019e4e20d75264efa3d01c9b03a0700f248524b0f6e1ca49260ae819a3c3c01458784516b730b4d3f84e3e","ssdeep":"","tlshash":"b921ad5db365263805ad3876cc1ffbcd7431007bbf462199a8384cb5e1b57b690189ad","size":1256,"data":"","first_seen":"2024-08-20T20:49:04.067299Z","last_seen":"2025-09-08T06:40:13.947071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/editor/jscripts/froala/languages/ru.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9fb4d9c1693ed1a093358ddcbbfecd0","sha1":"9da26c4a8e5ad359483a3d0d89cb590c5b1ecf3a","sha256":"e9312ab4c50701b9f19627b89923020a56fedbf0a5b4b85f4b0f588ef52538a8","sha512":"b0f7c9277ac5781566f50519bef2b618589ea6dde71ef0fab575dfd981d63f6dd1bb45461c340cef60346bff85cab2cdf34cf9d1ab29d9a10e425ae5feb2821a","ssdeep":"192:DYtVT3hqVHRSkhxRZM6YRRROeRvRCnR/diAWIy2RcMUrTRhoRqRokR+RhR2RDjRY:Et934VbuCaZIPs1nv/kXUy4uP","tlshash":"8b9270e3c0e30a6d28e87592eb79ac6eb544765bd104d77ffc7e268bdb2062116c0706","size":20841,"data":"","first_seen":"2023-03-07T01:18:03Z","last_seen":"2026-03-08T17:25:16.044931Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tube.buzzoola.com/js/lib/buzzoola_ufp.js","fqdn":"tube.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"151.236.127.225","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4f91442f3c51aa0ab4d00240cb9ca53","sha1":"9fad8ac07c22c86ab006bac7207e7928098a22c1","sha256":"c5b7be7ff5a92d4d03ae4b96a3931d1349f726affed96d8b64ecbd1ef7de598f","sha512":"b7af177eaf8de9bb7cfe4332c223524d40415e517b4770fb923b71c8d31bc22f08c975226934e9d4d2262a3e94acdf718d5c970725ed9cbb75589da98207b7c0","ssdeep":"384:MtJpg1qCMUYbJZ9uhMN9wgR1YOO6ghS++1ZBneflJnbRbpxsqmpv4Ypm7RnCE0i6:8Jpg17MUYbJZ9Oiw1uWSjH0ftsuNCR","tlshash":"6452d7e9f28ee4f745f43756582a635a7371c43064384918f90cd682ea07dea907ebb4","size":13432,"data":"","first_seen":"2025-03-28T18:47:27.609281Z","last_seen":"2026-04-04T17:41:09.000921Z","times_seen":2651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/49769e4b7e784fec23d3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"55f19e2ce7ee0c34e58381280495c543","sha1":"83055fa14fe35597587cce9cec2902e364cc437b","sha256":"243bb5b97f924d1740291ffba33694bd57c6430e3e4171f5b27db1ba59e1e065","sha512":"d43f9f046f3b599cd01b2370e6c1a4c3292d18ab09e84c81bc3d6df049b318016e4ff077ae47506d1abc5d49f078833b1148ebce207ce77e2a4bce0707a2a50d","ssdeep":"768:YiNu+NSz/7Zt+fkK5ttDY5GZODVZ5Oz0s3ytazFpLhehXu:k7ZtsnDY5GZ45OhesO+","tlshash":"cd73fad97595b9fa02c3d4f1043f320ea37ba615711a6580b323dac1ec25a9f5223e3e","size":76852,"data":"","first_seen":"2025-09-05T07:26:16.672243Z","last_seen":"2025-09-08T06:40:13.817083Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kodir2.github.io/actualize.js","fqdn":"kodir2.github.io","domain":"kodir2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b151edee35e592d98d888529550de10","sha1":"e231f21dad2838824dfcc65834c02b55f745e4e5","sha256":"0d7ee7b9f06f2c62b7b20ac07ec837945f81feeed21be60cdf69c07305f92b4c","sha512":"51668d2c8e3586666cfee6a9bd8043928d7d24f32d391303d7e98f941878e85d16b7a6868e2c8978e4b53ba62165aac20d9caec26efa86fcb9f07acb4e22e142","ssdeep":"","tlshash":"eb71d6fefb2cd072997221a8861fb0ddb93d92576c049ce2ec5c846918f4d79152adcc","size":3556,"data":"","first_seen":"2025-08-31T21:50:23.714408Z","last_seen":"2025-11-26T18:50:47.384295Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/ads.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f5eb1d135453e1d455cc9100621ba05","sha1":"fca401df236d05316c2555f4c2e5fcbdeebdd0b1","sha256":"ab8b6924619317a40378b8e6300d982eed7212151048bc43bd2f3706ca428621","sha512":"55f35ec196deef093090389caaad2637a218654398976418473ba3e2be2b49b00dbefe95b1121705047178c1c169f8296e16a7da6b412702b7885958a05d362b","ssdeep":"","tlshash":"496000a808802820cc2000000008000880a00000c002202200000002000ba28a0c0c0a","size":17,"data":"","first_seen":"2023-03-13T15:26:07Z","last_seen":"2025-09-08T06:40:13.719279Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/pushy.min.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a1158a42a15f5eaa9e9d328762560a1","sha1":"80249e746d9d37a88457756f3f98034ee00d2fb0","sha256":"5f1a3a89f85d7d8fea248137111c5030e521d9efa3da80f95eaa2bf8ac3b6836","sha512":"b8aa6851a625b59f9651403b61f53e0f3003bdb34d6dfff44ba70c45f7511d08a7368b67457599c7afb1205d0b6eea5217f8291b3c38d978c6502b4fafca843c","ssdeep":"","tlshash":"e1419435392318a441cb2637f3efc6056934105b8d364cc1f678d49b9929bd83126e1f","size":2002,"data":"","first_seen":"2023-03-07T12:55:07Z","last_seen":"2026-04-04T09:39:41.509171Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/dle_js.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"654dd717108dbe849e8de0b7f2ea9ffe","sha1":"6be5abc28cdd2067199a9eb939ad3b5d5581886b","sha256":"234372a224a78421aee6a2a1c90dc630ed01eb134752fdc868d7ede8203fa372","sha512":"b706a463962c544a09db2fb58339c90bb65d527c2775c564ff1af424d8c12f65580fece846159895f58ea68ebb3d6feb155f5867affe85a906ce079f8c6927ca","ssdeep":"768:BO0IWqpGtPIBSN4cvMRHClvfp0ScQvStlDrFmw:BO0bIBSN4cvMRHClvfp0STv0lDrFv","tlshash":"9fe2c50cf5b4791b8aba237ea17f146a80744b63e700cd589a6d43941d72f8c95b3f2e","size":34024,"data":"","first_seen":"2023-03-10T12:34:56Z","last_seen":"2026-04-02T12:31:19.943436Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/bcc9acd323d0444a0faf.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"923015818fbb52ad74ad365e7a68e0ba","sha1":"3ccd87ebe375443490320490cc80d7c62a980c5c","sha256":"77515238ebb0323247f6484e4ccebf427ef7a97aa276f556d8f9cd9d9a1dca5d","sha512":"199cb24a1e68225f5aede4df1fb835d5a5992bbccf5717cfe74326574c2f325c8768a3f58985222ffdd5f4027c9275c37f5affd6f68db9405bc2464882ae5e02","ssdeep":"1536:rpqA+oUSsx6dkGs4po8pyQL89MfhuM061T1hWLB5la7SL:rxUSsgpy9u061TvWLBjamL","tlshash":"7bc31888f65174b502eb90f8513f6a0db33ba459b01584e4b76deef1ae34a0e5122f7c","size":122434,"data":"","first_seen":"2025-09-05T07:26:16.702624Z","last_seen":"2025-09-08T06:40:13.805148Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/b27318f650eea98da925.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3530e7c3486937a95c80040199a67cbf","sha1":"a14588d575ada08d6496685bf57edc93fb7860b7","sha256":"e485ed06fa388c234b6d04249b50ea06c61b2bc6f3f032244477807f35ac009e","sha512":"284522512a5bcdfa993ca2a81ce0cc7ed65ed189d947dd180a5a283249f447eeb34db99a658ab1ccb2548e8580a1f299167e66413c3b5c6169974f0176df928a","ssdeep":"768:EZt8AnVgFZYiRYjldzngRQ9X7OzZyp4tityOaN4easKKbJW:sAgutuBq0","tlshash":"0003f8d974c1f6720157a574883f221ea37b5e25a41861c8b317e8c2ac69d8f5223fbf","size":40882,"data":"","first_seen":"2025-09-05T09:13:17.803786Z","last_seen":"2025-09-08T06:40:13.729653Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/ytub.min.js?v=1.1.1","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc4fde63b4dc3fa89decb1285dca269b","sha1":"67c536cb1dc091d8c32b86760f1e64ddeae0a364","sha256":"6e868a011e224f4f7a678e8748c7a9fe5a2d54078c00353fcbb618d50f6e4cb6","sha512":"97f27e4b1c3b6fd094ebd4366cc07d18d0135f6699759a0e1c2f90e64870d1702556df417a454ecb3c70fbdff9fdafb1d83ed6f2342f50da4f302fb16d2db9d4","ssdeep":"","tlshash":"0a31100dbbac6967c6aa1da7d17ea64e2721ab9bd30a2304f077710d1c8d6073dd684c","size":1445,"data":"","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.776893Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-rtb.sape.ru/js/uids.js","fqdn":"cdn-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.46","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dbcebe686fce958926840916dcf303d","sha1":"9307e154d9c86e87102c1720791d0bc741bf8aee","sha256":"0197488f2ee3dcb817e569e8ffbc7c73cf7998dfa73da17651bdd11b6e2057cc","sha512":"7aa4d7294b3d54198ef870078d62720dac419bd24e4dc06c415895b6f63f61b921cdf0d8dd63d21045776881ab9abe7ba6e85349cf0a9531e05dd6801fb614ae","ssdeep":"384:1xQkfFbECxLB1rj3xrEkQKGRGKZBSQc7Hj:XF3NFj3xroIKzm","tlshash":"9e82969db2c2f03142937131816f610bf23a6856b45e8094f229c8e1fdbd89ea537f6d","size":18029,"data":"","first_seen":"2024-12-20T22:38:56.308232Z","last_seen":"2025-12-14T21:31:50.224477Z","times_seen":1262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","size":33703,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-04T17:41:08.898849Z","times_seen":22883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/79e70f61/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e418f72d265a21e01d0ed1ffe7b4a88d","sha1":"44924dabe3318afa11a9f7b48bebf456ce7693ec","sha256":"028445fec5a629ee39529a73c56811af132fb6b7c485ace971e862c1a2d6762b","sha512":"575e1e17e1127273edbf1366ad3e547138bac4b003d3f3b0a7b43885ec98e094d366438afd166599c91908465f5f93447416714e1080f3c5c41ad98637d2e9c1","ssdeep":"384:9UiEg7N/0Dc4myg1Rc4Oawa/vrBw0DNOZcWL4/Zq1zO8RyzLrBOSIngd3vxnIF/V:98gBODUjBPNy4hq1hU1sa3/1A","tlshash":"a7d2d6cd77b1b4750373a5f5902f100fb23ea8aab40c8998f188d4e06cb59694667f7d","size":30876,"data":"","first_seen":"2025-08-25T19:47:51.505662Z","last_seen":"2025-09-08T15:19:05.502762Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-08T06:39:32.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /sezon-4/70-4-sezon-6-seriya.html HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:32 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/7.3.29\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164; path=/; secure; HttpOnly\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI:1.12.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.3.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DataLife Engine","description":"","website":"https://dle-news.ru","common_platform_enumeration":"cpe:2.3:a:dleviet:datalife_engine:*:*:*:*:*:*:*:*","icon":"DataLife Engine.svg","categories":["CMS"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":28688,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1297), with CRLF, LF line terminators","md5":"0a4358aae774f9661bea0d640a26e9d1","sha1":"6ec00b900793d6075f5ea450b923cb85e9e27292","sha256":"5c0f185486e33ab73fdf74091c2099b475ac8215d5798e6d465b8da62b84350b","sha512":"8c70c3606736e58c6c9a7720ed2b9eb0a60c2a2cd228ee48bc6ab7f14315a91d1e662483f1557a311289fee09f82d693eae922ef4957d37c984c042016c88b2f","ssdeep":"768:424V+skGwVxsoqfJFXvdbD9TCudttKwB/lr3il/5P6uC1PnjJ06Vkwk4LIDQgA:b4EnGixspDfdbD9TCo9906Vkwk4LI8gA","tlshash":"2dd2e9156cddd02f0213316ae872ab0df8a5907ffb0fce1a74ac49aa7be16544d37648","first_seen":"2025-09-08T06:40:13.696156Z","last_seen":"2025-09-08T06:40:13.696156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":102,"dns":7,"connect":28,"send":0,"wait":74,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/Futurama.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/Futurama.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 99274\r\nLast-Modified: Mon, 29 Jan 2024 21:22:07 GMT\r\nConnection: keep-alive\r\nETag: \"65b816ff-183ca\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 139, 8-bit/color RGB, non-interlaced","md5":"e173f0216bb056ce7918c32cf68ec945","sha1":"645d3e4d27034da9cb2023eae00ff3d441b4124a","sha256":"d013cadd201af70a7960d912a8df1cd779cce3c5fef69578c7264ff0786e4647","sha512":"0c8415d51fbde95d4c092e11835635385625fd8f391c5de32c45c2a6c86bf663dd301b323d8f087b43b425d82374c173df59973c8e05c147d7d9e101a8c1ffbd","ssdeep":"1536:fj4c8S0Q6HrwLqIpcpOsVRqmFycNH5JpdpsiqmDI+gO8OwVE0gBDgGuPhSRBltkZ:WSrLqlpOiRDlF51LF8uRBlDt6","tlshash":"c8a3225bf0e55a490f5231ed66deb5322d5eaffc909bb5050ca70cd22c03d788ea9287","first_seen":"2025-09-08T06:40:13.700348Z","last_seen":"2025-09-08T06:40:13.700348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":333,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/hit/?v=0.7.1\u0026uid=c9f24688-259f-4f81-a323-cbbf1707aaab\u0026dp=14\u0026tz=%2B00%3A00\u0026nc=163233\u0026aid=0700007F267ABE689605F58902A29473\u0026u=\u0026r=\u0026rs=1280x1024\u0026t=\u0026oE=1\u0026oP=1\u0026dT=2025-09-08T06%3A39%3A34.340\u0026fu=ec77ae45-c751-4d21-bdf3-8b96b5af30b0\u0026if=about%3Ablank","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /hit/?v=0.7.1\u0026uid=c9f24688-259f-4f81-a323-cbbf1707aaab\u0026dp=14\u0026tz=%2B00%3A00\u0026nc=163233\u0026aid=0700007F267ABE689605F58902A29473\u0026u=\u0026r=\u0026rs=1280x1024\u0026t=\u0026oE=1\u0026oP=1\u0026dT=2025-09-08T06%3A39%3A34.340\u0026fu=ec77ae45-c751-4d21-bdf3-8b96b5af30b0\u0026if=about%3Ablank HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.214","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 01:31:47 GMT","end":"Fri, 07 Nov 2025 01:31:46 GMT"},"fingerprint":{"sha1":"F1:ED:A9:2E:2A:3A:BF:06:82:23:97:3A:FA:2E:19:EF:32:01:D6:54","sha256":"7B:6D:BE:74:0D:F5:EC:B3:DB:6B:DA:1C:FE:4B:21:DA:F3:26:59:55:4A:C3:9D:26:50:6E:44:74:25:A0:35:9B"}}},"request":{"raw":"GET /rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=1904420A277ABE687302057B02814AF4\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: sspuid=CkIEGWi+eid7BQJz9EqBAlTliRJMrI/sT+s+nlogynOn12MG; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":335,"dns":55,"connect":48,"send":0,"wait":61,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=368\u0026euid=NT_2_0700007F267ABE689605F58902A29473_3592641471344566_YgyNWo\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=368\u0026euid=NT_2_0700007F267ABE689605F58902A29473_3592641471344566_YgyNWo\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=368\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"s.myangular.life/ws?ref_id=14956","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:37.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /ws?ref_id=14956 HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://api.delivembd.ws\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jA9ibTVEOA/5UarnhBln4w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:37 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: gxbYGo6wPERAPfonoayA7z+xTw8=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":25,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/js/jquery.video.js?v=2.0.7","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /js/jquery.video.js?v=2.0.7 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4ee6ff16def0bcdecfb5f1d7fad21402","sha1":"cdb140f7be51dec6df3fee93fd7063340380deda","sha256":"c375a981292841f21f66743c81bf2eb0cae4ddf4f3f58e53473d8cdf8d670bb7","sha512":"cae35ed69c3c684c1b9240fc0c817f88165bccdc77690265d44d6d9924a0201aaccab0b4a766532f3f76c914ba6563073656263cec7ddd79a2f9e5ff473198fa","ssdeep":"","tlshash":"b3d0239d9043624f402311907ec211d2549c23b7f47541ec2d43748a910857dc4ca5dc","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.706014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/header-bidding.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"cde54fb7a77dfa54c20279e0707ce1a8-1301824\"\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nexpires: Mon, 08 Sep 2025 07:39:34 GMT\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-type: text/javascript; charset=utf-8\r\nx-yandex-req-id: 1757313574484011-16793537523984725321-balancer-l7leveler-kubr-yp-klg-325-BAL\r\nset-cookie: i=U/7ikD4ZG09aRk8pQsm74CeIEbsmXH6G4MT49hBFYWYs/T13mtsbjTh8aYfrHm3lSQKaRchi7n0Ov9QY7Pn5WUtSzOY=; Expires=Wed, 08-Sep-2027 06:39:34 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7847253211757313574; Expires=Wed, 08-Sep-2027 06:39:34 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=8746586961757313574; Path=/; Domain=.yandex.ru; Expires=Tue, 08 Sep 2026 06:39:34 GMT; SameSite=None; Secure; HttpOnly\nbh=YKb0+cUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Tue, 13 Oct 2026 06:39:34 GMT; SameSite=None; Secure\r\ncache-control: private, max-age=3600\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":150032,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65478)","md5":"bb79b31042ecea9864c779c07d8d8f17","sha1":"8f870ce272c630daa35f9b58817bf697361557f5","sha256":"b2e1d27471fb381d6e169ac274d164e41b7824a27785162a65d2f105312456d3","sha512":"6f23b4a0d66f5713e71970e8202ee37e1856d8eb9faedbeb33a11021a834b80708db306b3d78d3645daee52b42e801e332312e4b57cb0677ee48891772e069e4","ssdeep":"3072:QI3cJPyFbfydJY7g8nd242Qqs5apgu8/6UFnRmDze+/3y3GPAnvYf5aGX1rfeDpT:QG+ksMtcP5apTx","tlshash":"95e31a9d7a95f4b6439360e4843f2a0ef33f5529a41d44a0ba23d4e36c3596f9223f39","first_seen":"2025-09-08T06:40:13.709696Z","last_seen":"2025-09-08T06:40:13.709696Z","times_seen":1,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":206,"dns":58,"connect":46,"send":0,"wait":181,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=98\u0026euid=f71c66c3-8758-46a9-8b79-a420d8fc5cad","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=98\u0026euid=f71c66c3-8758-46a9-8b79-a420d8fc5cad HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1757313575; expires=Wed, 08-Oct-25 06:39:35 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-frontend.weborama-tech.ru/cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296","fqdn":"cr-frontend.weborama-tech.ru","domain":"weborama-tech.ru","tld":"ru"},"ip":{"addr":"178.154.231.214","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weborama-tech.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 Aug 2025 14:42:06 GMT","end":"Tue, 15 Sep 2026 18:38:30 GMT"},"fingerprint":{"sha1":"A5:CA:D7:3C:27:83:66:F7:26:43:0B:05:21:09:FF:7A:7A:AB:7D:A9","sha256":"53:AA:89:0C:4A:26:10:43:C0:A9:5C:10:98:06:D7:D5:6A:76:CC:34:2E:77:15:88:33:37:B6:31:0C:D7:CF:0B"}}},"request":{"raw":"GET /cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296 HTTP/1.1\r\nHost: cr-frontend.weborama-tech.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM\"\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nexpires: Tue, 03 Jul 2001 06:00:00 GMT\r\nlast-modified: Mon, 08 Sep 2025 06:39:35 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":81,"connect":60,"send":0,"wait":34,"receive":0,"ssl":569},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=126\u0026euid=8a9550c4-3021-4528-54f3-60ccb01e2c13\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=126\u0026euid=8a9550c4-3021-4528-54f3-60ccb01e2c13\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1757313575; expires=Wed, 08-Oct-25 06:39:35 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":8,"dns":24,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/font-awesome.css","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/font-awesome.css HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-667f\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26239,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"a02299d7990813129efd6965e8d88485","sha1":"48649c6a330194000b63023f0f778aeef94209bd","sha256":"2d483c128b28dcf3c8dd3aacf97989b38e98dc3f9ed7af9b42e213328a633806","sha512":"eb725cffe674f57e135630e10a023332d380b636c8527c5d7461c068695e5b60e109bf6958b3dd445b88bbe1d668e3f677a03ab79c89b65aa845d3b7d31750a5","ssdeep":"384:3yajA+ArEVSIDUvnIDyYTnBrlkPvVYaJYa:5jA+A4VSIDUvnI+YTBr6PvV5JD","tlshash":"12c21eece5bf18804391e4d12386a270bb3db73d9d4a6d9cd2a2798cb1c1655c2c63cd","first_seen":"2025-09-08T06:40:13.712784Z","last_seen":"2025-09-08T06:40:13.712784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/pushy.css","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/pushy.css HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-f08\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3848,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ac0c6be8ba0620d0a68072a1e0ae590f","sha1":"4c634d63692a4458a151f2c14f9dbef459875981","sha256":"ec7c7704dff96cefde09d463320858879f5d02567828c3e3c1480527cd23f012","sha512":"b6e15d9fb18e245a28bb534b6fadb5a355096db7e516d7a67038ccda967bd2f42fcbeef15623ba6cc4fb8fd2fdd2a071e379bde43598f39f1c184294a87fc7d1","ssdeep":"","tlshash":"bf810e6027b0292ca15ac39d8bfb6f28933ce126461a9c6df74580df9d86bcc52c9653","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.715284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/js/jquery_cookie.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /js/jquery_cookie.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"23e9ff74cb0c2552dd6011453014132e","sha1":"ce47abfbdd6ec6456f106d4c5ae8dbdd0013c375","sha256":"d9fd886a81d4570e69c0c66b38c5f5a861837116ffa3fc44986fb1749a83c23a","sha512":"aacd75d4ac0623ba08d84ccae183585f0b62988916eb7dc895348fd7c0bf3958d4bb47f2e812d34bf9a4f349ff8c035bb2114217e97ea190f622cdc5af81ae0b","ssdeep":"","tlshash":"c4d0239e9043224f403221907dd321e2649c23a6b47e81ec2d437496910853dc4ca59d","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.718249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D","fqdn":"ssp.bestssp.com","domain":"bestssp.com","tld":"com"},"ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bestssp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 15:49:38 GMT","end":"Mon, 03 Nov 2025 15:49:37 GMT"},"fingerprint":{"sha1":"1C:D6:24:73:A4:E5:D7:BA:C5:01:0A:B5:3E:CE:05:12:F6:D1:18:60","sha256":"85:99:AF:BA:A2:45:DA:68:FB:82:3C:47:E2:76:DA:22:1B:35:8B:B9:84:9D:3B:2E:CC:CD:66:DD:52:1C:65:26"}}},"request":{"raw":"GET /sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D HTTP/1.1\r\nHost: ssp.bestssp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.22.0\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 126\r\nlocation: https://mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=XCQDOZAG\r\nset-cookie: uid=XCQDOZAG; Expires=Thu, 06 Sep 2035 06:39:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":928,"timings":{"blocked":391,"dns":27,"connect":63,"send":0,"wait":77,"receive":0,"ssl":359},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026uid=0700007F267ABE689605F58902A29473","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"78.24.181.219","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026uid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=0914828\u0026id=U-x1IGLiSkOJn-WygTTL2w\u0026dest=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D351%26euid%3DU-x1IGLiSkOJn-WygTTL2w%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D351\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=U-x1IGLiSkOJn-WygTTL2w; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":72,"connect":84,"send":0,"wait":58,"receive":0,"ssl":753},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/ads.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/ads.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 17\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nConnection: keep-alive\r\nETag: \"65ac2384-11\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"6f5eb1d135453e1d455cc9100621ba05","sha1":"fca401df236d05316c2555f4c2e5fcbdeebdd0b1","sha256":"ab8b6924619317a40378b8e6300d982eed7212151048bc43bd2f3706ca428621","sha512":"55f35ec196deef093090389caaad2637a218654398976418473ba3e2be2b49b00dbefe95b1121705047178c1c169f8296e16a7da6b412702b7885958a05d362b","ssdeep":"","tlshash":"496000a808802820cc2000000008000880a00000c002202200000002000ba28a0c0c0a","first_seen":"2023-03-13T15:26:07Z","last_seen":"2025-09-08T06:40:13.719279Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"test.showvid.ws/ping","fqdn":"test.showvid.ws","domain":"showvid.ws","tld":"ws"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.387Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"HEAD /ping HTTP/1.1\r\nHost: test.showvid.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gubka-bob.top/\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":59,"dns":1,"connect":16,"send":0,"wait":0,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/images/tv.jpg","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/images/tv.jpg HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/templates/charmed/css/style.css?v=1.4.7\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30890\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nConnection: keep-alive\r\nETag: \"65ac2384-78aa\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1152, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2048], baseline, precision 8, 125x125, components 3","md5":"aad946d1b5be76d8d7c40912fa32f43a","sha1":"416f062774e01e09fa70fe4c96fe59de4f365452","sha256":"480e671f35917348ea232ffe01e2d759469f630f3b4045689e60d2edf69b63e0","sha512":"135beb66c2c1f965fa035ca55b11dee1ce2820854eded3356560cc6e4e44cf8af9d0b629295b073c393eaecb08363e2671931904464625b782904f37d6b85b48","ssdeep":"384:+YNg7R9ii9i+eYNg7R9iipsnWmo6Rr8E62nEYNg70XfKx3tn9d/5bPrxoekhedEm:+YyTNiNYyT5sWvYymendSred/","tlshash":"3dd27d29ff63de12fce19678a4e5db9263737b58b7b33641386c1a043b60680ad4e147","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.72207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.145","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Jun 2025 17:12:12 GMT","end":"Tue, 16 Sep 2025 17:12:11 GMT"},"fingerprint":{"sha1":"82:3B:8D:57:59:5E:94:AB:01:1E:CC:AC:48:8F:CE:60:DB:FD:94:56","sha256":"E7:C2:EC:9D:64:5E:B9:9C:7D:BA:75:B7:CC:CA:80:9D:3B:D0:4A:3D:DF:3E:DF:03:CC:02:8E:02:E5:22:CB:D2"}}},"request":{"raw":"GET /core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 124\r\nConnection: keep-alive\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nSet-Cookie: idntfy=VUlIRVup0AuRYc9; expires=Thu, 06-Sep-2035 06:39:35 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure\nidntfy=VUlIRVup0AuRYc9; expires=Thu, 06-Sep-2035 06:39:35 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure\r\nLocation: https://mc.acint.net/match/?dp=361\u0026euid=VUlIRVup0AuRYc9\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":71,"connect":39,"send":0,"wait":28,"receive":0,"ssl":420},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/editor/jscripts/froala/editor.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/editor/jscripts/froala/editor.js?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-7e3a5\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":517029,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65376)","md5":"f1383a9aceeb03f223a9d9c68dd6a118","sha1":"89f6876010ab6630eb2c95323f37b0f5bc1699ec","sha256":"995aa05f276fa268a3d6090b48bd4f798f6aa6f1131c9af1b540115fa1730b97","sha512":"b6b8bfcf3b570bef64e9f378d6cce9bb8cc0f7f02e9ce3cdf46f03a34d1707a2309a2b042f70dbcbd0f54d614a3ce5b766801ae55672f49614964205904b0ed8","ssdeep":"6144:MD27euNOXd0wtndU0TAYFjd/nZwp/7EUJa+O7JZvl8edhGCHEl:vrNOXd1UcAYzvxUM+O1Zt8edhGd","tlshash":"acb43b9c729039b722ef206d64ef140a70379917e50ac520fc2ad9f61db8e45226bf7d","first_seen":"2023-03-10T12:34:56Z","last_seen":"2026-03-09T08:07:25.087456Z","times_seen":15,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":32,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"37.0.127.199","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ohmy.bid","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 15:12:54 GMT","end":"Sat, 18 Oct 2025 15:12:53 GMT"},"fingerprint":{"sha1":"AE:15:A3:A4:41:D3:DA:E5:B7:41:38:D6:C9:5B:70:83:47:0B:5B:C8","sha256":"0E:15:23:C8:20:5B:EE:67:6D:A1:5C:CE:0E:A4:E3:41:59:F4:F6:58:3C:C3:7B:8A:CD:2F:21:D5:DD:A6:08:AB"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-20 1.2117.9a4faefc\r\nLocation: https://mc.acint.net/match?dp=217\u0026euid=36d1ef9b-6ba1-4f81-94d5-79354d717aac\r\nSet-Cookie: uid=36d1ef9b-6ba1-4f81-94d5-79354d717aac.68be7a27.7625130edab5413d; domain=.ohmy.bid; path=/; expires=Wed, 08-Oct-2025 06:39:35 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":56,"connect":69,"send":0,"wait":43,"receive":0,"ssl":416},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=XCQDOZAG","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=XCQDOZAG HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=95\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/images/logo.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/images/logo.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 20578\r\nLast-Modified: Sun, 21 Jan 2024 21:17:18 GMT\r\nConnection: keep-alive\r\nETag: \"65ad89de-5062\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 300, 8-bit/color RGBA, non-interlaced","md5":"f54e7eafcaff7866a70e64d9e0c55562","sha1":"d79bbdbc63fffd839a2b0714c0922f21a32b5287","sha256":"b48b5b8d109f0d40ba0cdd76877008fe621ffbe47d70175c370d1d302bf9ac65","sha512":"a33b8f5e1c6be125219c4d553c1797c9891c3a7b23c926883175553aa1726c708ffffb14231e7654c2ce2f5a622b3c17fbce85b0c2c6ec266a39d21463b82b95","ssdeep":"384:NVxnW6n+tyDcFFFFFFFF6GtZFZlA3x1deXW8b+N650NceBj9YecDfGW3eDFFFFFR:vxWTlW1deX36C0NRl9UDfen","tlshash":"68929e76e841dc218212ca0afa7f71961b672ab8ca0197d4cac754153a7433dcdc3edb","first_seen":"2025-09-08T06:40:13.726147Z","last_seen":"2025-09-08T06:40:13.726147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediatoday.ru/c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D","fqdn":"mediatoday.ru","domain":"mediatoday.ru","tld":"ru"},"ip":{"addr":"194.186.91.200","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediatoday.ru","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 10:37:24 GMT","end":"Mon, 10 Nov 2025 10:37:23 GMT"},"fingerprint":{"sha1":"41:E8:9E:36:EE:6D:68:3F:BE:BC:83:A0:7C:11:F8:01:CF:FE:EF:1C","sha256":"43:4B:1E:FE:85:7C:87:6C:05:9E:2B:0A:D6:39:22:E4:BD:D7:C4:76:6B:FD:C6:44:8F:8B:15:49:A1:7E:8C:F5"}}},"request":{"raw":"GET /c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D HTTP/1.1\r\nHost: mediatoday.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 124\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nset-cookie: idntfy=VUnZUsbWsOWu9RE; expires=Thu, 06-Sep-2035 06:39:35 GMT; domain=mediatoday.ru; path=/c/; SameSite=None; Secure\nidntfy=VUnZUsbWsOWu9RE; expires=Thu, 06-Sep-2035 06:39:35 GMT; domain=mediatoday.ru; path=/core/; SameSite=None; Secure\nidntfy=deleted; path=/c; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\nidntfy=deleted; path=/core; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\r\nlocation: https://mc.acint.net/match?dp=366\u0026euid=VUnZUsbWsOWu9RE\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":104,"connect":79,"send":0,"wait":51,"receive":0,"ssl":526},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/b27318f650eea98da925.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1301824/b27318f650eea98da925.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 10581\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nexpires: Wed, 08 Sep 2055 13:06:08 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nlast-modified: Thu, 04 Sep 2025 16:47:55 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\netag: \"fb6337775c089ffbddce1715a5b1bec9\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 7\r\nx-request-id: 21481ee2c898da4e\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40882,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40840)","md5":"3530e7c3486937a95c80040199a67cbf","sha1":"a14588d575ada08d6496685bf57edc93fb7860b7","sha256":"e485ed06fa388c234b6d04249b50ea06c61b2bc6f3f032244477807f35ac009e","sha512":"284522512a5bcdfa993ca2a81ce0cc7ed65ed189d947dd180a5a283249f447eeb34db99a658ab1ccb2548e8580a1f299167e66413c3b5c6169974f0176df928a","ssdeep":"768:EZt8AnVgFZYiRYjldzngRQ9X7OzZyp4tityOaN4easKKbJW:sAgutuBq0","tlshash":"0003f8d974c1f6720157a574883f221ea37b5e25a41861c8b317e8c2ac69d8f5223fbf","first_seen":"2025-09-05T09:13:17.803786Z","last_seen":"2025-09-08T06:40:13.729653Z","times_seen":19,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":783,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=366\u0026euid=VUnZUsbWsOWu9RE","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=366\u0026euid=VUnZUsbWsOWu9RE HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2-68be7a27d41e060001c1d9d8.id.adx.com.ru/https://5--2--68be7a27d41e060001c1d9d8.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D68be7a27d41e060001c1d9d8%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D68be7a27d41e060001c1d9d8%2526r%253D","fqdn":"2-68be7a27d41e060001c1d9d8.id.adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.105.230","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 22:18:44 GMT","end":"Wed, 01 Jul 2026 22:18:43 GMT"},"fingerprint":{"sha1":"E6:83:1C:38:50:4E:B2:A7:10:AB:4C:C8:FF:8B:E1:FD:27:E6:64:8A","sha256":"E0:20:57:F5:B4:57:09:84:72:9B:96:0D:FF:15:DC:73:EF:87:2B:31:7B:C2:2C:2D:AB:67:4E:7C:C1:FB:1E:9C"}}},"request":{"raw":"GET /https://5--2--68be7a27d41e060001c1d9d8.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D68be7a27d41e060001c1d9d8%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D68be7a27d41e060001c1d9d8%2526r%253D HTTP/1.1\r\nHost: 2-68be7a27d41e060001c1d9d8.id.adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user=68be7a27d41e060001c1d9d8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.3\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://5--2--68be7a27d41e060001c1d9d8.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D68be7a27d41e060001c1d9d8%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D68be7a27d41e060001c1d9d8%2526r%253D\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":73,"dns":32,"connect":57,"send":0,"wait":59,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adnitro.pro/js/matching_code.min.js","fqdn":"adnitro.pro","domain":"adnitro.pro","tld":"pro"},"ip":{"addr":"92.63.111.219","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adnitro.pro","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 23:45:49 GMT","end":"Sun, 26 Oct 2025 23:45:48 GMT"},"fingerprint":{"sha1":"B0:98:83:C0:45:1F:1A:7B:32:CF:6D:D8:C4:88:E8:D2:81:3B:E1:1D","sha256":"BD:1F:23:32:7F:2C:85:3A:14:01:F9:A2:49:43:CE:84:C9:A7:B0:A2:A9:5C:28:FF:C3:C8:10:10:53:F7:AC:54"}}},"request":{"raw":"GET /js/matching_code.min.js HTTP/1.1\r\nHost: adnitro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 520\r\nLast-Modified: Tue, 28 Jan 2025 12:20:00 GMT\r\nConnection: keep-alive\r\nETag: \"6798cb70-208\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (520), with no line terminators","md5":"fded13b32e212918a26285c80c4e7480","sha1":"99d6c941d9f0b9d6a00dd152fdc5326e190faa40","sha256":"7725f94c6cb61834c4d4b32b0a5ca99416dd449a6fa070f8746b4d7bfd72bc61","sha512":"6460379608ea776d0868c4d8af00ca53bcb6b7577190f854839b4fad1637d78b5be415530fe454834f28bfc4bae532fe37e5853ab1e0d2422caed7a98057cd24","ssdeep":"","tlshash":"5ff0752e7b936019c12e235d497f470f5021e41b6c270244e272cd61be90dd304bb97c","first_seen":"2025-03-07T11:52:02.499879Z","last_seen":"2025-12-23T13:05:39.654404Z","times_seen":11,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1757313574345","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /oci.js?t=1757313574345 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 09 Jan 2023 08:01:12 GMT\r\netag: W/\"63bbc9c8-7dac\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32169,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32168)","md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=14","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /cmatch?dp=14 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ads.betweendigital.com/match?bidder_id=73\u0026external_user_id=0700007F267ABE689605F58902A29473\r\nset-cookie: cSyncDp7v3=1757313575; expires=Wed, 08-Oct-25 06:39:35 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=368","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /cmatch?dp=368 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/79e70f61/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:36.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"44:CB:8F:8E:D2:9D:AC:A0:56:75:9B:9E:4A:6A:65:EA:CC:43:4C:FD","sha256":"15:86:00:8E:73:47:89:3C:17:39:CA:07:A2:4C:2F:BA:E7:50:94:A6:0F:11:65:AC:23:89:31:7E:16:40:34:D5"}}},"request":{"raw":"GET /s/player/79e70f61/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10233\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 07:20:53 GMT\r\nexpires: Fri, 04 Sep 2026 07:20:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 28 Aug 2025 04:14:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 343123\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30876,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"e418f72d265a21e01d0ed1ffe7b4a88d","sha1":"44924dabe3318afa11a9f7b48bebf456ce7693ec","sha256":"028445fec5a629ee39529a73c56811af132fb6b7c485ace971e862c1a2d6762b","sha512":"575e1e17e1127273edbf1366ad3e547138bac4b003d3f3b0a7b43885ec98e094d366438afd166599c91908465f5f93447416714e1080f3c5c41ad98637d2e9c1","ssdeep":"384:9UiEg7N/0Dc4myg1Rc4Oawa/vrBw0DNOZcWL4/Zq1zO8RyzLrBOSIngd3vxnIF/V:98gBODUjBPNy4hq1hU1sa3/1A","tlshash":"a7d2d6cd77b1b4750373a5f5902f100fb23ea8aab40c8998f188d4e06cb59694667f7d","first_seen":"2025-08-25T19:47:51.505662Z","last_seen":"2025-09-08T15:19:05.502762Z","times_seen":580,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/jqueryui.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/classes/js/jqueryui.js?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2383-1785a\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96346,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18446), with CRLF line terminators","md5":"ecca5e751df3880ef918c7927c14ad60","sha1":"e353aeadc9a9527662e1247cb3f6696bee18556c","sha256":"9ed1b684383604ee8893b991a3fbb9be379377f747b69f0ffa0bc4083f31a715","sha512":"ace7f53f652869ec20c9ba19691d559f71f0b463107059706cb7a89e209210e81d123b666e15a0cfafeb9cbe6f2f7d3955d12aba06243b026925e4eece4b70a1","ssdeep":"1536:c05yNdkV1zLQlPe2Yw3kub7wwxFLn0IR0CoKdu33iiHiQJFiBPJY7yO:gNs6iyu3yiHiQJFSJeyO","tlshash":"2293198c7245352796ffe265603f660eb2376168a50a805cb03cc8ea5e7de142177fbe","first_seen":"2023-04-05T15:52:43Z","last_seen":"2026-04-04T05:20:34.786955Z","times_seen":583,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":49,"dns":1,"connect":32,"send":0,"wait":63,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/js/zakladky.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /js/zakladky.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"14ee634c8a10975c7fe7ce271211c83a","sha1":"7432997c1973af85535f5ae966e87221de4fc4fc","sha256":"0e657008f08554ac4b222c5df1ecbc26dea7ffb86294239236e1262a04c7d1c6","sha512":"741f15cedb6241c2347903b394e6853c07001a6dccb4d6cb76e695c851789ff6731aec57f20ddcde9781b36faa1f317d6d92d7063d794acaf059d21b21a162d1","ssdeep":"","tlshash":"e8d0239d9053238f4012219079c211d2554c13a6b47945f83d426487910c57dc4cb6ac","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.738734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci/?v=0.7.1\u0026uid=c9f24688-259f-4f81-a323-cbbf1707aaab\u0026dp=14\u0026tz=%2B00%3A00\u0026nc=384288\u0026aid=0700007F267ABE689605F58902A29473\u0026oid=52c23a0593a416c46c93b04c0a432175","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /oci/?v=0.7.1\u0026uid=c9f24688-259f-4f81-a323-cbbf1707aaab\u0026dp=14\u0026tz=%2B00%3A00\u0026nc=384288\u0026aid=0700007F267ABE689605F58902A29473\u0026oid=52c23a0593a416c46c93b04c0a432175 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/09ce5379a789fb3107e3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1301824/09ce5379a789fb3107e3.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5066\r\nexpires: Wed, 08 Sep 2055 13:07:23 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 04 Sep 2025 16:47:54 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"3edc102a47d1598e2c31a94979e5dec3\"\r\ncontent-encoding: br\r\nx-strm-log-split: 2\r\nx-request-id: 397ce2d3b63c9973\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15152,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15118)","md5":"baddef51b890816fad4a51d6b784bae9","sha1":"82e3291abd88862509869fd08852e8e0224b0011","sha256":"5bc210794ae27085d0ae34aeb131c6f5ac90ea22378f6461261b13eebcf8f919","sha512":"7b68f7b29260afec0dfe2c50f17889c9b400c5a2bb4e66e28d4ed2d9ea2513a20a05e5a6f52df5447e9577b159d9cce7d3484e8cde3803ea63b970fe859296f9","ssdeep":"384:jwGM8OfyTXllN2MlpW57/c+2DoeEL+PYwI:cXjfyTXllhOLc+bwI","tlshash":"0f62e7a87494b4a513db20bb413f150ff3ba6879644d80a0f222d8e97efc89d4167f6c","first_seen":"2025-09-05T07:26:16.715968Z","last_seen":"2025-09-08T06:40:13.73979Z","times_seen":54,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":26,"connect":86,"send":0,"wait":37,"receive":0,"ssl":622},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/sync/sape","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 13:05:13 GMT","end":"Tue, 28 Oct 2025 13:05:12 GMT"},"fingerprint":{"sha1":"31:D5:11:77:6F:8B:30:77:36:D0:F2:F5:1E:7B:1D:FD:4F:F1:30:F9","sha256":"2C:90:CC:F4:B5:D4:7C:71:05:04:5B:A4:C1:AF:1A:92:14:66:83:DE:98:6A:97:6F:07:C4:4D:24:BF:8C:71:4F"}}},"request":{"raw":"GET /api/sync/sape HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.20.1\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://mc.acint.net/rmatch?dp=261\u0026euid=47f664db-16c7-4945-880a-698157f81619\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261\r\nSet-Cookie: afp_cookie=gAAAAABovnon_H3G6o-7NIOar103BckqzMc5CGKRbefNwI7VnKFeem22-egSpS5AlpbE_gTUnUs-JNXieYm8AoTaqQis7ElWkD448ChTTgZDka1pOTPUXuel7KghqXnMrHazfBOkcsEXJaLhwUrBxdiUCji57URkFkpM6fq1aS6PnwrQb_c-Dcj_EJ66JPdW8tqUNbZ_u_UFdA_gpDlmGTAGyuXjPJgi-A==$; expires=Wed, 08 Oct 2025 06:39:35 GMT; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":65,"connect":81,"send":0,"wait":55,"receive":0,"ssl":551},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ck.silvermob.com/sync?pid=533\u0026uid=0700007F267ABE689605F58902A29473\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D","fqdn":"ck.silvermob.com","domain":"silvermob.com","tld":"com"},"ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.silvermob.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Tue, 18 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"70:2E:03:9D:B3:64:0A:E3:03:C3:4B:D3:B6:0D:2B:1E:EA:03:DE:6B","sha256":"A7:57:54:F6:D4:B9:E7:62:E6:BD:9E:0B:D0:E0:57:9F:BD:CE:95:C0:30:CA:8E:98:D9:F2:50:D6:28:10:E6:AE"}}},"request":{"raw":"GET /sync?pid=533\u0026uid=0700007F267ABE689605F58902A29473\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D HTTP/1.1\r\nHost: ck.silvermob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: close\r\nX-Powered-By: Express\r\nSet-Cookie: sm_uid=sm_2Yp2KpOeORhK; Domain=ck.silvermob.com; Expires=Tue, 08 Sep 2026 06:39:35 GMT; Path=/; SameSite=None; Secure\r\nx-sm-trace: refresh-2\r\nCache-Control: public, max-age=0\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T17:41:08.867085Z","times_seen":31326,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":56,"connect":35,"send":0,"wait":37,"receive":0,"ssl":575},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmr.bidderstack.com/sape/cm?user_id=0700007F267ABE689605F58902A29473","fqdn":"cmr.bidderstack.com","domain":"bidderstack.com","tld":"com"},"ip":{"addr":"185.149.242.234","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bidderstack.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 26 Dec 2024 14:42:05 GMT","end":"Wed, 14 Jan 2026 11:07:44 GMT"},"fingerprint":{"sha1":"D3:CF:38:0C:FA:18:1C:F8:E8:E3:18:35:3E:3D:E6:82:B4:44:12:C1","sha256":"C6:91:A1:27:F0:56:52:64:73:25:39:60:8B:AA:DA:0C:92:DF:DD:2B:3C:50:92:0B:D8:7F:AF:F4:5B:3C:A8:79"}}},"request":{"raw":"GET /sape/cm?user_id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: cmr.bidderstack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: image/gif\r\nContent-Length: 44\r\nConnection: keep-alive\r\nx-from: nrr-3\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":44,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f9d60352c70a2ba15616d1c9421f3844","sha1":"e9abc8bea7721a4b6a50295850d13c515006a95c","sha256":"82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9","sha512":"c236b22bcd48790ff970b8bc566061eae734e0d34c1a68cd8d6160415303e0b0b51fe5780fafe7349cf71cb10089c9f322495267eee019cc63f879727263df4b","ssdeep":"","tlshash":"49900003eb80c002c2a2c0300e0ccb802b88b030ae28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-06T18:33:49Z","last_seen":"2026-04-04T17:11:20.409622Z","times_seen":4255,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":51,"connect":80,"send":0,"wait":56,"receive":0,"ssl":551},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape?id=0700007F267ABE689605F58902A29473","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"185.175.47.157","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape?id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T17:41:08.867085Z","times_seen":31326,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":61,"connect":32,"send":0,"wait":29,"receive":0,"ssl":463},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=313","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /cmatch?dp=313 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=frame\u0026hit=sub\u0026host=api","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=frame\u0026hit=sub\u0026host=api HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kodir2.github.io/actualize.js","fqdn":"kodir2.github.io","domain":"kodir2.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /actualize.js HTTP/1.1\r\nHost: kodir2.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 29 Aug 2025 16:23:18 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"68b1d3f6-de4\"\r\nexpires: Fri, 29 Aug 2025 16:35:39 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: HIT\r\nx-github-request-id: 356F:1047EC:225E0A:228C7E:68B1D4AC\r\naccept-ranges: bytes\r\ndate: Mon, 08 Sep 2025 06:39:33 GMT\r\nvia: 1.1 varnish\r\nage: 156\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 33\r\nx-timer: S1757313573.130233,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 81b6277c9df457d88b6bbf593acf6b5ef69bca50\r\ncontent-length: 1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3556,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (361)","md5":"4b151edee35e592d98d888529550de10","sha1":"e231f21dad2838824dfcc65834c02b55f745e4e5","sha256":"0d7ee7b9f06f2c62b7b20ac07ec837945f81feeed21be60cdf69c07305f92b4c","sha512":"51668d2c8e3586666cfee6a9bd8043928d7d24f32d391303d7e98f941878e85d16b7a6868e2c8978e4b53ba62165aac20d9caec26efa86fcb9f07acb4e22e142","ssdeep":"","tlshash":"eb71d6fefb2cd072997221a8861fb0ddb93d92576c049ce2ec5c846918f4d79152adcc","first_seen":"2025-08-31T21:50:23.714408Z","last_seen":"2025-11-26T18:50:47.384295Z","times_seen":196,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":16,"dns":13,"connect":16,"send":0,"wait":20,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/editor/jscripts/froala/languages/ru.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/editor/jscripts/froala/languages/ru.js?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-5169\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20841,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (617), with CRLF line terminators","md5":"b9fb4d9c1693ed1a093358ddcbbfecd0","sha1":"9da26c4a8e5ad359483a3d0d89cb590c5b1ecf3a","sha256":"e9312ab4c50701b9f19627b89923020a56fedbf0a5b4b85f4b0f588ef52538a8","sha512":"b0f7c9277ac5781566f50519bef2b618589ea6dde71ef0fab575dfd981d63f6dd1bb45461c340cef60346bff85cab2cdf34cf9d1ab29d9a10e425ae5feb2821a","ssdeep":"192:DYtVT3hqVHRSkhxRZM6YRRROeRvRCnR/diAWIy2RcMUrTRhoRqRokR+RhR2RDjRY:Et934VbuCaZIPs1nv/kXUy4uP","tlshash":"8b9270e3c0e30a6d28e87592eb79ac6eb544765bd104d77ffc7e268bdb2062116c0706","first_seen":"2023-03-07T01:18:03Z","last_seen":"2026-03-08T17:25:16.044931Z","times_seen":59,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.videohead.tech/sync?ssp=68","fqdn":"a.videohead.tech","domain":"videohead.tech","tld":"tech"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"videohead.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 20:02:22 GMT","end":"Thu, 04 Dec 2025 20:58:36 GMT"},"fingerprint":{"sha1":"EE:12:25:A7:EB:DE:80:FF:5F:E5:46:4F:8F:9E:91:0C:CA:F8:BB:D4","sha256":"93:F1:75:92:A6:AE:DD:56:41:FC:8F:0C:66:55:F4:90:EB:C3:00:DC:CB:10:61:37:58:1F:14:D9:F4:60:C2:9E"}}},"request":{"raw":"GET /sync?ssp=68 HTTP/1.1\r\nHost: a.videohead.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbwMcvqbcApVrw%2BNRAxhc%2F2bRqzE%2BfgZIG8kpeCEQWpfK1dAjjTacbQnmPtnYkqQSIboKeN%2Fky31ctDyixVLH5dhXCJw4FTkXHLKoQau\"}]}\r\nset-cookie: prevhead=1; SameSite=None; Secure; Path=/; Domain=videohead.tech; Expires=Wed, 08 Oct 2025 09:39:35 GMT\r\ncf-ray: 97bc73161fe40b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":86,"connect":23,"send":0,"wait":153,"receive":0,"ssl":396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: text/html\r\nset-cookie: cSyncDp14v6=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp17v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp45v5=1757313574; expires=Tue, 09-Sep-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp53v5=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp62v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp67v5=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp68v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp71v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp85v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp95v4=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp98v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp104v3=1757313574; expires=Mon, 22-Sep-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp107v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp125v4=1757313574; expires=Tue, 23-Sep-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp126v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp129v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp136v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp148v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp149v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp151v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp251v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp186v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp217v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp226v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp239v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp243v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp260v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp244v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp248v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp261v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp264=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp274=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp289v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp296v3=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp312v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp313v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp368v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp331v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp337v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp351v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp361v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp353v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp362v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp366v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp390v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp399v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp394v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp415v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp420v2=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp422v1=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp424=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp431=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp433=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp444=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp203=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp450=1757313574; expires=Wed, 08-Oct-25 06:39:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9867,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (452), with CRLF, LF line terminators","md5":"78f943d634556776a1d3a0657c3cc5eb","sha1":"5628af287e055f6e60e2555b26220de050b55451","sha256":"cf7b910d247175479c4b7db3559344ed9682269a27341b02cefd6060121b8496","sha512":"8764ea67a90e4fbcc4867f2ba6eeef69381e714e45275bbed2b6608bddd4f1c640cf1c559143fc8abf11a6dd32658fd101491b88de4373528f99bb44dba19667","ssdeep":"192:DgCBBbcZ4QjUvLt4V8qvGcviGXiX/17GwAMWTvhCvx0vNbQm/vTS:DgCBBbcZVjYx4V8mGwZXiPlGhMChu2Sl","tlshash":"86129b2345c66be7262bb3c5e29427c8e432124f39f7084aee2d9957724a4fec913dc5","first_seen":"2025-09-08T06:40:13.748501Z","last_seen":"2025-09-08T06:40:13.748501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=1904420A277ABE687302057B02814AF4\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=1904420A277ABE687302057B02814AF4\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hye1eaipby4w.xh8007l.ws/x-en-x/khQ4RBAGYa8xRe8aRC8akn8xRC9AbwkBsEOSnC82FBRcRGLuMWlwj2ZZjmA3kiz2kBAakhAaRBA4RaSfzG1eRvqcRmE0kmEGkmyrShDrHiw9RvQ2zmL3SBbcSmSpSmseOrZ0jBR3zmb1SmkZRvKeSryeSCSfKB1wzvL0kmsrzGDaRBOrRvDrHtyJjmE0SiR4zBZrSrkZRBL5SCS0jBE3kBQxkGq1kGA=","fqdn":"hye1eaipby4w.xh8007l.ws","domain":"xh8007l.ws","tld":"ws"},"ip":{"addr":"141.95.45.147","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:36.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xh8007l.ws","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Jun 2025 00:00:00 GMT","end":"Sat, 13 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FA:78:F4:D3:49:E8:59:EF:41:DC:F4:76:1A:56:C6:DC:59:5D:FE:51","sha256":"5F:88:01:8E:FE:6D:8F:8C:72:DD:A0:4F:5C:D2:E8:5C:08:CF:BA:DF:D6:04:C8:85:28:18:F4:88:E5:B7:EE:9F"}}},"request":{"raw":"GET /x-en-x/khQ4RBAGYa8xRe8aRC8akn8xRC9AbwkBsEOSnC82FBRcRGLuMWlwj2ZZjmA3kiz2kBAakhAaRBA4RaSfzG1eRvqcRmE0kmEGkmyrShDrHiw9RvQ2zmL3SBbcSmSpSmseOrZ0jBR3zmb1SmkZRvKeSryeSCSfKB1wzvL0kmsrzGDaRBOrRvDrHtyJjmE0SiR4zBZrSrkZRBL5SCS0jBE3kBQxkGq1kGA= HTTP/1.1\r\nHost: hye1eaipby4w.xh8007l.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.delivembd.ws/\r\nOrigin: https://api.delivembd.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:36 GMT\r\nContent-Type: application/dash+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 1970-01-01 00:00:00\r\nPragma: no-cache\r\nVary: *\r\nAccess-Control-Allow-Origin: https://api.delivembd.ws\r\nAccess-Control-Allow-Headers: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24783,"size_decoded":0,"mime_type":"application/dash+xml","magic":"XML 1.0 document, ASCII text, with very long lines (474)","md5":"4ae7cc5e8f6f681169c49c33b5c4fc74","sha1":"e89d2ae469e5507661b4537949a0a6b4fd657daf","sha256":"2edf66ce1a124a96e1a7b31ef794dcb9aa5495192f5d68a69dacf361c317b502","sha512":"00440f502173cec28f3df78228445496c1c3f7d960fb4a15734c72820100fa36a6f7283b67f8b8c5ba154f128394244ea2f6e6f48d4ce2b8dcde1ff2ab31ff2c","ssdeep":"192:oJvnVRnJCHZD1g/suZG9sOH/gdixdDDRgFuZGssOHgRzkQCJV:oJIZDlbsOHYdixdDDYGsOHOQQCf","tlshash":"c1b2f8401ff50e42d1a4e700d668e5ad8f1fb12fd69b0f84f00d77ae4f664b9094aea6","first_seen":"2025-09-08T06:40:13.75308Z","last_seen":"2025-09-08T06:40:13.75308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":132,"dns":87,"connect":32,"send":0,"wait":42,"receive":53,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/scripts.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/scripts.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-8e6a\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32254)","md5":"c6a61f7c7f477d7270c5ae6d8ed3e2f4","sha1":"922dbae05ec3133d3927ad81efd29d5dd5116adf","sha256":"d0de606d9f80e0f50f9fc82f1b70791fdd752c2a03ffb8884515a7250b5022b1","sha512":"6c66f9450166e0d4040a67a91d0de3abc9cc5badb8a903014cb2f026c0024e4439e32d1c0e43dee56b7df794ecf5a63011d6302cf5261d442a29e740002803c0","ssdeep":"768:wzWuc+tm6ZvZjj9YgOr8L/YVs1IPzExG/erZQQjTWZ7NcGhcARrk2W:wnlsds1IPzPeVjAr1W","tlshash":"37f2b709e200372588e711e5a10ac04e73fbf6b97e17c0f076d987da616d82d86e77e6","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.756115Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm-eu.hybrid.ai/match?id=106\u0026vid=0700007F267ABE689605F58902A29473","fqdn":"dm-eu.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 04 Sep 2024 00:00:00 GMT","end":"Sun, 05 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:9A:FB:0B:9B:BA:F6:60:5C:85:23:14:04:BB:28:06:F8:94:11:9E","sha256":"33:9B:C1:FB:EA:07:A0:6E:71:00:E7:A3:D8:39:79:6B:1B:7E:2F:BE:5C:BA:62:4C:3B:1D:37:9B:63:E9:08:10"}}},"request":{"raw":"GET /match?id=106\u0026vid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: dm-eu.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 06:35:44 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 0589\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://www.acint.net\r\naccess-control-allow-credentials: true\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":14,"dns":1,"connect":22,"send":0,"wait":25,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.dsp.onetarget.ru/sape/pixel?id=0700007F267ABE689605F58902A29473","fqdn":"pixel.dsp.onetarget.ru","domain":"onetarget.ru","tld":"ru"},"ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.dsp.onetarget.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 01:10:27 GMT","end":"Sat, 11 Oct 2025 01:10:26 GMT"},"fingerprint":{"sha1":"4D:90:AC:E9:7F:FD:1A:32:A8:4E:F0:F5:A4:AC:6D:35:1D:26:9F:49","sha256":"C7:62:9B:20:A2:DA:1F:60:A1:6A:AE:D2:A6:64:74:9C:99:0E:A9:8E:FE:B5:AA:77:07:C8:8C:D1:74:0B:71:F8"}}},"request":{"raw":"GET /sape/pixel?id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: pixel.dsp.onetarget.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=5813217\u0026id=e0541764-e61c-4917-8c29-9e9feb5b2959\r\nset-cookie: USER_ID=e0541764-e61c-4917-8c29-9e9feb5b2959;max-age=2147483647;Secure;HttpOnly;SameSite=None\nSAPE_USER_ID=0700007F267ABE689605F58902A29473;max-age=30758400;Secure;HttpOnly;SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":56,"connect":32,"send":0,"wait":50,"receive":0,"ssl":423},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Df71c66c3-8758-46a9-8b79-a420d8fc5cad","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"104.26.15.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adspend.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 04:03:10 GMT","end":"Thu, 27 Nov 2025 05:00:57 GMT"},"fingerprint":{"sha1":"6C:12:DB:32:92:90:E3:9F:09:00:4D:67:1A:DE:F0:D5:7A:45:33:45","sha256":"4B:DF:1B:66:6B:3D:4B:11:5C:FB:68:FC:D1:94:39:53:4B:EA:FA:0F:BD:9D:72:BE:99:8B:11:DB:A3:3F:0A:8B"}}},"request":{"raw":"GET /check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Df71c66c3-8758-46a9-8b79-a420d8fc5cad HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: as-user=f71c66c3-8758-46a9-8b79-a420d8fc5cad\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://www.acint.net/match?dp=98\u0026euid=f71c66c3-8758-46a9-8b79-a420d8fc5cad\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5NHQDhcN0CCW%2B6Oc3ejHyWHd%2BRhYO2U5r00hSjV%2BgUb%2BY%2FBsSZfZgI9%2BnXffmDAjb3Fidi5IQaxXXztGKfXiEMfLGORDeRsizZl6s7mPZY%3D\"}]}\r\ncf-ray: 97bc73144baf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/slick-theme.css?v=1.0.7","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/slick-theme.css?v=1.0.7 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-617\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1559,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"07c4004dfe30347cf8da48d380e83ae9","sha1":"dd6ac14d2ffaadfe36838bba3529210526440fb5","sha256":"833bf0ec37d8a8c48ee876d0eb3d4c140fa7436d272d693097f005606f288e66","sha512":"dc9819d862a6c0349fb1f83745333df25a5e4a46bb743cc8eaf3585ce9b6a17e84320994c4fecdb74bbbba0523de94cc5c93fd79968fd2c21f6e3c9db2b4b418","ssdeep":"","tlshash":"6631115c47a3ca016806c4701f73520ae36ea007831aca68f7b563509f8e1c8e69a794","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.759142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/BobsBurgers.jpg","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/BobsBurgers.jpg HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 111701\r\nLast-Modified: Sat, 11 May 2024 09:17:39 GMT\r\nConnection: keep-alive\r\nETag: \"663f37b3-1b455\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, comment: \"SYSTEMAX JFIF Encoder Ver.2.0\", baseline, precision 8, 380x139, components 3","md5":"f530a0b133f04c269e7c43679a55e09e","sha1":"ff90696193fb48903dcdfe09f63a1b25e9374ca7","sha256":"28f22e1a3c99f39f8a5d3d41450e5f8e4cca6c7daeadcd6ff346171488e2f58a","sha512":"1fb9d29732b7ad487acdc788f09ac32fe56bb9a79398473fd68f1e516f7ccc204283c11ce59c46a924eddfb5ba2758f3b7a192c7bbf6429d1a52ee1c025a2dc6","ssdeep":"1536:WSdN3qwmXE5PHHjpouWpjqmXWzm/WytGf6jBTBKZIslAPWkkCztaTXROu8/4p2+S:jdN3qwCYPHDuigdGS3PWT6wkugwBXxe","tlshash":"36b31251348b18a39e2b6ffcfc5db2d450e4106b25c2d643ea4bd04be7c39f9b8568a4","first_seen":"2025-09-08T06:40:13.760263Z","last_seen":"2025-09-08T06:40:13.760263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":303,"dns":0,"connect":0,"send":0,"wait":30,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026dmp=2\u0026uid=0700007F267ABE689605F58902A29473","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"78.24.181.219","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026dmp=2\u0026uid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\nlocation: https://dmg.digitaltarget.ru/1/7686/i/i?a=4110\u0026e=BGj6hkLBTBuWQqDuHR8p0w\u0026i=7542133667397058561\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=BGj6hkLBTBuWQqDuHR8p0w; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":72,"connect":84,"send":0,"wait":55,"receive":0,"ssl":752},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match/?dp=361\u0026euid=VUlIRVup0AuRYc9","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match/?dp=361\u0026euid=VUlIRVup0AuRYc9 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmr.bidderstack.com/solta/cm?user_id=aL56JlftRMI","fqdn":"cmr.bidderstack.com","domain":"bidderstack.com","tld":"com"},"ip":{"addr":"185.149.242.234","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bidderstack.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 26 Dec 2024 14:42:05 GMT","end":"Wed, 14 Jan 2026 11:07:44 GMT"},"fingerprint":{"sha1":"D3:CF:38:0C:FA:18:1C:F8:E8:E3:18:35:3E:3D:E6:82:B4:44:12:C1","sha256":"C6:91:A1:27:F0:56:52:64:73:25:39:60:8B:AA:DA:0C:92:DF:DD:2B:3C:50:92:0B:D8:7F:AF:F4:5B:3C:A8:79"}}},"request":{"raw":"GET /solta/cm?user_id=aL56JlftRMI HTTP/1.1\r\nHost: cmr.bidderstack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Mon, 08 Sep 2025 06:39:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 44\r\nConnection: keep-alive\r\nx-from: nrr-1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":44,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f9d60352c70a2ba15616d1c9421f3844","sha1":"e9abc8bea7721a4b6a50295850d13c515006a95c","sha256":"82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9","sha512":"c236b22bcd48790ff970b8bc566061eae734e0d34c1a68cd8d6160415303e0b0b51fe5780fafe7349cf71cb10089c9f322495267eee019cc63f879727263df4b","ssdeep":"","tlshash":"49900003eb80c002c2a2c0300e0ccb802b88b030ae28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-06T18:33:49Z","last_seen":"2026-04-04T17:11:20.409622Z","times_seen":4255,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=313\u0026euid=NT_2_0700007F267ABE689605F58902A29473_1106240654072627_YJuzFG\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=313\u0026euid=NT_2_0700007F267ABE689605F58902A29473_1106240654072627_YJuzFG\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=313\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=pbd","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"93.189.58.210","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:37.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /image?source=pbd HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1757313575434; user_id=000b2432-b684-4f18-b58e-b19e6fe169ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:37 GMT\r\ncontent-length: 0\r\nlocation: https://sync.upravel.com/amberdata/sync\r\nset-cookie: user_id=000b2432-b684-4f18-b58e-b19e6fe169ca;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=000b2432-b684-4f18-b58e-b19e6fe169ca;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/js/jquery.video.js?v=2.0.7","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /js/jquery.video.js?v=2.0.7 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164; _ohmybid_cmf=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4ee6ff16def0bcdecfb5f1d7fad21402","sha1":"cdb140f7be51dec6df3fee93fd7063340380deda","sha256":"c375a981292841f21f66743c81bf2eb0cae4ddf4f3f58e53473d8cdf8d670bb7","sha512":"cae35ed69c3c684c1b9240fc0c817f88165bccdc77690265d44d6d9924a0201aaccab0b4a766532f3f76c914ba6563073656263cec7ddd79a2f9e5ff473198fa","ssdeep":"","tlshash":"b3d0239d9043624f402311907ec211d2549c23b7f47541ec2d43748a910857dc4ca5dc","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.706014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/check?sspuid=0700007F267ABE689605F58902A29473","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.4","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 06:16:05 GMT","end":"Sat, 18 Oct 2025 06:16:04 GMT"},"fingerprint":{"sha1":"63:39:BB:B3:0F:06:C3:B8:0F:8B:09:D7:EB:99:F3:72:4A:AB:94:27","sha256":"E7:AF:31:40:0B:59:D5:B3:32:9C:37:13:F5:35:8E:06:36:67:4D:FD:5A:6A:CD:46:CF:09:8C:3B:7C:E2:24:BA"}}},"request":{"raw":"GET /sync/sape/check?sspuid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":47,"connect":19,"send":0,"wait":108,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.dynotech.io/sape/sync/","fqdn":"rtb.dynotech.io","domain":"dynotech.io","tld":"io"},"ip":{"addr":"77.223.121.51","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dynotech.io","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 09:02:42 GMT","end":"Wed, 12 Nov 2025 09:02:41 GMT"},"fingerprint":{"sha1":"53:22:06:A0:67:3C:08:41:FF:A9:2A:DF:D1:F2:AB:70:AF:19:96:3B","sha256":"A5:F7:0C:D8:2E:E0:B3:E0:B3:6F:70:4A:A5:55:A5:14:6C:97:A5:DB:41:CE:05:B6:E8:0C:A5:47:38:41:19:0E"}}},"request":{"raw":"GET /sape/sync/ HTTP/1.1\r\nHost: rtb.dynotech.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":82,"connect":47,"send":0,"wait":28,"receive":0,"ssl":524},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/Disenchantment.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/Disenchantment.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 101632\r\nLast-Modified: Mon, 29 Jan 2024 21:22:13 GMT\r\nConnection: keep-alive\r\nETag: \"65b81705-18d00\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 139, 8-bit/color RGB, non-interlaced","md5":"ac33d4ac16ea06c0c4fbf722fa4820fe","sha1":"3cd8df8b8cafee45fa3cdd21dae03f8eab76cb26","sha256":"91f78f7a36b4f875d7dc1ed235cef33b4ebe9e21759087c91fd88b0568c37073","sha512":"c3288a3dbe8dd1ea2aa300b72ccf0c0a73f844b87a648c9edfc0916c0b9155b56198533aea8c5d32e3888c246b9780d5df8e916accfc5d2e53389a79619171ce","ssdeep":"3072:2mGyGzg83Jl0LdyUcx1vb4unKcCg1n1ZY:2yWAuKcCao","tlshash":"3da302dc953184a012d469902f9634dbdefa4cf227f9651cf4e21448484e6a97eb3aa3","first_seen":"2025-09-08T06:40:13.762735Z","last_seen":"2025-09-08T06:40:13.762735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":29,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.atraffic.ru/sync?ssp=20","fqdn":"a.atraffic.ru","domain":"atraffic.ru","tld":"ru"},"ip":{"addr":"104.21.7.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"atraffic.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 05:20:45 GMT","end":"Mon, 17 Nov 2025 06:19:18 GMT"},"fingerprint":{"sha1":"4A:F1:6D:A6:32:F8:48:20:8A:08:5E:72:3E:AD:2F:9E:8B:F3:BD:06","sha256":"DD:30:A1:E4:21:13:14:F0:6C:49:36:3F:A1:12:24:0E:8C:17:11:56:A5:02:5D:1D:29:38:78:DD:61:AD:B2:24"}}},"request":{"raw":"GET /sync?ssp=20 HTTP/1.1\r\nHost: a.atraffic.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nfLXV%2BErbittxRegCyWlTb24u%2FEvVboXaLNcOVbHdnDXa2hIXyAuGpTZmkaDzji4YtKqnAaEuz3wgFWA7X%2BvM5Al80UBd5iAReM\"}]}\r\nset-cookie: pretricolor=1; SameSite=None; Secure; Path=/; Domain=atraffic.ru; Expires=Wed, 08 Oct 2025 09:39:35 GMT\r\ncf-ray: 97bc7317184bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":119,"connect":27,"send":0,"wait":139,"receive":0,"ssl":497},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kinogram.best/embed/movie/634?season=4\u0026episode=6","fqdn":"api.kinogram.best","domain":"kinogram.best","tld":"best"},"ip":{"addr":"185.191.124.203","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kinogram.best","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 04:02:56 GMT","end":"Fri, 21 Nov 2025 04:02:55 GMT"},"fingerprint":{"sha1":"DA:A4:A3:23:D8:19:52:73:AC:9E:C8:AD:14:23:A4:E0:7F:CD:CC:7F","sha256":"78:E5:7E:44:E1:AB:27:2D:B8:82:64:A7:BC:A9:96:17:F5:39:4B:C9:6B:64:7B:41:20:71:5F:3A:07:AD:A4:C7"}}},"request":{"raw":"GET /embed/movie/634?season=4\u0026episode=6 HTTP/1.1\r\nHost: api.kinogram.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:34 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://gubka-bob.top\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 1970-01-01 00:00:00\r\nPragma: no-cache\r\nSet-Cookie: _uid=0bc78ab1-3835-4b75-848c-7b9ac5228878; Path=/; Domain=kinogram.best; Max-Age=31104000; Secure\r\nVary: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16758,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"a050980621a1268532ac6f40260c10fc","sha1":"bda29ab2719ea8fcd2ae100230e296d4bdc03605","sha256":"67d0f48ace50b0c019438b9349255ae9f10fecf1b4cacb3a7f22238e71b52417","sha512":"8647352691f033694d2edd5989854b981c4449ef3dd9bb00c9172e72ac7add92a65efb602c61576af0215840ef6cfffc14ff17470de582459e7ce82646cac92c","ssdeep":"192:UUTAeoiYwl+unnW3urjrwZibIXbDIyU/oE2zdpv0VTPUf41LC19UBZ+1HAAfQqay:UUTA3iWunxVIXbVE1PUfwLC1GBuE7k3r","tlshash":"0e7229feeb1c946b020510e95e3e62dd383c51378c46dde3fc6cb1582f6c66e85269a8","first_seen":"2025-09-08T06:40:13.765159Z","last_seen":"2025-09-08T06:40:13.765159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":88,"dns":20,"connect":17,"send":0,"wait":34,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/sape?uid=0700007F267ABE689605F58902A29473","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"104.26.15.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adspend.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 04:03:10 GMT","end":"Thu, 27 Nov 2025 05:00:57 GMT"},"fingerprint":{"sha1":"6C:12:DB:32:92:90:E3:9F:09:00:4D:67:1A:DE:F0:D5:7A:45:33:45","sha256":"4B:DF:1B:66:6B:3D:4B:11:5C:FB:68:FC:D1:94:39:53:4B:EA:FA:0F:BD:9D:72:BE:99:8B:11:DB:A3:3F:0A:8B"}}},"request":{"raw":"GET /sape?uid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Df71c66c3-8758-46a9-8b79-a420d8fc5cad\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4A8fDYJw9lMEaLXiON4G319xMQ%2Bh7DJVJ3TFizBElQFV3m8KxQqSRfkK9GMMPGcJ1HS0CmBA0eYE8uSKleXDdIVH51OX0I8b6nSA3VCo9U%3D\"}]}\r\nset-cookie: as-user=f71c66c3-8758-46a9-8b79-a420d8fc5cad; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=31536000\r\ncf-ray: 97bc7312eabb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":40,"connect":1,"send":0,"wait":101,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=1904420A277ABE687302057B02814AF4\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=1904420A277ABE687302057B02814AF4\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=script\u0026hit=ok\u0026sub=player\u0026time=329\u0026ref_id=14956","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=script\u0026hit=ok\u0026sub=player\u0026time=329\u0026ref_id=14956 HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"93.189.58.210","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /pbd/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1757313575434; user_id=000b2432-b684-4f18-b58e-b19e6fe169ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=000b2432-b684-4f18-b58e-b19e6fe169ca;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=000b2432-b684-4f18-b58e-b19e6fe169ca;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://1026--000b2432-b684-4f18-b58e-b19e6fe169ca.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/slick.css","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/slick.css HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-6f0\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-04-04T17:41:08.045167Z","times_seen":52252,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/syncd","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/syncd HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nlocation: /rtb/syncd?rc=1\r\nset-cookie: u=aL56JlftRMI~m0QuNdwep2mbGs-osam23PQwZ44; path=/; max-age=7776000; samesite=none; httponly; secure\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s15a;dur=0.0002\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":140,"dns":27,"connect":42,"send":0,"wait":48,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/aci.js","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /aci.js HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 8799\r\nlast-modified: Thu, 17 Oct 2024 09:42:04 GMT\r\netag: \"6710dbec-225f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 08 Sep 2025 18:39:34 GMT\r\ncache-control: max-age=43200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":31372,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31372), with no line terminators","md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":119,"dns":14,"connect":50,"send":0,"wait":46,"receive":45,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/buzzoola?u=8a9550c4-3021-4528-54f3-60ccb01e2c13\u0026f=\u0026n=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/buzzoola?u=8a9550c4-3021-4528-54f3-60ccb01e2c13\u0026f=\u0026n=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: da=UX4CYAAAAAE; u=aL56JlftRMI~m0QuNdwep2mbGs-osam23PQwZ44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: as=T72MF2i-eic; path=/rtb; max-age=604800; samesite=none; httponly; secure\nda=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\nf=; max-age=30; samesite=none; httponly; secure\nn=2; max-age=30; samesite=none; httponly; secure\r\nlocation: https://dm.hybrid.ai/match?id=414\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s13a;dur=0.0007\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":178,"dns":8,"connect":63,"send":0,"wait":78,"receive":1,"ssl":531},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hye1eaipby4w.xh8007l.ws/thumb/693032/desktop/1.webp","fqdn":"hye1eaipby4w.xh8007l.ws","domain":"xh8007l.ws","tld":"ws"},"ip":{"addr":"141.95.45.147","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:37.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xh8007l.ws","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Jun 2025 00:00:00 GMT","end":"Sat, 13 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FA:78:F4:D3:49:E8:59:EF:41:DC:F4:76:1A:56:C6:DC:59:5D:FE:51","sha256":"5F:88:01:8E:FE:6D:8F:8C:72:DD:A0:4F:5C:D2:E8:5C:08:CF:BA:DF:D6:04:C8:85:28:18:F4:88:E5:B7:EE:9F"}}},"request":{"raw":"GET /thumb/693032/desktop/1.webp HTTP/1.1\r\nHost: hye1eaipby4w.xh8007l.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 326792\r\nLast-Modified: Fri, 05 Sep 2025 08:25:43 GMT\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 1970-01-01 00:00:00\r\nETag: \"68ba9e87-4fc88\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":326792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c176ed49441d72f28ed737e4555e36b","sha1":"61e75cffc59903ff7bda86e8d2e63ca75d738e19","sha256":"bb0aa138f4165980b397b4160c99e6a3b33410241b701b3f1ea2073fe25956db","sha512":"e5e8c155e46cdce5d3f7c08da6485b64f5f9adb175b7136ec68723b8766eaf9f6ba333f4d9a0a02238d954de4049a7149275b68d50e650a1b8701352b6c0ed11","ssdeep":"6144:hxPD82RJMkcnQ4vo4Lw4thoS/pgkukSLzZaUfbUQvV2jzLKAkD:rPD82RJMY4vl5teDpLzZFzvAnLKnD","tlshash":"e3642399e4775eb33261f94be3582965b1100b2d9053d530f23bece0e701a49f2d69ba","first_seen":"2025-09-08T06:40:13.773629Z","last_seen":"2025-09-08T06:40:13.773629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":32,"dns":1,"connect":32,"send":0,"wait":43,"receive":138,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/ping/?v=0.7.1\u0026uid=c9f24688-259f-4f81-a323-cbbf1707aaab\u0026dp=14\u0026tz=%2B00%3A00\u0026nc=532303\u0026aid=0700007F267ABE689605F58902A29473\u0026dT=2025-09-08T06%3A39%3A37.346","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:37.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /ping/?v=0.7.1\u0026uid=c9f24688-259f-4f81-a323-cbbf1707aaab\u0026dp=14\u0026tz=%2B00%3A00\u0026nc=532303\u0026aid=0700007F267ABE689605F58902A29473\u0026dT=2025-09-08T06%3A39%3A37.346 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/dash.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/venom-player@0.2.91/dist/dash.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.delivembd.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 78\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.91\r\nx-jsd-version-type: version\r\netag: W/\"71-rCiEO3/NxQI/ZcdH5R8AlWKxxHg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\nage: 1714072\r\nx-served-by: cache-fra-eddf8230083-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"84eee3ca3b339eebee1fa872f1ece64a","sha1":"ac28843b7fcdc5023f65c747e51f009562b1c478","sha256":"94a1443f69cfc9942e6a9d2ed2fc644702e271683b2e703f9adf65113a430ed5","sha512":"950800fb3fcc5b88bb7db70b7b530fbbaf4d8af61ca8ea1f9e25d203337ea76199bae40845b67284e711ab65200c9bed17a65f50769bfda6d066cc1cdc89ffac","ssdeep":"","tlshash":"9eb0921bb1c53b2834af3a902ceb2d25682690a16c2640c1f72895d4642e61c1a43dc8","first_seen":"2023-03-07T01:18:03Z","last_seen":"2026-03-28T12:09:07.077207Z","times_seen":700,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /cmatch?dp=126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5--2--68be7a27d41e060001c1d9d8.stbid.ru/?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D68be7a27d41e060001c1d9d8%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D68be7a27d41e060001c1d9d8%2526r%253D","fqdn":"5--2--68be7a27d41e060001c1d9d8.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"62.109.24.241","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Apr 2025 09:20:40 GMT","end":"Sun, 24 May 2026 09:20:39 GMT"},"fingerprint":{"sha1":"CD:D0:42:9B:03:7A:27:A9:42:E1:4D:28:F3:FC:EA:D1:AC:D7:13:7E","sha256":"17:48:80:43:30:8B:5E:01:B8:65:DF:1B:22:DC:DB:13:D8:6B:DF:48:78:50:08:AB:69:B1:90:41:E5:62:3E:C4"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D68be7a27d41e060001c1d9d8%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D68be7a27d41e060001c1d9d8%2526r%253D HTTP/1.1\r\nHost: 5--2--68be7a27d41e060001c1d9d8.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.22.1\r\nDate: Mon, 08 Sep 2025 06:39:36 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://x01.aidata.io/0.gif?pid=9712851\u0026id=68be7a27d41e060001c1d9d8\u0026dest=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fdsp_id%3D162%26external_id%3D68be7a27d41e060001c1d9d8%26r%3D\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":186,"dns":39,"connect":28,"send":0,"wait":29,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/ytub.min.js?v=1.1.1","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/ytub.min.js?v=1.1.1 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-5a5\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1445), with no line terminators","md5":"dc4fde63b4dc3fa89decb1285dca269b","sha1":"67c536cb1dc091d8c32b86760f1e64ddeae0a364","sha256":"6e868a011e224f4f7a678e8748c7a9fe5a2d54078c00353fcbb618d50f6e4cb6","sha512":"97f27e4b1c3b6fd094ebd4366cc07d18d0135f6699759a0e1c2f90e64870d1702556df417a454ecb3c70fbdff9fdafb1d83ed6f2342f50da4f302fb16d2db9d4","ssdeep":"","tlshash":"0a31100dbbac6967c6aa1da7d17ea64e2721ab9bd30a2304f077710d1c8d6073dd684c","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.776893Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidvol.com/usersync?dspcsid=8\u0026redirect=1","fqdn":"ssp.bidvol.com","domain":"bidvol.com","tld":"com"},"ip":{"addr":"194.85.16.25","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidvol.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Jun 2025 18:26:30 GMT","end":"Fri, 19 Sep 2025 18:26:29 GMT"},"fingerprint":{"sha1":"F4:9D:64:52:E0:05:34:FA:38:29:83:A7:D2:A8:B1:6F:E6:2B:EB:65","sha256":"16:E2:53:2A:BC:86:D4:E8:A1:B1:42:65:AC:BA:3A:2B:7F:DF:35:13:06:AD:CF:7B:04:65:B0:96:60:22:D8:69"}}},"request":{"raw":"GET /usersync?dspcsid=8\u0026redirect=1 HTTP/1.1\r\nHost: ssp.bidvol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-request-id: 058d7a11-641b-4add-8cf9-31b90bfd4957\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: bvuid=6uilzopw3p; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None\nbvuid2=6uilzopw3p; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":1233,"connect":55,"send":0,"wait":140,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=186\u0026euid=3ccbffb3-cde8-4743-8b62-ce8ede891d6a","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=186\u0026euid=3ccbffb3-cde8-4743-8b62-ce8ede891d6a HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=68\u0026euid=NjhiZTdhMjcwODc3MjQxNg%3D%3D","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=68\u0026euid=NjhiZTdhMjcwODc3MjQxNg%3D%3D HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=script\u0026hit=ok\u0026sub=timeout5s\u0026ref_id=14956","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=script\u0026hit=ok\u0026sub=timeout5s\u0026ref_id=14956 HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/theme-classic.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/venom-player@0.2.91/dist/theme-classic.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.delivembd.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.91\r\nx-jsd-version-type: version\r\netag: W/\"3ad7-sHY4/DzLCmSPETh/mq8MDMSVgQs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\nage: 2970138\r\nx-served-by: cache-fra-eddf8230179-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 5251\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15063), with no line terminators","md5":"3817a593a783d84d3a8961e9217cfcd3","sha1":"b07638fc3ccb0a648f11387f9aaf0c0cc495810b","sha256":"4923443b03f5775bed83d4ed6d9bc317db28d767aa0a6669583d5c4ba598e098","sha512":"a664cedc0bc35e559752ced457b580effb7565800ca20b59fd4feb1f119a2e1e2d677751a0e74bed949b9fe5e798a6172a516ff7ee9dd02a98f7c85801da0730","ssdeep":"192:+BObqlFcSwm7bRxeopTYgxWiGdIJppCt+L4jQIiGV4+eOtBmi1hPXMow6Tn9:xtSFezgxWiGdInLGV4+eOTmGPXMoX9","tlshash":"6f62653e42d4d295989bcafccf3ad821641e50e6c095c36ee2e6836027d2bddf12e564","first_seen":"2025-07-30T14:51:18.006801Z","last_seen":"2025-10-09T21:00:59.603069Z","times_seen":44,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/editor/jscripts/froala/fonts/font-awesome.css?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/editor/jscripts/froala/fonts/font-awesome.css?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-6b1b\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27419,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27247), with CRLF line terminators","md5":"889308571dd8797c29a3320f0a7634a9","sha1":"ca1369f0f0528183d810acb6a88cbf9ac76e12e9","sha256":"de3a1e5c94b2ee3073e2a5970434b08e28ccbe42b1f8f4d643fa7adcf675cded","sha512":"eb85d7dc65a36c1123e9b5c148bbc4cbee74e972b8fb3ddba221bb5f71b410e766bac456b59035f22478e50d3d0c96c850327449c58fc860c6eb161a283267b7","ssdeep":"384:yi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8L:hlr+Klk3YlKfwYUf8l8yQ/2","tlshash":"17c23fe8e54c01d66731c48bff81b36862baf73dd5814d99f01f690c29d22a522c5fba","first_seen":"2023-04-05T15:52:43Z","last_seen":"2026-03-25T21:50:53.201635Z","times_seen":104,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/jquery.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/classes/js/jquery.js?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2383-14e4e\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85582,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-04T14:12:03.370729Z","times_seen":11372,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":50,"dns":1,"connect":33,"send":0,"wait":61,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/responsive.css","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/responsive.css HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 17 Apr 2024 19:37:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"662024f4-1e0d\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a0c9c30fa44db5d67d3cd21f8bb19c94","sha1":"3709324a88601abb237a3b052d49ef1d737ca614","sha256":"228583093f1e9dbde71a844ab851f11f1147dd83e87d9ac1d4bbaff67663b066","sha512":"b7fb6291e92dddcb7086a693c135ea2c5fa3e5d0b2d02676bad758513ba36640074b5995f4288b7f9275dbdf322474c3d7770fa305f2fca49684119195cbbbf5","ssdeep":"192:NIwSgW1Y5WK2HWOAWYpZX8CDe3nRkXWSWaWFlsLzWoEQ4ND+e3RSWaWkklszWo/J:xJO6M2EK2EJoYimOm","tlshash":"2bf18e5b07e263886c07b06d5dbe07162276800bba4fed29becd7644df8a2519ce17cd","first_seen":"2025-09-08T06:40:13.779927Z","last_seen":"2025-09-08T06:40:13.779927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs.agency2.ru/p?ssp=sp\u0026uid=0700007F267ABE689605F58902A29473","fqdn":"cs.agency2.ru","domain":"agency2.ru","tld":"ru"},"ip":{"addr":"23.111.107.44","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.agency2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 12:31:20 GMT","end":"Mon, 24 Nov 2025 12:31:19 GMT"},"fingerprint":{"sha1":"C7:12:7E:51:85:4C:C5:4E:2F:53:A9:C6:9E:1D:AE:59:4B:FA:08:00","sha256":"F8:6D:6B:5D:EB:46:22:AF:80:E1:D3:BF:80:61:C0:65:DD:63:E6:36:D5:35:EE:B6:C4:AA:0E:83:A2:DC:48:38"}}},"request":{"raw":"GET /p?ssp=sp\u0026uid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: cs.agency2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: fasthttp\r\nCache-Control: no-store, no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nLocation: https://www.acint.net/match?dp=186\u0026euid=3ccbffb3-cde8-4743-8b62-ce8ede891d6a\r\nSet-Cookie: uuid=3ccbffb3-cde8-4743-8b62-ce8ede891d6a; expires=Sun, 30 Aug 2026 06:39:35 GMT; domain=agency2.ru; path=/; secure; SameSite=None\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT\r\nX-Host: 23.111.107.44\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":38,"connect":45,"send":0,"wait":58,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0700007F267ABE689605F58902A29473","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.693Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":7095,"timings":{"blocked":7095,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/AmericanDad.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/AmericanDad.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 91853\r\nLast-Modified: Mon, 29 Jan 2024 21:22:04 GMT\r\nConnection: keep-alive\r\nETag: \"65b816fc-166cd\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 139, 8-bit/color RGB, non-interlaced","md5":"c67c363067369f03b8d679ff4bf9bf3d","sha1":"6608227e74510c10cab05eccbc799d808546e569","sha256":"5ecfa897c81d7943b9992daab7789d0b8e5334526d21cc8d7b57ee5d8ce00d62","sha512":"2cb7667d7534c87d11035a29d5740282e934d9cb6e0b1c194b9be0524e8a6cef55f1a4ae17f9085ad01c1a273ec9f4f7ce0e5a0a4dd6a23a439ad89ac0341030","ssdeep":"1536:f6mc+wl9khW71g20aOfqPVMcuLq7Ax76y0d+Umhoi3ze2TC0oq4md:imc+rhWOMGcYxwmuGTRZd","tlshash":"8f9312c0d87d52aa65271bf21e767d56922004d038f7c819cf6fe9bc2f45b600dd625e","first_seen":"2025-09-08T06:40:13.781622Z","last_seen":"2025-09-08T06:40:13.781622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":317,"dns":0,"connect":0,"send":0,"wait":29,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=support\u0026hit=weak-ref\u0026description=yes","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=support\u0026hit=weak-ref\u0026description=yes HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/js/zakladky.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /js/zakladky.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"14ee634c8a10975c7fe7ce271211c83a","sha1":"7432997c1973af85535f5ae966e87221de4fc4fc","sha256":"0e657008f08554ac4b222c5df1ecbc26dea7ffb86294239236e1262a04c7d1c6","sha512":"741f15cedb6241c2347903b394e6853c07001a6dccb4d6cb76e695c851789ff6731aec57f20ddcde9781b36faa1f317d6d92d7063d794acaf059d21b21a162d1","ssdeep":"","tlshash":"e8d0239d9053238f4012219079c211d2554c13a6b47945f83d426487910c57dc4cb6ac","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.738734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/images/favicon.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/images/favicon.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164; _ohmybid_cmf=1; fid=ec77ae45-c751-4d21-bdf3-8b96b5af30b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 8812\r\nLast-Modified: Sat, 20 Jan 2024 23:15:40 GMT\r\nConnection: keep-alive\r\nETag: \"65ac541c-226c\"\r\nExpires: Tue, 09 Sep 2025 06:39:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"13008d5a2f6cdee658e671010f23bd0e","sha1":"45b26c18c5dc717d45cae9573e22ac156975631c","sha256":"19f20e09f02ae554a5cc265d1d439a0147287c3e9d2b3ab966b13923a05b75a3","sha512":"a1eeb6829bc2efd657a48c0a188e4098888440c6326b22cfd237bb0249ed171cda83fd50576ad791f4e29c7b9447f16b3ec3de60a30486fa57471bb49f68770f","ssdeep":"192:mSckn4TPlaZSF0ce1PMEghDMpDY48tjeS0Bn53QUdoNdf/gZ7Rag:Jvn4Tj0LiDMpCeLlon3kog","tlshash":"c1028e0ee4a2c8d16105ee552ef1b1ad3d3b5ba445c0f0e83ceeb45324918f9c65c6c2","first_seen":"2025-09-08T06:40:13.783407Z","last_seen":"2025-09-08T06:40:13.783407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=support\u0026hit=async\u0026description=yes","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=support\u0026hit=async\u0026description=yes HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/sape2?u=0700007F267ABE689605F58902A29473","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/sape2?u=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nCookie: da=UX4CYAAAAAE; u=aL56JlftRMI~m0QuNdwep2mbGs-osam23PQwZ44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=aL56JlftRMI~m0QuNdwep2mbGs-osam23PQwZ44; path=/; max-age=7776000; samesite=none; httponly; secure\nda=8FSa9gAAAAFRfgJgAAAAAQ; path=/rtb; max-age=604800; samesite=none; httponly; secure\nf=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaL56JlftRMI%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243; max-age=30; samesite=none; httponly; secure\nn=1; max-age=30; samesite=none; httponly; secure\r\nlocation: https://cmr.bidderstack.com/solta/cm?user_id=aL56JlftRMI\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s23;dur=0.0006\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":888,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adlook.tech/sync?ssp=895","fqdn":"a.adlook.tech","domain":"adlook.tech","tld":"tech"},"ip":{"addr":"213.171.19.224","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adlook.tech","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 16:35:36 GMT","end":"Thu, 23 Oct 2025 16:35:35 GMT"},"fingerprint":{"sha1":"17:47:26:9E:40:D8:E6:2B:14:AF:73:51:58:B0:EB:4E:26:2A:04:24","sha256":"1A:24:96:2F:B7:97:B5:8A:CD:EC:68:3C:91:E0:60:90:5C:FD:DA:8A:DB:91:8D:38:1E:D2:4A:9A:B0:7B:7F:36"}}},"request":{"raw":"GET /sync?ssp=895 HTTP/1.1\r\nHost: a.adlook.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nServer: nginx/1.24.0\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-error: unknown supplier\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":118,"connect":69,"send":0,"wait":84,"receive":0,"ssl":512},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adiam.tech/sync?ssp=29","fqdn":"a.adiam.tech","domain":"adiam.tech","tld":"tech"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adiam.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 11:35:05 GMT","end":"Mon, 17 Nov 2025 12:33:45 GMT"},"fingerprint":{"sha1":"36:47:E7:83:E0:89:15:8B:FD:6E:A5:36:7F:F3:80:60:89:1F:17:B9","sha256":"D6:76:8F:96:FF:61:D9:92:27:73:6D:74:B3:78:BC:29:90:66:8B:F7:9C:8F:F4:F8:BE:3E:FB:A5:65:40:57:91"}}},"request":{"raw":"GET /sync?ssp=29 HTTP/1.1\r\nHost: a.adiam.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1f2mo0Sm34XIbDRjKNmzpBz%2Ba6T435w0y8IHHJye%2B0Lwk7HTuavhHKQHS3RvTrEZpMQtg5uUqJKxDPq3FdB%2FdR%2F4mQSry%2FZnuUo%3D\"}]}\r\nset-cookie: preadiam=1; SameSite=None; Secure; Path=/; Domain=adiam.tech; Expires=Wed, 08 Oct 2025 09:39:35 GMT\r\ncf-ray: 97bc7316fdd7b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":107,"connect":26,"send":0,"wait":123,"receive":0,"ssl":500},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.delivembd.ws","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 04:02:01 GMT","end":"Sun, 21 Sep 2025 04:02:00 GMT"},"fingerprint":{"sha1":"F8:65:49:21:82:B7:F4:70:1A:7B:4F:3B:D8:85:B1:DC:38:6B:83:99","sha256":"B5:B2:E9:4C:4E:5B:1C:26:C5:A9:9C:EA:DD:81:30:70:A4:E9:8B:10:87:B7:2D:D1:80:C0:E6:98:06:BD:7C:A8"}}},"request":{"raw":"GET /embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top HTTP/1.1\r\nHost: api.delivembd.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api1647107188.delivembd.ws/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:34 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 1970-01-01 00:00:00\r\nPragma: no-cache\r\nSet-Cookie: _uid=ebaa83b8-748f-4cba-a8a0-3e5b9b4d9ad4; Path=/; Domain=delivembd.ws; Max-Age=31104000; Secure\r\nVary: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16754,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ed392feb360df518bb3b9eb6b53edfaa","sha1":"538533becac5d9a1e38d74bd7da0773a0cbe2ca7","sha256":"fd7c857dd719e9e2dd2c0b64e233ea87f9bdfacb0421d2b72e66e57181b1f009","sha512":"0b5463721660cb75f545c6097cb1061263dbab2fae2a7d307ac04975d32f075d8dba7428607f707c8209d9f0d88a7afc6376663b60e9b168f6646c4efc3ea70a","ssdeep":"192:UUDJeoiYwl+unnW3urjrwZibIXbDIyU/oE2zdpv0VxPUf41VC19UBZ+1HAAfQqay:UUDJ3iWunxVIXbVETPUfwVC1GBuE7k3r","tlshash":"307229feeb1c946b021510e95e3e62dd383c51378c46dde3fc6cb1582f6c66e85229a8","first_seen":"2025-09-08T06:40:13.785239Z","last_seen":"2025-09-08T06:40:13.785239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":39,"dns":1,"connect":16,"send":0,"wait":42,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxltag.com/match?id=aed2070256c34c4c8098476a32bf5b32\u0026external_id=0700007F267ABE689605F58902A29473","fqdn":"pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 13:30:31 GMT","end":"Wed, 17 Sep 2025 13:30:30 GMT"},"fingerprint":{"sha1":"04:F8:46:06:7B:1C:F3:AD:81:E7:6E:9E:DC:27:7E:84:D5:F2:87:89","sha256":"CE:24:FB:EC:86:0D:8C:A7:87:37:36:A2:5F:06:B0:A7:93:CB:8B:38:61:53:DC:80:4C:9C:2F:96:53:3C:D8:1A"}}},"request":{"raw":"GET /match?id=aed2070256c34c4c8098476a32bf5b32\u0026external_id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\nlocation: https://mc.acint.net/match?dp=337\u0026euid=1oPCWAlQy\r\nset-cookie: smi_uid=1oPCWAlQy; max-age=31536000; domain=pxltag.com; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":72,"connect":85,"send":0,"wait":95,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/grid.css","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/grid.css HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-4545\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17733,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"bb10493ae1599f6fdae44142ba4456d1","sha1":"d36da73b5e3c2fb84ac69dc76ed61aa5c398b4dc","sha256":"f2cc053c8def03287eebf4f34932526b09ab9b78dbc90a4f4aecd4f0ee341958","sha512":"1ec60ba117d2bc6545ec095c4f77f8d4cfe21e7faa69026b4023e6d655983cc2e9f60931021f54e1ec33f74f722e26a279b403457532b437b4934213cf0bb3a3","ssdeep":"384:SpohjEnKZ1dn94QY/jUKvXbNFqeGFLwWC/VpHneYU1/P4XTHxhyiSdzs:Sp4fZ1dn94QY/jUKvXbNFqeGFLdC/VpD","tlshash":"6582701b1ab302195813ebee6ab8665421384097ebefec207e5d3550ef4ec4685d3f87","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.787092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/video_switches.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/classes/js/video_switches.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164; _ohmybid_cmf=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"68366a44441ee049e521c9248f9bf7ea","sha1":"6b328676efa8caa7f3de8e643ecdb9b9b09b1d08","sha256":"8b509044ee046d316c6e5cd4be49a813955388f7d515314ee75503ff68a29c84","sha512":"c11e87dccfaf7e9683607aa948bd7bc49ec980d888a013d1064273c6821298328bff73e2b6b5ac4d62db022534cc60fe4c56551c96b0da0702935a3d1435f194","ssdeep":"","tlshash":"43d0a7ae9083624a442211907dc611d2644813b7a87981ec3c876496a16857dc8da9ad","first_seen":"2025-09-08T06:40:13.787978Z","last_seen":"2025-09-08T06:40:13.787978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.linkssp.ru/cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A","fqdn":"sp.linkssp.ru","domain":"linkssp.ru","tld":"ru"},"ip":{"addr":"188.246.224.210","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.linkssp.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 14:51:07 GMT","end":"Sun, 16 Nov 2025 14:51:06 GMT"},"fingerprint":{"sha1":"D5:83:86:14:58:CC:E5:03:EE:61:C4:64:4D:C1:08:68:BF:C1:7E:DF","sha256":"F7:D3:65:5A:A1:07:B3:1D:D9:4C:C4:78:60:B0:E5:22:6B:2D:B1:6E:39:3D:A0:78:FB:44:C2:87:F9:03:9C:63"}}},"request":{"raw":"GET /cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A HTTP/1.1\r\nHost: sp.linkssp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-02 1.321.316687f\r\nLocation: https://mc.acint.net/match?dp=394\u0026euid=d1ef89b0-999f-4b55-bc3b-f139b3fab306\r\nSet-Cookie: uid=d1ef89b0-999f-4b55-bc3b-f139b3fab306.68be7a27.640f1d6f2c77e18b; domain=.linkssp.ru; path=/; expires=Wed, 08-Oct-2025 06:39:35 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":84,"connect":73,"send":0,"wait":54,"receive":0,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/sync_ok?guid=95853efe-8c7e-11f0-86e0-002590c0647c","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.4","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 06:16:05 GMT","end":"Sat, 18 Oct 2025 06:16:04 GMT"},"fingerprint":{"sha1":"63:39:BB:B3:0F:06:C3:B8:0F:8B:09:D7:EB:99:F3:72:4A:AB:94:27","sha256":"E7:AF:31:40:0B:59:D5:B3:32:9C:37:13:F5:35:8E:06:36:67:4D:FD:5A:6A:CD:46:CF:09:8C:3B:7C:E2:24:BA"}}},"request":{"raw":"GET /sync/sape/sync_ok?guid=95853efe-8c7e-11f0-86e0-002590c0647c HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://95853efe-8c7e-11f0-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/189.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/venom-player@0.2.91/dist/189.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.delivembd.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 138453\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.91\r\nx-jsd-version-type: version\r\netag: W/\"80599-eD7aY4A0rZUcO4dvQU1eDYLV0PI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\nage: 1846067\r\nx-served-by: cache-fra-etou8220077-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65475)","md5":"1893ae6cfae2491f183c6957bfaf111c","sha1":"783eda638034ad951c3b876f414d5e0d82d5d0f2","sha256":"b997508348cbb72e8657a3be8327d0dca53a2a7cdce7f84f55dc2b85669cbd41","sha512":"a7646eecd39b05c1977481fa8d278f68454e7f7f7019c3da0fe6c7559e7b56bb9837fa3e04e63ab5b7a854083f4a1c4c5e9dae52a92bb95629c912b9f1b31e9b","ssdeep":"6144:O+gwcLclmpj+MlqY1y1Q/8LoitXHIsie/uNv4mrcpZbI:OBw2QaliK4mwzs","tlshash":"66b41ac876d0f0a2428710b5983f210aa2365c6e980db054fbb5edd5bd7869e123bf7d","first_seen":"2025-08-01T23:26:54.667261Z","last_seen":"2026-03-28T12:09:07.066142Z","times_seen":368,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=frame\u0026hit=embed\u0026sub=embed\u0026type=diff\u0026label=other\u0026host=gubka-bob.top","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:36.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=frame\u0026hit=embed\u0026sub=embed\u0026type=diff\u0026label=other\u0026host=gubka-bob.top HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/skins/codemirror/js/code.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/skins/codemirror/js/code.js?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-4ac86\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (552), with CRLF line terminators","md5":"6c512304dad90f09725326cd1dbab09e","sha1":"1a044453cf93eb0a9ad999804153ec462a896a24","sha256":"66f056dcaf459407d7e2047c26f02134ea349c7b4b576a21915febfee5c4b3b0","sha512":"fdf858a9ad8f160ea015872b65712eb9e734a9cf117293323df04cf5e8d6ac1d1e573c5735b200af04ce5c07ab39843dbb544a55d01aa45297a4fa0637af60cc","ssdeep":"6144:Vy5JIu/ocV0l7In0xUbZnj7gynurnu1lVk72n+BdDtc:VyjIuJV0l7In0xUhVurubMDu","tlshash":"df544ac975953123d6d331a4a0bf020bb139ac5be80895a4f66dc6d83db49ac527ff38","first_seen":"2023-03-07T15:04:12Z","last_seen":"2026-03-25T21:50:53.178607Z","times_seen":85,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/modernizr.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/modernizr.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-2663\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9827,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9593)","md5":"198237e30ba3e64cf519e1d8028b5339","sha1":"6934499560ef958a1ba710c73b0cb6d3ab89f731","sha256":"d83c8c684c71b22436e90b2de30f4346a6691d1a40e93a19285864ee5725108a","sha512":"1f57df8333fe6d0d1933f7dd7874d60b115b2edb0184e5c65be63a0bee033ca3a2a90c138610bcd23dca882ea15253cf0e202736228b1668f426627ed4a6d9a6","ssdeep":"192:GlkoK8Wn3+DtZq1OjaSJJJkSeIUHVbqLDDhWwpy8b7z:SkoK8W4tZq1OjakrwHV8Hh1pz","tlshash":"7f12d8c97642f216879760ba50bf460ff139d86ab8184c50e059d9f8bd709f8067bf2e","first_seen":"2023-03-11T14:34:01Z","last_seen":"2026-04-04T12:15:01.275375Z","times_seen":65,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0700007F267ABE689605F58902A29473","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.184","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 10:33:19 GMT","end":"Fri, 24 Oct 2025 10:33:18 GMT"},"fingerprint":{"sha1":"73:CB:E4:07:8B:A8:CE:7D:8A:1A:81:05:89:63:AF:54:5E:AB:E3:AE","sha256":"46:32:4A:BE:51:0A:51:BD:7A:8E:10:EA:DF:90:3E:22:0A:79:9E:F3:36:E3:78:A9:A5:C9:33:8F:62:AF:8D:12"}}},"request":{"raw":"GET /match/sape?id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.23.2\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 96\r\naccess-control-allow-origin: *\r\nlocation: /match/sape?id=0700007F267ABE689605F58902A29473\u0026otcm_check=1757313575\r\nset-cookie: mpid=NjhiZTdhMjcwODc3MjQxNg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None\nmpid=NjhiZTdhMjcwODc3MjQxNg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":1009,"timings":{"blocked":448,"dns":44,"connect":52,"send":0,"wait":54,"receive":0,"ssl":393},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sape","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 06:16:05 GMT","end":"Sat, 18 Oct 2025 06:16:04 GMT"},"fingerprint":{"sha1":"63:39:BB:B3:0F:06:C3:B8:0F:8B:09:D7:EB:99:F3:72:4A:AB:94:27","sha256":"E7:AF:31:40:0B:59:D5:B3:32:9C:37:13:F5:35:8E:06:36:67:4D:FD:5A:6A:CD:46:CF:09:8C:3B:7C:E2:24:BA"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 03 Sep 2045 06:39:35 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: https://pix.bumlam.com/sync/sape/sync_ok?guid=95853efe-8c7e-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\nAccess-Control-Allow-Origin: https://acint.net\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":58,"dns":5,"connect":23,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/share.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/share.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-c98\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3224,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"eba105677edec0156a3cee2f45830adb","sha1":"1a41e7c0fb0c70991332fae2b0023a6d35a4af80","sha256":"77b923d6fd76d50e9728f2786c10de9ab04d7853b863244de8f4f9ab612f8bd3","sha512":"f070ec0c402df8be50033078b470993257512d29c09fdc0d051ab6ede5f105307b35c9ba6c5baa7b268980760da805045bd7cf244bd195944e286d288cd5d732","ssdeep":"","tlshash":"f561d23613a318369547f1759a2fb6487032651b2945bc0b7d1c40e00f249bb55f8bf8","first_seen":"2023-03-13T15:26:07Z","last_seen":"2025-09-08T06:40:13.794555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.214","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 01:31:47 GMT","end":"Fri, 07 Nov 2025 01:31:46 GMT"},"fingerprint":{"sha1":"F1:ED:A9:2E:2A:3A:BF:06:82:23:97:3A:FA:2E:19:EF:32:01:D6:54","sha256":"7B:6D:BE:74:0D:F5:EC:B3:DB:6B:DA:1C:FE:4B:21:DA:F3:26:59:55:4A:C3:9D:26:50:6E:44:74:25:A0:35:9B"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEGWi+eid7BQJz9EqBAlTliRJMrI/sT+s+nlogynOn12MG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=1904420A277ABE687302057B02814AF4\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.stiven-king.com/storage.html","fqdn":"api.stiven-king.com","domain":"stiven-king.com","tld":"com"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stiven-king.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 04:02:00 GMT","end":"Mon, 24 Nov 2025 04:01:59 GMT"},"fingerprint":{"sha1":"B3:E8:77:32:E3:99:EF:3A:C0:9B:66:28:D4:E5:71:FA:83:7B:6F:FA","sha256":"57:63:8F:22:53:64:97:C1:49:AC:EA:05:E4:C3:42:36:96:3D:61:14:4A:52:70:2C:C0:BD:77:E8:7C:16:9E:8C"}}},"request":{"raw":"GET /storage.html HTTP/1.1\r\nHost: api.stiven-king.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 1970-01-01 00:00:00\r\nPragma: no-cache\r\nVary: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":873,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"6f0af5eceb02df06d9771a821c7f1c03","sha1":"e3fadc9c79be329c255348417a56bc438ad27810","sha256":"0a92085060d2e4bffd6140b5f99fcec79ec0f82eaf5a41d16873d9c19ce00b7b","sha512":"269397bd16a92c39d443f5f2e6dbfe2e3e3307cd460ce7a4a5809c0a4171c49214dc8fcbe9f943661f5deb7d22b33eddf93a53af7dd9bda4d57974a2407235d9","ssdeep":"","tlshash":"ef11e307fa8d060043e010fe6c943d5d927eb621657dbd657c42e1003ecce1f426ae5e","first_seen":"2023-04-08T04:53:34Z","last_seen":"2026-04-04T14:02:45.825604Z","times_seen":784,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":372,"dns":59,"connect":16,"send":0,"wait":16,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=95","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /cmatch?dp=95 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0700007F267ABE689605F58902A29473\r\nset-cookie: cSyncDp241v2=1757313575; expires=Wed, 08-Oct-25 06:39:35 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=cdn\u0026hit=ini\u0026sub=ok\u0026label=diff","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=cdn\u0026hit=ini\u0026sub=ok\u0026label=diff HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jqueryui/1.12.1/jquery-ui.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 06:39:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 57137\r\ncf-ray: 97bc73080d6a569d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-3dee5\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 312743\r\nexpires: Sat, 29 Aug 2026 06:39:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lXs%2BnZ%2Fj8OhPNxMc1vsbVhoqMGaV5MWw79Zv%2B9rKaeuRKibNNGYF6Q2UpA9EryJB7%2FDOs57Z1c0Bt1apOo197wMRd86t%2Bs5W2olBGNBAIRl%2Bs08XzjkfdMT9MROSqDbJOOYnSPAk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-04-04T16:04:19.665716Z","times_seen":16471,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":21,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/TheSimpsons.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/TheSimpsons.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 92492\r\nLast-Modified: Mon, 29 Jan 2024 21:22:12 GMT\r\nConnection: keep-alive\r\nETag: \"65b81704-1694c\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 139, 8-bit/color RGB, non-interlaced","md5":"84e19f1d38ea4a612fe050e445ddaee8","sha1":"2d3138886b99333fad2f0636e22c99b1cbaec437","sha256":"5f0718d929bdd3068ba182e3a7ea569a89cf3bb2b32ae30bb89edffc0a80682e","sha512":"1013a66d5262b895f798f7d4275e9d705901deb9aa1e47ed2093017d21886455e37807d932ff32ba042e6a329cb6dc9d781ac1dec6357a4be264463685bf9b3b","ssdeep":"1536:fpNRgnWS07jSaAQlXye4z8oijtS4qxMrMKlAkw+QICdoZItAz4MGBml8KB:RM9ajZAQlXy1lihS4oMrzAcQIEoufMQG","tlshash":"d4930294ffbec3c5dd54caf645c9a103ceed83e18ec0b4e69cee550d9068295aa0b0e0","first_seen":"2025-09-08T06:40:13.797073Z","last_seen":"2025-09-08T06:40:13.797073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":33,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.utraff.com/sync?ssp=8\u0026id=0700007F267ABE689605F58902A29473","fqdn":"a.utraff.com","domain":"utraff.com","tld":"com"},"ip":{"addr":"172.67.145.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"utraff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Jul 2025 01:28:17 GMT","end":"Tue, 21 Oct 2025 02:25:54 GMT"},"fingerprint":{"sha1":"F1:89:88:96:E0:8D:79:6C:6B:6F:94:BE:CC:F9:AF:ED:FB:D5:8F:FA","sha256":"F5:0E:49:C1:75:7E:79:08:2D:28:A2:6F:15:8B:7C:11:9C:E7:78:AE:EC:20:B1:AB:02:DC:A1:C5:F4:8E:A6:C1"}}},"request":{"raw":"GET /sync?ssp=8\u0026id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: a.utraff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCFfH2SjokTbzlKM%2FIjOuHdK4rnmbFnshaLeEActanAjf4A2u1MoA5oYFluUSRk5b1bUMxjayAWoMnqhMlpWfofILH1muJYSY331cQ%3D%3D\"}]}\r\nset-cookie: preutid=1; SameSite=None; Secure; Path=/; Domain=itraff.net; Expires=Wed, 08 Oct 2025 09:39:34 GMT\npreutid=1; SameSite=None; Secure; Path=/; Domain=utraff.com; Expires=Wed, 08 Oct 2025 09:39:34 GMT\r\ncf-ray: 97bc7312dfd8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":4,"dns":33,"connect":1,"send":0,"wait":195,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=6","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 11:59:48 GMT","end":"Wed, 15 Oct 2025 12:58:32 GMT"},"fingerprint":{"sha1":"0F:EB:81:AD:E0:60:9A:C6:EC:7C:F8:DA:21:11:57:50:A3:0A:5A:6B","sha256":"CC:18:35:CD:76:F9:4E:0C:04:86:64:0F:14:59:A9:8A:A0:BD:F7:38:E6:3F:F7:B1:41:36:96:79:BA:BF:96:64"}}},"request":{"raw":"GET /sync?ssp=6 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/plain\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-error: unknown supplier\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmWIORwAx%2FGgQvehJHWN%2BV3quewe%2BJX4cmiVfJhC%2BV%2FO2ilk%2Fn2mirf1Lp8rithIDyb1hmiSyL3jgeVSB0R4eCiDZ1JsmeAFHYf%2BvA%3D%3D\"}]}\r\ncf-ray: 97bc731448c656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":73,"connect":4,"send":0,"wait":150,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"stats.myangular.life/ws?cdn","fqdn":"stats.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"162.55.243.89","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.myangular.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 04:02:50 GMT","end":"Sat, 22 Nov 2025 04:02:49 GMT"},"fingerprint":{"sha1":"6E:7E:BA:2F:50:52:A0:A0:6C:7D:FF:20:D0:52:30:38:CE:89:3B:60","sha256":"56:04:91:23:19:1D:A4:3C:A6:75:AA:2E:36:14:F1:E5:BF:4A:B8:BA:5F:8A:AE:7D:BF:0A:93:A5:8A:12:27:F8"}}},"request":{"raw":"GET /ws?cdn HTTP/1.1\r\nHost: stats.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://api.delivembd.ws\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2wipgixpIHS6yl00CwxvoQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: I1mbMhn7BSBpOmTstwPk4L77Uns=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":67,"dns":14,"connect":38,"send":0,"wait":26,"receive":0,"ssl":564},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0700007F267ABE689605F58902A29473\u0026otcm_check=1757313575","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.184","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 10:33:19 GMT","end":"Fri, 24 Oct 2025 10:33:18 GMT"},"fingerprint":{"sha1":"73:CB:E4:07:8B:A8:CE:7D:8A:1A:81:05:89:63:AF:54:5E:AB:E3:AE","sha256":"46:32:4A:BE:51:0A:51:BD:7A:8E:10:EA:DF:90:3E:22:0A:79:9E:F3:36:E3:78:A9:A5:C9:33:8F:62:AF:8D:12"}}},"request":{"raw":"GET /match/sape?id=0700007F267ABE689605F58902A29473\u0026otcm_check=1757313575 HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: mpid=NjhiZTdhMjcwODc3MjQxNg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.23.2\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 94\r\naccess-control-allow-origin: *\r\nlocation: https://www.acint.net/match?dp=68\u0026euid=NjhiZTdhMjcwODc3MjQxNg%3D%3D\r\nset-cookie: mpid=NjhiZTdhMjcwODc3MjQxNg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None\nmpid=NjhiZTdhMjcwODc3MjQxNg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.hybrid.ai/match?id=414","fqdn":"dm.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:36.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 04 Sep 2024 00:00:00 GMT","end":"Sun, 05 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:9A:FB:0B:9B:BA:F6:60:5C:85:23:14:04:BB:28:06:F8:94:11:9E","sha256":"33:9B:C1:FB:EA:07:A0:6E:71:00:E7:A3:D8:39:79:6B:1B:7E:2F:BE:5C:BA:62:4C:3B:1D:37:9B:63:E9:08:10"}}},"request":{"raw":"GET /match?id=414 HTTP/1.1\r\nHost: dm.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Sep 2025 06:35:46 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 5015\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/pushy.min.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/pushy.min.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-7d2\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2002), with no line terminators","md5":"1a1158a42a15f5eaa9e9d328762560a1","sha1":"80249e746d9d37a88457756f3f98034ee00d2fb0","sha256":"5f1a3a89f85d7d8fea248137111c5030e521d9efa3da80f95eaa2bf8ac3b6836","sha512":"b8aa6851a625b59f9651403b61f53e0f3003bdb34d6dfff44ba70c45f7511d08a7368b67457599c7afb1205d0b6eea5217f8291b3c38d978c6502b4fafca843c","ssdeep":"","tlshash":"e1419435392318a441cb2637f3efc6056934105b8d364cc1f678d49b9929bd83126e1f","first_seen":"2023-03-07T12:55:07Z","last_seen":"2026-04-04T09:39:41.509171Z","times_seen":832,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/billing/js/paygroups.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/billing/js/paygroups.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164; _ohmybid_cmf=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a7a7f835ace1bc2dfa8ec2c6267c843d","sha1":"9db8fd4493a8f853e815335452499500abfbf588","sha256":"7ee9513f4737cc9e0fa1e4bf29425e26db5f3e367f2742fe90a29afa32466048","sha512":"af36b2ea9b1ec203a9ca19d193e99c3bd835b3f70d31f0372d5aa5605595d83a01d41348923894dfc593e45db1ed78eb6b9138ca13ee5af3df16606a4859f9d5","ssdeep":"","tlshash":"40d0979fe18f115b026333d03ac703c2752401b0b9a324cc1e05e18380004bc820b54c","first_seen":"2025-09-08T06:40:13.799789Z","last_seen":"2025-09-08T06:40:13.799789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/vpaut_option_get.php?pl_id=15933","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videoroll.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 21 Jul 2025 09:28:20 GMT","end":"Sat, 22 Aug 2026 09:28:19 GMT"},"fingerprint":{"sha1":"8C:AF:96:78:0B:F3:EF:64:90:78:DE:97:85:F6:B1:B7:1F:AC:AA:90","sha256":"78:57:71:F6:CA:D5:2F:2F:80:0E:A0:CE:05:D4:6B:4D:B6:B0:2C:B9:05:91:B1:0B:60:BA:97:EC:69:E3:42:C8"}}},"request":{"raw":"GET /vpaut_option_get.php?pl_id=15933 HTTP/1.1\r\nHost: videoroll.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T17:46:58.784655Z","times_seen":554611,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":60,"dns":1,"connect":27,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adx.com.ru/sync/init/sapePlazkart?uid=0700007F267ABE689605F58902A29473","fqdn":"adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.105.114","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 20 Jun 2025 13:13:33 GMT","end":"Wed, 22 Jul 2026 13:13:32 GMT"},"fingerprint":{"sha1":"0F:34:EC:CE:BC:17:E9:5F:83:40:15:65:EF:68:EC:37:03:9C:C8:9C","sha256":"87:20:22:42:36:6F:88:B8:4D:D7:3A:11:7B:17:9F:56:7B:CD:5A:0C:00:F3:42:3C:BE:28:DE:11:8E:AD:F5:FE"}}},"request":{"raw":"GET /sync/init/sapePlazkart?uid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.3\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 114\r\ncache-control: no-store\r\nlocation: /sync/confirm/sapePlazkart?sspSysName=sapePlazkart\u0026uid=0700007F267ABE689605F58902A29473\r\nset-cookie: user=68be7a27d41e060001c1d9d8; Path=/; Domain=adx.com.ru; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":60,"connect":66,"send":0,"wait":79,"receive":0,"ssl":441},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dev.dsp1.nominaltechno.com/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0700007F267ABE689605F58902A29473\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313","fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","domain":"nominaltechno.com","tld":"com"},"ip":{"addr":"52.31.147.121","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp1.nominaltechno.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:69:09:D1:44:FC:EF:3B:DA:E5:87:AC:D5:A8:4B:29:5D:43:A6:FF","sha256":"35:F6:0A:EE:1E:A2:22:52:1B:A8:7E:C4:7A:DE:E3:03:91:D4:13:20:F0:92:EB:AB:51:5E:57:F3:43:76:BE:34"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0700007F267ABE689605F58902A29473\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313 HTTP/1.1\r\nHost: ssp-statistics.dev.dsp1.nominaltechno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=313\u0026euid=NT_2_0700007F267ABE689605F58902A29473_1106240654072627_YJuzFG\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":78,"connect":60,"send":0,"wait":33,"receive":0,"ssl":678},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/services/get_sspuid?callback=cid_68be7a263_96563553","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /services/get_sspuid?callback=cid_68be7a263_96563553 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 92\r\nset-cookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"a8630a88f82a95405171a6d83f71aacd","sha1":"d58abcdbe7b683134640f2fceffad16eb23d7953","sha256":"1af8191cf6672e791191b58e70ac6d67050e0987af887c8df4b0701750869c00","sha512":"45bc630619f958bd5b164f531b22423158c284563d34e1966a5bf080c84305899894e5e32c12103e0540824ef429a464dc2deefdda4225818cf5d1397bbbe147","ssdeep":"","tlshash":"aeb0121091d84f5995d4108114601656e111720ab5f6051c2410e42a408d1c768d58e3","first_seen":"2025-09-08T06:40:13.802216Z","last_seen":"2025-09-08T06:40:13.802216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?_=1757313573458","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"44:CB:8F:8E:D2:9D:AC:A0:56:75:9B:9E:4A:6A:65:EA:CC:43:4C:FD","sha256":"15:86:00:8E:73:47:89:3C:17:39:CA:07:A2:4C:2F:BA:E7:50:94:A6:0F:11:65:AC:23:89:31:7E:16:40:34:D5"}}},"request":{"raw":"GET /iframe_api?_=1757313573458 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com;report-uri /cspreport/allowlist\r\nexpires: Mon, 08 Sep 2025 06:39:34 GMT\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncache-control: private, max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: YSC=Yzyh9OxXNBM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Tue, 13-Dec-2022 06:39:34 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=WzscNoyG4cQ; Domain=.youtube.com; Expires=Sat, 07-Mar-2026 06:39:34 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBA; Domain=.youtube.com; Expires=Sat, 07-Mar-2026 06:39:34 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CLnUu8S5qpbF8QEQh5D2msfIjwMYh5D2msfIjwM%3D; Domain=youtube.com; Expires=Sat, 07-Mar-2026 06:39:34 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"55c2e757843ce4697d6af10931c6e0eb","sha1":"a898bd7b3cf807462b27129a8f6d25650eb67932","sha256":"3cc45c1e54f3c1cf9dc576ad37127f9659747f85bb2877f3fbc720b04b3b06bb","sha512":"db4757580115015955ecec81bc4f46a81aa99a68857c3449816c4948ec81f032973d20f97fa33d87d57b093e5a5c4602cf0f95ee9349753e68288b61c94c1fa1","ssdeep":"","tlshash":"12110b7b3d80e639865894e4a03fc31cb1a224997850cd9110cee889e61cacadd2d5ac","first_seen":"2025-09-02T17:06:30.247455Z","last_seen":"2025-09-08T15:19:05.515309Z","times_seen":530,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":165,"dns":2,"connect":26,"send":0,"wait":80,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bringads.ru/sync?ssp=17","fqdn":"a.bringads.ru","domain":"bringads.ru","tld":"ru"},"ip":{"addr":"213.171.19.229","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bringads.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Jun 2025 10:49:12 GMT","end":"Mon, 08 Sep 2025 10:49:11 GMT"},"fingerprint":{"sha1":"9E:78:B2:4C:C1:4F:B2:29:6B:DC:E6:5B:EA:7A:8F:C7:80:7E:0D:F6","sha256":"C1:24:B3:E9:2C:BE:0C:20:7E:25:C3:E3:F5:31:95:3B:92:ED:9D:71:79:5D:CD:AC:39:90:68:BE:06:FC:25:A3"}}},"request":{"raw":"GET /sync?ssp=17 HTTP/1.1\r\nHost: a.bringads.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: prebringads=1; Expires=Wed, 08 Oct 2025 09:39:35 GMT; Domain=.bringads.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":119,"connect":73,"send":0,"wait":89,"receive":0,"ssl":512},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/bcc9acd323d0444a0faf.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1301824/bcc9acd323d0444a0faf.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 23904\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"35a8d057cc87795e0ffd3c6e92caec15\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nlast-modified: Thu, 04 Sep 2025 16:47:55 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Wed, 08 Sep 2055 13:07:38 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 8\r\nx-request-id: 60ec3b057dab1d09\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122434,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"923015818fbb52ad74ad365e7a68e0ba","sha1":"3ccd87ebe375443490320490cc80d7c62a980c5c","sha256":"77515238ebb0323247f6484e4ccebf427ef7a97aa276f556d8f9cd9d9a1dca5d","sha512":"199cb24a1e68225f5aede4df1fb835d5a5992bbccf5717cfe74326574c2f325c8768a3f58985222ffdd5f4027c9275c37f5affd6f68db9405bc2464882ae5e02","ssdeep":"1536:rpqA+oUSsx6dkGs4po8pyQL89MfhuM061T1hWLB5la7SL:rxUSsgpy9u061TvWLBjamL","tlshash":"7bc31888f65174b502eb90f8513f6a0db33ba459b01584e4b76deef1ae34a0e5122f7c","first_seen":"2025-09-05T07:26:16.702624Z","last_seen":"2025-09-08T06:40:13.805148Z","times_seen":54,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":789,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=support\u0026hit=find\u0026description=yes","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=support\u0026hit=find\u0026description=yes HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /cmatch?dp=261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/71dc0830fb89dce63ad2.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1301824/71dc0830fb89dce63ad2.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 133053\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Wed, 08 Sep 2055 12:57:22 GMT\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\netag: \"e6e2ea984245ac623ca3ec821ec11632\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\nlast-modified: Thu, 04 Sep 2025 16:47:55 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 3\r\nx-request-id: fd6250e4801afab1\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":706570,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"b53609bd5957a918f3a5c4b75ac73bc7","sha1":"ff112de3fc15926c4b2abce866aacd75a0bbf844","sha256":"dae8b55e5a0533d756f0c6ec2a2013f8e2f34ce746a6af9c72e08e9c5bea72fe","sha512":"e3f44d5ae7486575b8943558e0dadcd9cc99244c0874eea9ca4199e8498aa2f9dbc7b8fb50e7ee65d721aa841261ead28343123880085f7ee8ad71a39dd476e6","ssdeep":"12288:5f044f5LonhBNnzBHO3puGj2lkOhbR8aASBkqjcINKc:5f0LNqO3puGj2yOBR/ASBkqjcINKc","tlshash":"71e4e8d9fa5070b542e790e9c03f160ea23f751a700994e4b726ede16878a8f6123f7d","first_seen":"2025-09-05T07:26:16.693661Z","last_seen":"2025-09-08T06:40:13.80659Z","times_seen":54,"resource_available":true,"data":null}},"time_used":933,"timings":{"blocked":-1,"dns":26,"connect":135,"send":0,"wait":14,"receive":15,"ssl":710},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=script\u0026hit=ok\u0026sub=cdn\u0026time=259\u0026ref_id=14956","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=script\u0026hit=ok\u0026sub=cdn\u0026time=259\u0026ref_id=14956 HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0700007F267ABE689605F58902A29473\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.68","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzzoola.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AD:3D:5A:FB:EA:0C:06:C6:DD:3E:69:73:36:2A:74:3B:95:70:1E:67","sha256":"73:D5:51:B5:32:C9:CE:3F:65:12:83:12:96:96:39:A9:AD:83:3D:BB:9B:DD:F5:77:84:D8:C9:2A:75:F5:D4:48"}}},"request":{"raw":"GET /cookiesync/dsp/sape-banner?uid=0700007F267ABE689605F58902A29473\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nCookie: uuid=8a9550c4-3021-4528-54f3-60ccb01e2c13\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 156\r\nlocation: https://mc.acint.net/rmatch?dp=126\u0026euid=8a9550c4-3021-4528-54f3-60ccb01e2c13\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/js/listen-player.js","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.delivembd.ws","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 04:02:01 GMT","end":"Sun, 21 Sep 2025 04:02:00 GMT"},"fingerprint":{"sha1":"F8:65:49:21:82:B7:F4:70:1A:7B:4F:3B:D8:85:B1:DC:38:6B:83:99","sha256":"B5:B2:E9:4C:4E:5B:1C:26:C5:A9:9C:EA:DD:81:30:70:A4:E9:8B:10:87:B7:2D:D1:80:C0:E6:98:06:BD:7C:A8"}}},"request":{"raw":"GET /js/listen-player.js HTTP/1.1\r\nHost: api.delivembd.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 1970-01-01 00:00:00\r\nLast-Modified: Sun, 20 Apr 2025 18:57:57 GMT\r\nPragma: no-cache\r\nVary: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2173,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c6887db2427e1d808d93574f28e79ecd","sha1":"cc4b86a6c9f4321ff2e37a1a22754c99bfd946be","sha256":"ddd6b7873cdb5e272393254bb9afc90a18058bd6bd3b474f80bc8a4655bd8bc0","sha512":"956d5e0223a69418dd51a7e4ac9b5bb0b263988cf51447f6f3ba33405c058c3f966d05399f5d81428bb09b011d27cba82da2b6afe950f14a2f70bccdce469898","ssdeep":"","tlshash":"2c413109fb88dc2141b772f34f17a26e7430514485874f59fc8aaaf96a9d2bb0e65d0c","first_seen":"2024-11-12T13:00:30.036653Z","last_seen":"2026-04-04T14:02:45.795941Z","times_seen":519,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":26,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/e081b95eae982706f4cc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1301824/e081b95eae982706f4cc.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3561\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=946708560\r\nexpires: Wed, 08 Sep 2055 12:58:35 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 04 Sep 2025 16:47:56 GMT\r\ncontent-encoding: br\r\netag: \"3092f99957ec3e1be27fd9fbec4590b0\"\r\nx-strm-log-split: 3\r\nx-request-id: 9775aad88cb687ba\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9211,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9177)","md5":"49c6f6cb0607960b6f505b0dcd302d97","sha1":"0d41413b8ab620685a10e321b7de7ce8b6232320","sha256":"65427d68ab4ea74d924ae2fe16de03c7d537bfe6cc7aed67944f439f0d42ff5b","sha512":"952f007b9fdccdb78ce74a604f3331b84d3860da2a82a4e78d2fdcbec08df78da2c9831492c2843a820ee1d1898e8ff03726f4588f2ca3d9f8e97fbe7bd1c8de","ssdeep":"192:+w3gNinD7umI+xbmiwv8Y5gUT0tWGOpjsZYPe/W6UGcMrI:+wQNiDdxaiwReUT0t1ONjPe/W6UGcMM","tlshash":"11121a8b33b9a87786b75170b42f250e92364107242dd4e4e3d6d9a228f744fae13f0e","first_seen":"2025-09-05T09:13:17.815918Z","last_seen":"2025-09-08T06:40:13.808958Z","times_seen":25,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":781,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=217\u0026euid=36d1ef9b-6ba1-4f81-94d5-79354d717aac","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=217\u0026euid=36d1ef9b-6ba1-4f81-94d5-79354d717aac HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"t3.zcvh.net/v1/ws","fqdn":"t3.zcvh.net","domain":"zcvh.net","tld":"net"},"ip":{"addr":"148.251.21.144","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zcvh.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Aug 2025 04:02:25 GMT","end":"Fri, 21 Nov 2025 04:02:24 GMT"},"fingerprint":{"sha1":"90:02:2D:F0:66:90:A4:07:E5:04:71:AD:A9:C7:85:19:C6:15:8A:15","sha256":"F7:E7:F8:4C:1E:AE:97:E5:88:83:3A:CF:8A:6E:00:54:FB:7F:42:A2:8A:9B:3E:1C:2B:41:75:A1:F6:63:46:27"}}},"request":{"raw":"GET /v1/ws HTTP/1.1\r\nHost: t3.zcvh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://api.delivembd.ws\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8QgQL+XUGdE77nUBFeelaw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: eUmY5fUCIokCljBODjfivgd3CUQ=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":2,"connect":25,"send":0,"wait":25,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/js/vid_vpaut_script.js","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videoroll.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 21 Jul 2025 09:28:20 GMT","end":"Sat, 22 Aug 2026 09:28:19 GMT"},"fingerprint":{"sha1":"8C:AF:96:78:0B:F3:EF:64:90:78:DE:97:85:F6:B1:B7:1F:AC:AA:90","sha256":"78:57:71:F6:CA:D5:2F:2F:80:0E:A0:CE:05:D4:6B:4D:B6:B0:2C:B9:05:91:B1:0B:60:BA:97:EC:69:E3:42:C8"}}},"request":{"raw":"GET /js/vid_vpaut_script.js HTTP/1.1\r\nHost: videoroll.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 64750\r\nLast-Modified: Thu, 27 Feb 2025 12:31:57 GMT\r\nConnection: keep-alive\r\nETag: \"67c05b3d-fcee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64750,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8591), with CRLF line terminators","md5":"0e42ed2bc445a40dd71ecdd77bce2231","sha1":"642b53ff7185c1da2dddb8b4bbebabf0a1ff615b","sha256":"70b2aeb20f4a1e808b3532334355d38cecbe71b817a71d7f586c7763b8e21ed0","sha512":"376c370e633b98702db8e40815df19a42bce6de751f0e2a8a43d438583189118d53554311ed6fa00ca90786f32e158f3ac21cd08a61663e38bb4069f4c2c8457","ssdeep":"768:91XZdKV7S+tuXsKt8XIqtowlmbtrm+n/y2aH2:XXZkFS+tuFt8XIqtowlmbtrm+n/y2aW","tlshash":"5353c73f1965143b8ab66b3fab2ab048fd31902b174145203d5c69a57f74da061f2ff8","first_seen":"2025-03-03T02:31:56.606478Z","last_seen":"2025-10-01T23:24:06.827394Z","times_seen":99,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":17,"connect":36,"send":0,"wait":57,"receive":31,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1026--000b2432-b684-4f18-b58e-b19e6fe169ca.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd","fqdn":"1026--000b2432-b684-4f18-b58e-b19e6fe169ca.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"188.120.241.47","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:37.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Apr 2025 09:20:40 GMT","end":"Sun, 24 May 2026 09:20:39 GMT"},"fingerprint":{"sha1":"CD:D0:42:9B:03:7A:27:A9:42:E1:4D:28:F3:FC:EA:D1:AC:D7:13:7E","sha256":"17:48:80:43:30:8B:5E:01:B8:65:DF:1B:22:DC:DB:13:D8:6B:DF:48:78:50:08:AB:69:B1:90:41:E5:62:3E:C4"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd HTTP/1.1\r\nHost: 1026--000b2432-b684-4f18-b58e-b19e6fe169ca.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.22.1\r\nDate: Mon, 08 Sep 2025 06:39:37 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://sync.upravel.com/image?source=pbd\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":157,"dns":52,"connect":27,"send":0,"wait":27,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.adx.bid/match/sape?eid=0700007F267ABE689605F58902A29473","fqdn":"id.adx.bid","domain":"adx.bid","tld":"bid"},"ip":{"addr":"104.26.1.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adx.bid","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 22:30:39 GMT","end":"Tue, 14 Oct 2025 23:30:27 GMT"},"fingerprint":{"sha1":"9F:8B:0D:55:C3:36:98:54:13:AD:3D:E8:21:23:33:8B:53:CA:FB:AD","sha256":"B8:D5:DA:80:E6:19:29:00:37:52:68:8C:E5:65:03:C3:BA:D3:E3:43:DB:AA:86:6F:B0:88:DE:A6:1D:62:D4:A6"}}},"request":{"raw":"GET /match/sape?eid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: id.adx.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opl1aTuzW0Rn6jcRw228GKRvhjXEtSXsdy9uANHVG2F0k1BIT0XhYTYLmADr%2FsvsH09OSXhwo9rdYeJrThD6oIJ%2BPjGO1%2FYXZ%2FQ%3D\"}]}\r\nset-cookie: rid=A1TGS2doidPqoJGVUWT74Z9aXd; HttpOnly; SameSite=None; Secure; Path=/; Domain=adx.bid; Expires=Wed, 10 Sep 2025 18:39:35 GMT\r\ncf-ray: 97bc7319097449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df16d33739defe9bda1f4c45d36fd7a7","sha1":"ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50","sha256":"90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f","sha512":"dbb699ffbdb377e503e352b44340b2504c096b2f74e6b37c695d59d89656ea1eb825f80f6790a8cce866102339eec9d2b6daaa7c8c180db726036f2808903bc7","ssdeep":"","tlshash":"33800003c2808002c2f2c2308a080302bb88a0200228038e80ae20a8fc3b2a00c82000","first_seen":"2023-04-09T07:50:54Z","last_seen":"2026-04-03T13:16:06.708618Z","times_seen":2077,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":254,"dns":37,"connect":10,"send":0,"wait":63,"receive":0,"ssl":588},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=support\u0026hit=opus\u0026description=MS_true","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=support\u0026hit=opus\u0026description=MS_true HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/js/jquery_cookie.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /js/jquery_cookie.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"23e9ff74cb0c2552dd6011453014132e","sha1":"ce47abfbdd6ec6456f106d4c5ae8dbdd0013c375","sha256":"d9fd886a81d4570e69c0c66b38c5f5a861837116ffa3fc44986fb1749a83c23a","sha512":"aacd75d4ac0623ba08d84ccae183585f0b62988916eb7dc895348fd7c0bf3958d4bb47f2e812d34bf9a4f349ff8c035bb2114217e97ea190f622cdc5af81ae0b","ssdeep":"","tlshash":"c4d0239e9043224f403221907dd321e2649c23a6b47e81ec2d437496910853dc4ca59d","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.718249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/libs.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/libs.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-ba8\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1479)","md5":"742dbbf251ac1b9f12d25d69cdae684e","sha1":"ef2242ccc9a4dba98336de5b96bfe6a1daf75618","sha256":"41268e680ca73d5330f40f1d1df14b4267b3a71fae8a1063e0969e47c6059bd7","sha512":"97f8f0ebfb1d69dfa936aa3cd7cb6b5dcc12feb9d4df9d3c46b8fae04247877b2d990c4c9e4dd15fdc332a6a3fdbc67b33dd1306728ccfcedc49030af1fe5e31","ssdeep":"","tlshash":"5b511f2dff9e2aca01667463100f44cc73b8ff524a03cc19ad5c50e87da9555b6aaf1d","first_seen":"2023-03-14T07:58:03Z","last_seen":"2025-09-08T06:40:13.811291Z","times_seen":2,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/syncd?rc=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/syncd?rc=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: u=aL56JlftRMI~m0QuNdwep2mbGs-osam23PQwZ44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=aL56JlftRMI~m0QuNdwep2mbGs-osam23PQwZ44; path=/; max-age=7776000; samesite=none; httponly; secure\nda=UX4CYAAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\r\nlocation: https://exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3D%26n%3D1\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s15a;dur=0.0004\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026uid=0700007F267ABE689605F58902A29473","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 06:16:05 GMT","end":"Sat, 18 Oct 2025 06:16:04 GMT"},"fingerprint":{"sha1":"63:39:BB:B3:0F:06:C3:B8:0F:8B:09:D7:EB:99:F3:72:4A:AB:94:27","sha256":"E7:AF:31:40:0B:59:D5:B3:32:9C:37:13:F5:35:8E:06:36:67:4D:FD:5A:6A:CD:46:CF:09:8C:3B:7C:E2:24:BA"}}},"request":{"raw":"GET /?src=sap1\u0026uid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 03 Sep 2045 06:39:35 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: //sync.bumlam.com/?src=sap1\u0026s_data=CAIQARin9PnFBmIgMDcwMDAwN0YyNjdBQkU2ODk2MDVGNTg5MDJBMjk0NzOiARCVhT7-jH4R8IbgACWQwGR8\r\nETag: 95853efe-8c7e-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":48,"connect":20,"send":0,"wait":108,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dsp.nt.technology/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0700007F267ABE689605F58902A29473\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368","fqdn":"ssp-statistics.dsp.nt.technology","domain":"nt.technology","tld":"technology"},"ip":{"addr":"52.213.164.16","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp.nt.technology","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 15 Jan 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C2:37:6A:CC:E8:44:B1:19:D2:4B:0D:0B:C2:32:F7:6E:7F:4B:49:3E","sha256":"D6:68:84:30:34:51:0A:CA:62:C7:16:62:E6:3B:C7:B0:BF:04:97:03:A7:C8:87:B8:32:98:C7:1B:2B:BE:80:75"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0700007F267ABE689605F58902A29473\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368 HTTP/1.1\r\nHost: ssp-statistics.dsp.nt.technology\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=368\u0026euid=NT_2_0700007F267ABE689605F58902A29473_3592641471344566_YgyNWo\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":62,"connect":48,"send":0,"wait":36,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nset-cookie: i=/zOlgdnQlbhN2HuHZA6cuMryVHNj8XREw1ldnpi8XPNdf+DGTGPUXT0eNacEI9IsC2ObnLIQRm1R/GytQYa6eI80eLk=; Expires=Wed, 08-Sep-2027 06:39:34 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8013945821757313574; Expires=Wed, 08-Sep-2027 06:39:34 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=4973960271757313574; Path=/; Domain=.yandex.ru; Expires=Tue, 08 Sep 2026 06:39:34 GMT; SameSite=None; Secure; HttpOnly\nbh=YKb0+cUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Tue, 13 Oct 2026 06:39:34 GMT; SameSite=None; Secure\r\ncache-control: private, max-age=3600\r\netag: \"06d123d55c1340f3ce67a727c4f71b32-1301824\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-type: text/javascript; charset=utf-8\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ntiming-allow-origin: *\r\nexpires: Mon, 08 Sep 2025 07:39:34 GMT\r\nx-yandex-req-id: 1757313574477991-16042770834101394582-balancer-l7leveler-kubr-yp-klg-325-BAL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":448069,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"7e6e9483b581a0aa1fb43df22c9bf319","sha1":"c6c376f822ac3fa3c6cd2d84bf3b74b715571d9e","sha256":"817e661e7be518919a631e26562dbab5033cd5692688a8835253a4cec7be03e4","sha512":"db61f75e4ea0df92d14264e711854544f36999763eced74204468a41001f02270543a0b1bedff8ba8402b0fd80007c97af9284c4e6f7691914efb3112bf4282f","ssdeep":"6144:eCn7oNCcuS4WDGj/6IxjVl4PzghzER8toio0bYzo:eCn7okcVI/l4PzgSWt3bYE","tlshash":"3394f9e97565b4f202e391e5843f160fe33b6929741d90a1b722d8d1ac29d5f2223f3e","first_seen":"2025-09-08T06:40:13.812599Z","last_seen":"2025-09-08T06:40:13.812599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":198,"dns":7,"connect":43,"send":0,"wait":52,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=support\u0026hit=u8\u0026description=yes","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=support\u0026hit=u8\u0026description=yes HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adx.com.ru/sync/confirm/sapePlazkart?sspSysName=sapePlazkart\u0026uid=0700007F267ABE689605F58902A29473","fqdn":"adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.105.114","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 20 Jun 2025 13:13:33 GMT","end":"Wed, 22 Jul 2026 13:13:32 GMT"},"fingerprint":{"sha1":"0F:34:EC:CE:BC:17:E9:5F:83:40:15:65:EF:68:EC:37:03:9C:C8:9C","sha256":"87:20:22:42:36:6F:88:B8:4D:D7:3A:11:7B:17:9F:56:7B:CD:5A:0C:00:F3:42:3C:BE:28:DE:11:8E:AD:F5:FE"}}},"request":{"raw":"GET /sync/confirm/sapePlazkart?sspSysName=sapePlazkart\u0026uid=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user=68be7a27d41e060001c1d9d8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.3\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 349\r\ncache-control: no-store\r\nlocation: https://2-68be7a27d41e060001c1d9d8.id.adx.com.ru/https://5--2--68be7a27d41e060001c1d9d8.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D68be7a27d41e060001c1d9d8%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D68be7a27d41e060001c1d9d8%2526r%253D\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=261\u0026euid=47f664db-16c7-4945-880a-698157f81619\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=261\u0026euid=47f664db-16c7-4945-880a-698157f81619\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=261\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api1647107188.delivembd.ws/embed/movie/634?season=4\u0026episode=6","fqdn":"api1647107188.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.delivembd.ws","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 04:02:01 GMT","end":"Sun, 21 Sep 2025 04:02:00 GMT"},"fingerprint":{"sha1":"F8:65:49:21:82:B7:F4:70:1A:7B:4F:3B:D8:85:B1:DC:38:6B:83:99","sha256":"B5:B2:E9:4C:4E:5B:1C:26:C5:A9:9C:EA:DD:81:30:70:A4:E9:8B:10:87:B7:2D:D1:80:C0:E6:98:06:BD:7C:A8"}}},"request":{"raw":"GET /embed/movie/634?season=4\u0026episode=6 HTTP/1.1\r\nHost: api1647107188.delivembd.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 1970-01-01 00:00:00\r\nPragma: no-cache\r\nSet-Cookie: _uid=3d965072-7323-4224-bfd1-98ca066dd237; Path=/; Domain=delivembd.ws; Max-Age=31104000; Secure\r\nVary: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16784,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"715800ed11a2fc8f18e1c1f1ad18aaba","sha1":"9847247722fb1d939e92b2defcae017bc3941b3f","sha256":"073287b33c60ae958d6b3d80d28dc2a49c094856058c25c8fe21851d8fa34064","sha512":"440a1d6334f0295fe45e63016470267a119088847e84a5a3caf037500d847e49f03bf124c62c778759c9d8e14a18bd3def5d02da65d3f1c6169350708803b900","ssdeep":"384:UU6hL3iWunxVIXbVEEPUfwyC1GBuE7k3b:vwZunxMZPUoyC1GBuEg3b","tlshash":"627218feeb1c946b020510e99e3e62dc383c51378c46cde2fc6cb5582f5c66e8526da8","first_seen":"2025-09-08T06:40:13.813838Z","last_seen":"2025-09-08T06:40:13.813838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":145,"dns":92,"connect":16,"send":0,"wait":39,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.lotus-dsp.ru/sync?ssp=Sape\u0026id=0700007F267ABE689605F58902A29473","fqdn":"a.lotus-dsp.ru","domain":"lotus-dsp.ru","tld":"ru"},"ip":{"addr":"213.171.19.214","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lotus-dsp.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 09:36:57 GMT","end":"Tue, 11 Nov 2025 09:36:56 GMT"},"fingerprint":{"sha1":"B9:25:60:CF:72:1A:3D:0A:3D:1D:26:EF:98:57:36:58:25:80:DA:7C","sha256":"43:89:6E:BA:7D:4F:35:B6:9F:3F:B1:48:39:21:8C:7B:EF:C0:C5:89:AD:0F:09:86:E7:22:DC:01:94:B0:F6:17"}}},"request":{"raw":"GET /sync?ssp=Sape\u0026id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: a.lotus-dsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: adpreudid=1; Expires=Wed, 08 Oct 2025 09:39:35 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":966,"timings":{"blocked":256,"dns":37,"connect":69,"send":0,"wait":42,"receive":0,"ssl":529},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=support\u0026hit=av1\u0026description=MS_true","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=support\u0026hit=av1\u0026description=MS_true HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?cat=support\u0026hit=wasm\u0026description=wasm%20dc","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?cat=support\u0026hit=wasm\u0026description=wasm%20dc HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/rmatch?dp=71\u0026euid=000b2432-b684-4f18-b58e-b19e6fe169ca\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /rmatch?dp=71\u0026euid=000b2432-b684-4f18-b58e-b19e6fe169ca\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://sync.upravel.com/pbd/sync\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/venom-player@0.2.91/dist/player.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/venom-player@0.2.91/dist/player.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.delivembd.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.91\r\nx-jsd-version-type: version\r\netag: W/\"b135a-+IEvBz9910CaQUua8PKkxTpQ05Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\nage: 2612916\r\nx-served-by: cache-fra-eddf8230134-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 192504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":725850,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65460)","md5":"8b5cac8db1cbc5a3d8c50d86d3abe19a","sha1":"f8812f073f7dd7409a414b9af0f2a4c53a50d396","sha256":"866962a8f99f293c19bea8956ca02c6bf9adc43db31b0effdf1964bfd73f657d","sha512":"18cddea74b04437bb050f8e867134c55f5622d0cf9d2821cda9545f75b42a0de2df23b0eec6719aec8ccf33da335f0a32e83f37d1fcfc9f44988166ddb2cba8e","ssdeep":"12288:tcYViuwJL/TPfX818p898beIeZWeWRhv/Hf2C6/nEYIs:tcqWLjX818p898beIeZWeWRhv///6/ks","tlshash":"5df419ddb2d2f0624393b078407f510bb33a6915984c8158f236e9d5ae79a8e6237f3d","first_seen":"2025-07-30T14:51:17.880266Z","last_seen":"2025-10-09T21:00:59.602176Z","times_seen":49,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":26,"connect":0,"send":0,"wait":30,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=1904420A277ABE687302057B02814AF4","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=14\u0026euid=1904420A277ABE687302057B02814AF4 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=433\u0026euid=18b02708-116c-4050-911a-f38aea612664","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=433\u0026euid=18b02708-116c-4050-911a-f38aea612664 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/FamilyGuy.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/FamilyGuy.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 88737\r\nLast-Modified: Mon, 29 Jan 2024 21:22:11 GMT\r\nConnection: keep-alive\r\nETag: \"65b81703-15aa1\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 139, 8-bit/color RGB, non-interlaced","md5":"e9452e9b037b6217687dfc21b188b377","sha1":"88ea867a84d44acc61904099cc7949f282aa5c58","sha256":"ea6873d8f8173efc8ffc66799d18096b1d73ad2dad630a5fa16cfd8d95224d70","sha512":"a8252f7154db29428462d56e6280f99ce59d9b1b076b27f76fe923148ffbe32802ce70d2114c0ec992a6812ea14596e7a6b1ba422fbdf69112bb07cf32ea6ab2","ssdeep":"1536:fzMpMqGVVJNacpjufy9Wa0wnVPTZ5mva3fSPp80MoOgPDEvyhkosuE3wvpM:HqGVVLasju698qNTLmvMfsp4KPDIydst","tlshash":"6e830282f1f65a47876724411dce6069023ef49d096781f79cabadebc09542fc728bec","first_seen":"2025-09-08T06:40:13.81549Z","last_seen":"2025-09-08T06:40:13.81549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape_ex?id=0700007F267ABE689605F58902A29473","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"185.175.47.157","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape_ex?id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T17:41:08.867085Z","times_seen":31326,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":54,"connect":32,"send":0,"wait":27,"receive":0,"ssl":386},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/49769e4b7e784fec23d3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1301824/49769e4b7e784fec23d3.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 17616\r\naccess-control-allow-origin: *\r\netag: \"16edcf1630e2a17ded080e09ad7a6ddd\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\nlast-modified: Thu, 04 Sep 2025 16:47:54 GMT\r\nexpires: Wed, 08 Sep 2055 13:07:40 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 1\r\nx-request-id: 382c025404b65989\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76852,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"55f19e2ce7ee0c34e58381280495c543","sha1":"83055fa14fe35597587cce9cec2902e364cc437b","sha256":"243bb5b97f924d1740291ffba33694bd57c6430e3e4171f5b27db1ba59e1e065","sha512":"d43f9f046f3b599cd01b2370e6c1a4c3292d18ab09e84c81bc3d6df049b318016e4ff077ae47506d1abc5d49f078833b1148ebce207ce77e2a4bce0707a2a50d","ssdeep":"768:YiNu+NSz/7Zt+fkK5ttDY5GZODVZ5Oz0s3ytazFpLhehXu:k7ZtsnDY5GZ45OhesO+","tlshash":"cd73fad97595b9fa02c3d4f1043f320ea37ba615711a6580b323dac1ec25a9f5223e3e","first_seen":"2025-09-05T07:26:16.672243Z","last_seen":"2025-09-08T06:40:13.817083Z","times_seen":54,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":0,"dns":27,"connect":86,"send":0,"wait":15,"receive":13,"ssl":618},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.214","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 01:31:47 GMT","end":"Fri, 07 Nov 2025 01:31:46 GMT"},"fingerprint":{"sha1":"F1:ED:A9:2E:2A:3A:BF:06:82:23:97:3A:FA:2E:19:EF:32:01:D6:54","sha256":"7B:6D:BE:74:0D:F5:EC:B3:DB:6B:DA:1C:FE:4B:21:DA:F3:26:59:55:4A:C3:9D:26:50:6E:44:74:25:A0:35:9B"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEGWi+eid7BQJz9EqBAlTliRJMrI/sT+s+nlogynOn12MG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=1904420A277ABE687302057B02814AF4\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adnitro.pro/static_banner_option_get.php?host=gubka-bob.top","fqdn":"adnitro.pro","domain":"adnitro.pro","tld":"pro"},"ip":{"addr":"92.63.111.219","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adnitro.pro","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 23:45:49 GMT","end":"Sun, 26 Oct 2025 23:45:48 GMT"},"fingerprint":{"sha1":"B0:98:83:C0:45:1F:1A:7B:32:CF:6D:D8:C4:88:E8:D2:81:3B:E1:1D","sha256":"BD:1F:23:32:7F:2C:85:3A:14:01:F9:A2:49:43:CE:84:C9:A7:B0:A2:A9:5C:28:FF:C3:C8:10:10:53:F7:AC:54"}}},"request":{"raw":"GET /static_banner_option_get.php?host=gubka-bob.top HTTP/1.1\r\nHost: adnitro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gubka-bob.top/\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"NOI ADM DEV COM NAV OUR STP\"\r\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nLast-Modified: Mon, 08 Sep 2025 06:39:33 GMT\r\nCache-Control: no-cache, must-revalidate\r\nPragma: no-cache\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2855,"size_decoded":0,"mime_type":"text/json; charset=UTF-8","magic":"JSON text data","md5":"619bc4efdd847064776145f1b902c402","sha1":"da2d952a9b737c22ca20033bafcacdcb274b9623","sha256":"b4eb3fe2daa1a14f63b64ad144d94de9828bef30aeac2319a24b9c2a74cba85c","sha512":"d434022eb6a671a7c6dc878335c260278b2c68e2052905f6f1b55bfeffd8928c6c8e96e15c1c2b65699fa89a3e91f277bf936b5ab75e12fe950ea8def874760e","ssdeep":"","tlshash":"c451b046dea9c9fec6ac8c4061f30f37547f36c6b7869538a5eeec02411ee7c6a1015a","first_seen":"2025-09-08T06:40:13.817611Z","last_seen":"2025-09-08T06:40:13.817611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":76,"dns":1,"connect":29,"send":0,"wait":34,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/editor/jscripts/froala/css/editor.css?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/editor/jscripts/froala/css/editor.css?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-1c41d\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115741,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29472)","md5":"f71b7c9ce26b588c0d6e36131962afc0","sha1":"4a899d62fd9ff1877d9cab41b083bc78fa8bee44","sha256":"3dc5a07ec1a336898e09e27a0e16a899680264c59cbf99e985c355490837fb6c","sha512":"76d8ec40e01a6b238faf17cc7fa3bad0c201479d11164630b14013c42f0e93c183aa33877e749aa30808d084666a234a18c9dc95ce85963238d03415085df61b","ssdeep":"768:N+K3hC+dRE0IvuW0PJhFa+gmj+yScsbS6+qsg+DAK/nZVRfZFDmKA1NP595RZWkb:N5kzvu45b2EFMxQS480JK1c","tlshash":"bab3b77ab544300b7217c369a1c0adc92a77c303fa020aaff63d75e547466ee4876f59","first_seen":"2023-07-16T20:51:23Z","last_seen":"2025-09-08T06:40:13.818635Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/masha/masha.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/classes/masha/masha.js?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2383-6261\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1057), with CRLF line terminators","md5":"bace6a73a06526c54ff13e5cd5444ebc","sha1":"74118370c5fa437859cc98f93eba80c9383ef4d6","sha256":"7f6b7a582b06ccb53ef0932c7a5a024158e40de06dc1b7915c26880ec16d7293","sha512":"31ecfb75a25177ecac9ad58f703664c7a60768073a92b1bd2190ee7ebdfcdb806429e61d07398f34ff92b8984cdc0e597120e73c74bb9a88710a7b9b31a2aa00","ssdeep":"384:67zkp9O6Xf5uMKVnDogOqFEpA4sztDMrJlv1jx4/FfBjEtypafvUjAX1pgdZ6akd:YzkpZKDbOq2l4Rsr1e/st1UjrNkPfnci","tlshash":"7bb2c9987181363fe1ab225c64ff27086132185ae8485a78f97cccd2bd64a5a007ff7d","first_seen":"2023-03-07T01:18:03Z","last_seen":"2026-04-03T12:10:42.758911Z","times_seen":27,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/engine.css","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/engine.css HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-eab1\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59985)","md5":"3d9eb305150939e830ef24db1efe7b30","sha1":"9d27f6323d5a27897a39fbda8f5db3539305fdbd","sha256":"46967c5357950663d5b99cea4a1646982f8cc90467f8d2fcd5d7c5e38d0f96dd","sha512":"27ff26b5b99a86603b58867d57c1c7db98fec8664a0bdb7e583a27fe610e54675a656a29ff683b2c653ac3daf3cc44283c9c9ff199ec515915310720c28f74b0","ssdeep":"1536:4naeJa2PenL5LkYOmyCnwlta4u1Do2k+M:sPendGmXwT0M","tlshash":"08432936e155295fba23c5d7a091bbec2e2cd593d70247bef8ae72e8c0811c505371b9","first_seen":"2025-09-08T06:40:13.827888Z","last_seen":"2025-09-08T06:40:13.827888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/AdventureTime.jpg","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/AdventureTime.jpg HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 114862\r\nLast-Modified: Sat, 11 May 2024 09:17:37 GMT\r\nConnection: keep-alive\r\nETag: \"663f37b1-1c0ae\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114862,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, comment: \"SYSTEMAX JFIF Encoder Ver.2.0\", baseline, precision 8, 380x139, components 3","md5":"5edd2df4e51b85635f7412e02049fcd3","sha1":"e1aaf3bcd8d023dc1a8942f8049ab223a603828a","sha256":"f01c54a3dfd4742ddebfac09f7f19fddf77e5caeb9ce5d7376377db2aab07b38","sha512":"944a3a22d1a4902d4b7c68073b15d517945e0143f365e99aab0c68f843b9fb677941a138a58636fede346796b1344a20523f16b4386f3d192b876b19d9eb6b1b","ssdeep":"3072:hjSMVzW/exbpdk+UYMC14LpPDTByNy3DNSkF:pSMVz0eV/knMITBAy3D5","tlshash":"7eb312924c4137d89fadc8b329f69b92ac20171a543b7e005fb3a3b5d69ed48fcd11a1","first_seen":"2025-09-08T06:40:13.829336Z","last_seen":"2025-09-08T06:40:13.829336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":371,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/RickAndMorty.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/RickAndMorty.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 102706\r\nLast-Modified: Mon, 29 Jan 2024 21:22:08 GMT\r\nConnection: keep-alive\r\nETag: \"65b81700-19132\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 139, 8-bit/color RGB, non-interlaced","md5":"302b962c7f861e84d88188ea9a158d08","sha1":"321bb8bb70e3c8c849428865a0843133fdedfbc5","sha256":"06e63f7ae547b03def3710aca70150ee652758865fa85e8fe82824ea711bccb4","sha512":"dc43d2e45b513265357d59e57c9aed11d06bf09bb2a7ab77655ade5053755ddd9d3e4f9f0d07a54006c00ef3b2baf83b7befc0491e553ca367f1fc13699a2a5a","ssdeep":"1536:fqBa8k3HEpVGAkwDaYlgt84wub37d4WeyrCd/qzu6YjLWpzzOFYs1JFwBySb1:yHk3MVGHAge4RD5gp16gLW8m+FwBr","tlshash":"15a313a7d6c8d2e8cf38330cdfbe363e0817c5a6305252d9d1debe5b796148a06942c6","first_seen":"2025-09-08T06:40:13.830953Z","last_seen":"2025-09-08T06:40:13.830953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":29,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/GravityFalls.jpg","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/GravityFalls.jpg HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109758\r\nLast-Modified: Sun, 06 Oct 2024 21:20:50 GMT\r\nConnection: keep-alive\r\nETag: \"6702ff32-1acbe\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109758,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, comment: \"SYSTEMAX JFIF Encoder Ver.2.0\", baseline, precision 8, 380x139, components 3","md5":"d1837f2d1021bbd932879c8b64732adf","sha1":"b0e1488b95a8480f4d6cb9cd18e4ad54c812fa59","sha256":"3160c91d9eaf8e430132d4f7e8f49cfb9b28f08ef8a83d68d5287f84d9bf2777","sha512":"3a35c7155a92beb4a7d0ca340a4f7e711f22497a6ac0af3663334c9ae52ba7e33a2607b595e63aed9d93472654559d1151e0894b859787ffe72ee2d1be66b1d2","ssdeep":"3072:w/kAgou8vYr+B3L0L7IuTsDlim86phtafXRId+2r5R:MB3ukYr+B3L2sDm6phERIdjrv","tlshash":"63b31276ca9b44a0d717922343544f591d209ccd98c9eb2fab3b1c05ebbce964e8317b","first_seen":"2025-09-08T06:40:13.832597Z","last_seen":"2025-09-08T06:40:13.832597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":33,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.kombinat.digital/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D","fqdn":"sp.kombinat.digital","domain":"kombinat.digital","tld":"digital"},"ip":{"addr":"77.223.103.139","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kombinat.digital","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 17:28:33 GMT","end":"Sun, 14 Sep 2025 17:28:32 GMT"},"fingerprint":{"sha1":"44:0D:B5:16:F1:EC:03:60:AB:DC:42:D2:7E:2F:CB:4F:4C:37:51:10","sha256":"9C:00:4A:31:C2:1E:D9:0B:03:F1:95:EE:9A:42:9B:95:B6:B1:A6:DE:88:E5:81:C8:10:67:39:3F:90:A0:4C:7E"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: sp.kombinat.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-02 1.69.2c9847f\r\nLocation: https://mc.acint.net/match?dp=433\u0026euid=18b02708-116c-4050-911a-f38aea612664\r\nSet-Cookie: uid=18b02708-116c-4050-911a-f38aea612664.68be7a27.3ee4037b411c9442; domain=.kombinat.digital; path=/; expires=Wed, 08-Oct-2025 06:39:35 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":97,"connect":54,"send":0,"wait":29,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026s_data=CAIQARin9PnFBmIgMDcwMDAwN0YyNjdBQkU2ODk2MDVGNTg5MDJBMjk0NzOiARCVhT7-jH4R8IbgACWQwGR8","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 06:16:05 GMT","end":"Sat, 18 Oct 2025 06:16:04 GMT"},"fingerprint":{"sha1":"63:39:BB:B3:0F:06:C3:B8:0F:8B:09:D7:EB:99:F3:72:4A:AB:94:27","sha256":"E7:AF:31:40:0B:59:D5:B3:32:9C:37:13:F5:35:8E:06:36:67:4D:FD:5A:6A:CD:46:CF:09:8C:3B:7C:E2:24:BA"}}},"request":{"raw":"GET /?src=sap1\u0026s_data=CAIQARin9PnFBmIgMDcwMDAwN0YyNjdBQkU2ODk2MDVGNTg5MDJBMjk0NzOiARCVhT7-jH4R8IbgACWQwGR8 HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 03 Sep 2045 06:39:35 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/amberdata/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"93.189.58.210","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:37.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /amberdata/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1757313575434; user_id=000b2432-b684-4f18-b58e-b19e6fe169ca\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:37 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=000b2432-b684-4f18-b58e-b19e6fe169ca;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=000b2432-b684-4f18-b58e-b19e6fe169ca;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://dmg.digitaltarget.ru/1/6401/i/i?a=685\u0026e=000b2432-b684-4f18-b58e-b19e6fe169ca\u0026i=9195275446058512\u0026c=up:000b2432-b684-4f18-b58e-b19e6fe169ca.ss:685\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/sape?id=0700007F267ABE689605F58902A29473","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"82.148.21.217","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dvgroup.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 11:38:48 GMT","end":"Tue, 02 Dec 2025 11:38:47 GMT"},"fingerprint":{"sha1":"73:D5:B3:AE:38:2F:01:08:65:C7:F7:F3:B2:B6:36:25:EC:5B:64:59","sha256":"64:85:24:A9:98:DF:9B:69:1B:E0:0D:29:7F:82:65:CD:10:2E:88:7C:F8:E4:EF:B0:D8:42:83:9E:C6:50:99:A1"}}},"request":{"raw":"GET /match/sape?id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T17:41:08.867085Z","times_seen":31326,"resource_available":true,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":100,"connect":1036,"send":0,"wait":26,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=337\u0026euid=1oPCWAlQy","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=337\u0026euid=1oPCWAlQy HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adnitro.pro/js/adnitro_static_banner.js","fqdn":"adnitro.pro","domain":"adnitro.pro","tld":"pro"},"ip":{"addr":"92.63.111.219","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adnitro.pro","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 23:45:49 GMT","end":"Sun, 26 Oct 2025 23:45:48 GMT"},"fingerprint":{"sha1":"B0:98:83:C0:45:1F:1A:7B:32:CF:6D:D8:C4:88:E8:D2:81:3B:E1:1D","sha256":"BD:1F:23:32:7F:2C:85:3A:14:01:F9:A2:49:43:CE:84:C9:A7:B0:A2:A9:5C:28:FF:C3:C8:10:10:53:F7:AC:54"}}},"request":{"raw":"GET /js/adnitro_static_banner.js HTTP/1.1\r\nHost: adnitro.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 7915\r\nLast-Modified: Thu, 21 Aug 2025 07:18:04 GMT\r\nConnection: keep-alive\r\nETag: \"68a6c82c-1eeb\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"68ad28350d2ed167e56d80a85a5762ef","sha1":"3991ecb74154be2c7f9a6bc5e117f1b5291a4e86","sha256":"7b060cc2afcf6c732988bd4f4550960f2b6fdf233b7b0d26feafe531ce72aaa5","sha512":"e04acca72119ae4e4fee1418b1410a327d67eaf826a232121a74a1795a24079d7d1b736278c9aacf2dc228605e8a1aeac9c6706ea4bea66c64a5aab876a017bd","ssdeep":"96:K275rqlrMvQF5stAo4GiKV2756kvGzvi7UOMLaHG+MzDSo0fghd4XH:K275srMvQFKAo4oYUOqTh6","tlshash":"37f1c00a1d14993bc4b337b54bab9d08fe37113b50508411bf6d89d0afb296ac276fe9","first_seen":"2025-09-08T06:40:13.834102Z","last_seen":"2025-09-28T09:32:35.435898Z","times_seen":4,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":60,"dns":28,"connect":30,"send":0,"wait":29,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/buttons.css?v=1.0.7","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/buttons.css?v=1.0.7 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-4994\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18836,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2e78cb528c66b2af6ad118cd85d78156","sha1":"2d754a9edad2cb219c12abbfbefa7a487627b1e3","sha256":"486cf8923081a57175e52763b3ecaf24fa6c3c2338770f3ae07064e5161865d9","sha512":"e7f5032341a2cf95b6d2c7e009ffadde0afd8680e6a0d7ffa8b97e2bb216f259887bfb31acb76edf2a6964280e6722af408f2653190d4b862c4b63c9ff86f740","ssdeep":"96:dRsd9OkebtRu81w/+KIhQ/yq43yFju1wYbvuCN2xjn+NSdjJpYaBNoQEHedxXaIi:R2zAqFNYexXn5dkMY","tlshash":"a082e198f9a0790a642fce4451c2ddc3a75b12d3b42b8f7ffa2a40d8538d19c1931fa9","first_seen":"2023-11-05T12:58:46Z","last_seen":"2025-09-08T06:40:13.836108Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.new-programmatic.com/userbind?src=sape\u0026id=0700007F267ABE689605F58902A29473","fqdn":"match.new-programmatic.com","domain":"new-programmatic.com","tld":"com"},"ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ad.ad-blast.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Jun 2025 07:47:50 GMT","end":"Sat, 27 Sep 2025 07:47:49 GMT"},"fingerprint":{"sha1":"2F:A0:3F:43:D0:CF:CE:AF:4E:B8:01:26:77:7D:14:6F:93:7C:A2:FA","sha256":"9E:D7:30:A4:1A:32:70:44:B3:D5:00:46:26:04:E3:A4:BC:E2:04:11:85:55:D3:DE:D8:05:92:0A:12:51:D9:03"}}},"request":{"raw":"GET /userbind?src=sape\u0026id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: match.new-programmatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.22.1\r\nDate: Mon, 08 Sep 2025 06:39:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":40,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.gonet-ads.com/match/sape.js?id=0700007F267ABE689605F58902A29473","fqdn":"sync.gonet-ads.com","domain":"gonet-ads.com","tld":"com"},"ip":{"addr":"188.42.104.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gonet-ads.com","organization":"Go Mobile Inc"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Fri, 19 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:9B:E1:71:D4:17:D5:18:6C:A4:F9:5F:2F:DD:DE:56:8C:CB:EC:5F","sha256":"A2:75:01:34:62:6B:85:83:76:99:89:B4:24:0B:18:DF:F2:6E:B4:35:EE:60:EC:E8:1C:4D:E1:23:9E:07:6B:1D"}}},"request":{"raw":"GET /match/sape.js?id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.gonet-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T17:41:08.867085Z","times_seen":31326,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":27,"connect":18,"send":0,"wait":20,"receive":0,"ssl":464},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/editor/css/default.css?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/editor/css/default.css?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-a37\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9239ce738fb09559eb42ae9da350325a","sha1":"29438c7374f209f2a7923193e0d5ff70bd2ece7b","sha256":"84ac4668615a89556551d47504f98682ad26a78f14cd1cbdba10eddcaabee429","sha512":"5527f87deb8763166244e87d3eed27bb8fa99ec750fcb8d263d9411e88b25fec6c2ce4762703a8781f31ec17e283384622f7f0d0c75dce81af181242ee222cf5","ssdeep":"","tlshash":"1351aafaf9011100bb71cb342b813b247e6743b28f4346bf7ee0964c928a29a45e2d64","first_seen":"2023-04-05T15:52:43Z","last_seen":"2026-04-04T17:35:53.789179Z","times_seen":1171,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":52,"dns":1,"connect":34,"send":0,"wait":29,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33951\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 10:27:43 GMT\r\nexpires: Fri, 04 Sep 2026 10:27:43 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 331910\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97163,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T17:45:20.982463Z","times_seen":67276,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":11,"receive":8,"ssl":291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"95853efe-8c7e-11f0-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape","fqdn":"95853efe-8c7e-11f0-86e0-002590c0647c.n2.sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"78.24.221.171","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n0.sync.bumlam.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 06:29:57 GMT","end":"Sun, 16 Nov 2025 06:29:56 GMT"},"fingerprint":{"sha1":"3C:E0:9B:E2:09:AB:72:C9:45:B6:CF:88:74:19:56:AB:51:AD:BF:FA","sha256":"79:BE:7B:0B:DF:D5:17:66:21:F8:CF:5B:4F:10:CB:7F:64:BD:05:72:78:49:EF:2B:00:B6:C4:1A:AF:B5:1F:E5"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: 95853efe-8c7e-11f0-86e0-002590c0647c.n2.sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.22.1\r\nDate: Mon, 08 Sep 2025 06:39:36 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://pix.bumlam.com/sync/sape/done\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":64,"connect":29,"send":0,"wait":32,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/js/slick.min.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/js/slick.min.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2384-a76f\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-04T17:41:09.753648Z","times_seen":77333,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-rtb.sape.ru/js/uids.js","fqdn":"cdn-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.46","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 01:31:47 GMT","end":"Fri, 07 Nov 2025 01:31:46 GMT"},"fingerprint":{"sha1":"F1:ED:A9:2E:2A:3A:BF:06:82:23:97:3A:FA:2E:19:EF:32:01:D6:54","sha256":"7B:6D:BE:74:0D:F5:EC:B3:DB:6B:DA:1C:FE:4B:21:DA:F3:26:59:55:4A:C3:9D:26:50:6E:44:74:25:A0:35:9B"}}},"request":{"raw":"GET /js/uids.js HTTP/1.1\r\nHost: cdn-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:33 GMT\r\ncontent-type: text/javascript\r\ncontent-security-policy: block-all-mixed-content\r\netag: W/\"1dbcebe686fce958926840916dcf303d\"\r\nlast-modified: Thu, 12 Dec 2024 14:49:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 181075C9C80C491F\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nexpires: Tue, 09 Sep 2025 06:39:33 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18029,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18029), with no line terminators","md5":"1dbcebe686fce958926840916dcf303d","sha1":"9307e154d9c86e87102c1720791d0bc741bf8aee","sha256":"0197488f2ee3dcb817e569e8ffbc7c73cf7998dfa73da17651bdd11b6e2057cc","sha512":"7aa4d7294b3d54198ef870078d62720dac419bd24e4dc06c415895b6f63f61b921cdf0d8dd63d21045776881ab9abe7ba6e85349cf0a9531e05dd6801fb614ae","ssdeep":"384:1xQkfFbECxLB1rj3xrEkQKGRGKZBSQc7Hj:XF3NFj3xroIKzm","tlshash":"9e82969db2c2f03142937131816f610bf23a6856b45e8094f229c8e1fdbd89ea537f6d","first_seen":"2024-12-20T22:38:56.308232Z","last_seen":"2025-12-14T21:31:50.224477Z","times_seen":1262,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":118,"dns":26,"connect":45,"send":0,"wait":46,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tube.buzzoola.com/js/lib/buzzoola_ufp.js","fqdn":"tube.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"151.236.127.225","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzzoola.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AD:3D:5A:FB:EA:0C:06:C6:DD:3E:69:73:36:2A:74:3B:95:70:1E:67","sha256":"73:D5:51:B5:32:C9:CE:3F:65:12:83:12:96:96:39:A9:AD:83:3D:BB:9B:DD:F5:77:84:D8:C9:2A:75:F5:D4:48"}}},"request":{"raw":"GET /js/lib/buzzoola_ufp.js HTTP/1.1\r\nHost: tube.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 11:55:32 GMT\r\nexpires: Mon, 08 Sep 2025 07:00:00 GMT\r\ncontent-encoding: gzip\r\nx-cdn-edge-cache: HIT\r\nx-cdn-edge-id: 313\r\nx-cdn-request-id: 520c29becb4e2ac1601342e3bb04b28f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13432), with no line terminators","md5":"f4f91442f3c51aa0ab4d00240cb9ca53","sha1":"9fad8ac07c22c86ab006bac7207e7928098a22c1","sha256":"c5b7be7ff5a92d4d03ae4b96a3931d1349f726affed96d8b64ecbd1ef7de598f","sha512":"b7af177eaf8de9bb7cfe4332c223524d40415e517b4770fb923b71c8d31bc22f08c975226934e9d4d2262a3e94acdf718d5c970725ed9cbb75589da98207b7c0","ssdeep":"384:MtJpg1qCMUYbJZ9uhMN9wgR1YOO6ghS++1ZBneflJnbRbpxsqmpv4Ypm7RnCE0i6:8Jpg17MUYbJZ9Oiw1uWSjH0ftsuNCR","tlshash":"6452d7e9f28ee4f745f43756582a635a7371c43064384918f90cd682ea07dea907ebb4","first_seen":"2025-03-28T18:47:27.609281Z","last_seen":"2026-04-04T17:41:09.000921Z","times_seen":2651,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":198,"dns":91,"connect":26,"send":0,"wait":26,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /safeframe-bundles/0.83/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 8878\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nlast-modified: Wed, 03 Nov 2021 13:42:58 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"f80882bf67cf261aa08d636da095149a\"\r\nexpires: Wed, 08 Sep 2055 13:04:26 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nx-strm-log-split: 2\r\nx-request-id: d9f44912c46ee998\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33703,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33703), with no line terminators","md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-04T17:41:08.898849Z","times_seen":22883,"resource_available":true,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":26,"connect":134,"send":0,"wait":15,"receive":0,"ssl":681},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/random.jpg","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/random.jpg HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30353\r\nLast-Modified: Mon, 29 Jan 2024 22:05:48 GMT\r\nConnection: keep-alive\r\nETag: \"65b8213c-7691\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30353,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x139, components 3","md5":"9daef0cb711a469cb1ac85903aed040a","sha1":"031189afc2325b690e550ff3e5a7c692730fd1e7","sha256":"55b6c8fe9e3ca65d7ef4d931572eb6cb39732db27c95c66e519be386b07bff8b","sha512":"7a9bb9f9ad8e3a9b4184bbe10f33074820b4dd445a950b161699561ac75a3a5aee408d670daa27c54c91c8b3371b569a0ea75f03bdef1b52103afa40c2f6e2ee","ssdeep":"768:Z4jkg9hSpnY6b+3uuAR0sVZPZ0mHfV6JbYQSXvXZmt:Z4jR9hw63uuKV5Z0mHfwJMs","tlshash":"d6d2e1e0c5f5f884e256ecf9c4df842195383e74c419332eb94b822057a37e7be26962","first_seen":"2025-09-08T06:40:13.841892Z","last_seen":"2025-09-08T06:40:13.841892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":397,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statmedia.ru/counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID","fqdn":"statmedia.ru","domain":"statmedia.ru","tld":"ru"},"ip":{"addr":"46.161.36.23","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statmedia.ru","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 12:37:59 GMT","end":"Tue, 21 Oct 2025 12:37:58 GMT"},"fingerprint":{"sha1":"F1:01:FC:2A:35:42:F6:70:4D:E9:68:E8:A9:D9:96:89:5F:69:39:46","sha256":"3C:BD:90:25:CA:CE:FE:26:14:86:9C:2C:B3:DE:91:17:9E:44:B7:5C:92:CC:79:5B:1B:34:F7:DE:17:AF:69:96"}}},"request":{"raw":"GET /counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID HTTP/1.1\r\nHost: statmedia.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:35 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T17:41:08.870811Z","times_seen":91662,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":83,"connect":76,"send":0,"wait":62,"receive":0,"ssl":537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gubka-bob.top/\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nexpires: Tue, 08 Sep 2026 12:21:12 GMT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=31556952\r\nx-nginx-request-id: a7c3bf3217c543a4\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nx-strm-log-split: 9\r\nx-request-id: a961a843f52485d8\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-04-04T17:41:08.892102Z","times_seen":21624,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":1,"dns":27,"connect":87,"send":0,"wait":31,"receive":1,"ssl":629},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/billing/js/paygroups.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/billing/js/paygroups.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a7a7f835ace1bc2dfa8ec2c6267c843d","sha1":"9db8fd4493a8f853e815335452499500abfbf588","sha256":"7ee9513f4737cc9e0fa1e4bf29425e26db5f3e367f2742fe90a29afa32466048","sha512":"af36b2ea9b1ec203a9ca19d193e99c3bd835b3f70d31f0372d5aa5605595d83a01d41348923894dfc593e45db1ed78eb6b9138ca13ee5af3df16606a4859f9d5","ssdeep":"","tlshash":"40d0979fe18f115b026333d03ac703c2752401b0b9a324cc1e05e18380004bc820b54c","first_seen":"2025-09-08T06:40:13.799789Z","last_seen":"2025-09-08T06:40:13.799789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/images/BestMults/SouthPark.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /images/BestMults/SouthPark.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 89715\r\nLast-Modified: Mon, 29 Jan 2024 21:22:10 GMT\r\nConnection: keep-alive\r\nETag: \"65b81702-15e73\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 139, 8-bit/color RGB, non-interlaced","md5":"69bbe65f8218b9f9e72ae2f1ea0ca270","sha1":"dfec86a4fc632776a399482827a5a52ce0bd5c72","sha256":"5007377b8a0651fa8b45ddec3f1aee5bb213b057c66b2898f1b208675e6a4e1f","sha512":"9a4ff6e87adc6c485390546733e8dbf6e229fb80af1f399cbcc6185e358ca1ab756c4c8d36c9090ac69ffb1665ab576b5e1515d550fa6c281f835477c51c06e2","ssdeep":"1536:fUv3yjAaM3TYJAnW9sbEjhVITHEHF3g667MCKdA6BpY:23gM32gXWhVIwHN6bKC","tlshash":"7c9312a3f1d7548bb6bfe2dd8456a013ac38c5174dfd8cb4a48dc5439260b3659eacd0","first_seen":"2025-09-08T06:40:13.844568Z","last_seen":"2025-09-08T06:40:13.844568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/sape/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"93.189.58.210","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /sape/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\nlocation: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0=\r\nset-cookie: session_tptc=1757313575434;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180\nsession_tptc-legacy=1757313575434;Version=1;Domain=.upravel.com;Path=/;Max-Age=180\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":1222,"timings":{"blocked":507,"dns":36,"connect":62,"send":0,"wait":151,"receive":0,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=394\u0026euid=d1ef89b0-999f-4b55-bc3b-f139b3fab306","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.137","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Jul 2025 00:05:04 GMT","end":"Sun, 19 Oct 2025 00:05:03 GMT"},"fingerprint":{"sha1":"1E:EA:C8:2A:91:1E:88:BC:CB:69:E1:43:AA:9C:21:21:A8:17:8C:4C","sha256":"01:EE:C9:A4:ED:C2:9A:09:D3:35:66:EF:87:C6:56:0D:FC:91:E6:75:FC:AF:BA:71:73:ED:24:13:43:26:C4:76"}}},"request":{"raw":"GET /match?dp=394\u0026euid=d1ef89b0-999f-4b55-bc3b-f139b3fab306 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2i+eiaJ9QWWc5SiAhohDlyCL+WmqNYZXLJ/MB8n9rk5; cSyncDp14v6=1757313574; cSyncDp17v2=1757313574; cSyncDp45v5=1757313574; cSyncDp53v5=1757313574; cSyncDp62v2=1757313574; cSyncDp67v5=1757313574; cSyncDp68v3=1757313574; cSyncDp71v2=1757313574; cSyncDp85v2=1757313574; cSyncDp95v4=1757313574; cSyncDp98v3=1757313574; cSyncDp104v3=1757313574; cSyncDp107v2=1757313574; cSyncDp125v4=1757313574; cSyncDp126v3=1757313574; cSyncDp129v2=1757313574; cSyncDp136v3=1757313574; cSyncDp148v2=1757313574; cSyncDp149v3=1757313574; cSyncDp151v2=1757313574; cSyncDp251v3=1757313574; cSyncDp186v2=1757313574; cSyncDp217v2=1757313574; cSyncDp226v1=1757313574; cSyncDp239v3=1757313574; cSyncDp243v2=1757313574; cSyncDp260v2=1757313574; cSyncDp244v2=1757313574; cSyncDp248v3=1757313574; cSyncDp261v1=1757313574; cSyncDp264=1757313574; cSyncDp274=1757313574; cSyncDp289v2=1757313574; cSyncDp296v3=1757313574; cSyncDp312v1=1757313574; cSyncDp313v1=1757313574; cSyncDp368v1=1757313574; cSyncDp331v1=1757313574; cSyncDp337v1=1757313574; cSyncDp351v1=1757313574; cSyncDp361v1=1757313574; cSyncDp353v1=1757313574; cSyncDp362v1=1757313574; cSyncDp366v1=1757313574; cSyncDp390v1=1757313574; cSyncDp399v1=1757313574; cSyncDp394v1=1757313574; cSyncDp415v1=1757313574; cSyncDp420v2=1757313574; cSyncDp422v1=1757313574; cSyncDp424=1757313574; cSyncDp431=1757313574; cSyncDp433=1757313574; cSyncDp444=1757313574; cSyncDp203=1757313574; cSyncDp450=1757313574; cSyncDp14v4=1757313575; cSyncDp7v3=1757313575; cSyncDp241v2=1757313575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 08 Sep 2025 06:39:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/done","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.4","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:36.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 06:16:05 GMT","end":"Sat, 18 Oct 2025 06:16:04 GMT"},"fingerprint":{"sha1":"63:39:BB:B3:0F:06:C3:B8:0F:8B:09:D7:EB:99:F3:72:4A:AB:94:27","sha256":"E7:AF:31:40:0B:59:D5:B3:32:9C:37:13:F5:35:8E:06:36:67:4D:FD:5A:6A:CD:46:CF:09:8C:3B:7C:E2:24:BA"}}},"request":{"raw":"GET /sync/sape/done HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ5NTg1M2VmZS04YzdlLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T17:45:20.867701Z","times_seen":327169,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0=","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"93.189.58.210","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:35.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0= HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1757313575434\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=000b2432-b684-4f18-b58e-b19e6fe169ca;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=000b2432-b684-4f18-b58e-b19e6fe169ca;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://www.acint.net/rmatch?dp=71\u0026euid=000b2432-b684-4f18-b58e-b19e6fe169ca\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dsp.solta.io/match/sape?id=0700007F267ABE689605F58902A29473","fqdn":"sync.dsp.solta.io","domain":"solta.io","tld":"io"},"ip":{"addr":"217.199.220.72","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dsp.solta.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 04 Aug 2025 11:49:51 GMT","end":"Sat, 05 Sep 2026 11:49:50 GMT"},"fingerprint":{"sha1":"47:08:04:35:5D:1F:29:FE:9D:B8:04:FB:41:AA:98:1C:B3:95:76:78","sha256":"F4:28:D6:EC:60:7B:5B:18:1C:90:EA:96:70:90:94:81:60:02:76:08:87:8B:89:2E:6B:35:EB:89:97:42:D1:75"}}},"request":{"raw":"GET /match/sape?id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: sync.dsp.solta.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T17:41:08.867085Z","times_seen":31326,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":60,"connect":64,"send":0,"wait":46,"receive":0,"ssl":559},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.sspnet.tech/sync/sape?user_id=0700007F267ABE689605F58902A29473","fqdn":"bid.sspnet.tech","domain":"sspnet.tech","tld":"tech"},"ip":{"addr":"5.35.15.155","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=14\u0026aid=0700007F267ABE689605F58902A29473","date":"2025-09-08T06:39:34.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.sspnet.tech","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 06:26:44 GMT","end":"Sun, 30 Nov 2025 06:26:43 GMT"},"fingerprint":{"sha1":"FD:A5:B8:9F:FE:BC:B9:14:F0:BA:EF:BF:DB:D1:2C:D9:50:6A:48:53","sha256":"87:25:D7:C1:27:65:C9:B0:36:3D:22:43:24:36:7F:8F:DA:EE:15:25:B4:52:C6:C2:DB:D6:05:68:42:E8:2B:5B"}}},"request":{"raw":"GET /sync/sape?user_id=0700007F267ABE689605F58902A29473 HTTP/1.1\r\nHost: bid.sspnet.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\nx-request-id: 3bd06dcfbcbc43ac0dacb63344a2f892\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-04T17:17:07.121906Z","times_seen":6205,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":255,"dns":37,"connect":50,"send":0,"wait":27,"receive":0,"ssl":554},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1301824/513c12ab02dbc080b84e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:35.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1301824/513c12ab02dbc080b84e.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gubka-bob.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5786\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Wed, 08 Sep 2055 12:57:26 GMT\r\ncontent-encoding: br\r\ncache-control: public, max-age=946708560\r\netag: \"42926769d55412980ab09545369c3b9d\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 04 Sep 2025 16:47:54 GMT\r\nx-strm-log-split: 3\r\nx-request-id: 2468791901dbdd67\r\ncache-host: cloudcdn-rad-04.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16655,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16621)","md5":"e4fc5bd55a1f9c85ca23e5a991d7615a","sha1":"90da8bb3a51ace567bd644aec35a6a53fe5a1882","sha256":"373af56653ea42bfe13eb89f1fee384d3c34b06e33ac3514af5325946e6477f9","sha512":"863f2f5a5af0b682d258afab885c835c5a32552d05897a6640910ca587099d3dd8ff506c7e78ff802dc245bf116222b67c5e641ed83ca3dcfea3d726a50a73cf","ssdeep":"192:cweZ36c4CJPAUacdFxzyZnBJJV++ANkejiMG3NV3NVV7qrPESO2dWnPS8ezFLlb6:cw2KNCJPAryQZFVknierPzOl3t","tlshash":"f172f9fd7520b0201bdb3076517f191ff378292e744884a06606edfa29b491fa197fac","first_seen":"2025-09-05T07:26:16.629853Z","last_seen":"2025-09-08T06:40:13.848683Z","times_seen":54,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":26,"connect":135,"send":0,"wait":28,"receive":0,"ssl":603},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.delivembd.ws/cdn.js","fqdn":"api.delivembd.ws","domain":"delivembd.ws","tld":"ws"},"ip":{"addr":"89.42.231.152","port":443,"asn":48459,"as":"Compania De Informatica Aplicata SA","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top","date":"2025-09-08T06:39:35.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.delivembd.ws","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 04:02:01 GMT","end":"Sun, 21 Sep 2025 04:02:00 GMT"},"fingerprint":{"sha1":"F8:65:49:21:82:B7:F4:70:1A:7B:4F:3B:D8:85:B1:DC:38:6B:83:99","sha256":"B5:B2:E9:4C:4E:5B:1C:26:C5:A9:9C:EA:DD:81:30:70:A4:E9:8B:10:87:B7:2D:D1:80:C0:E6:98:06:BD:7C:A8"}}},"request":{"raw":"GET /cdn.js HTTP/1.1\r\nHost: api.delivembd.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.delivembd.ws/embed/movie/634?season=4\u0026episode=6\u0026host=gubka-bob.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:34 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=3600\r\nLast-Modified: Thu, 17 Jul 2025 09:51:04 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14035,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14035), with no line terminators","md5":"70f56b87511684d937281409faa0eb65","sha1":"f4c37ed549001abaa56f244795dafc12d29a4704","sha256":"a7d7702ed4717f22aa3018948ff3d5107ce039e1002ae35449461d571431fb88","sha512":"ab6893bf36a12ac59cde22547f7b533a14236bfb961537b6a9c56182bab6d34a72be09f3ac803e16ed14fee4ceb3ab67dec3ecb61793e09d21b9cd035bbed734","ssdeep":"384:BGHj+ekXGanQYtSdumPsydVpcLXqiJuzODgwZF04m5Rc/JNFRiM5:Gj+ekXGanQYtSdVPsydVpCXqiJuzODJf","tlshash":"0c52c784b6947a3303c3d1b5a23f2507b338162510508188b355eefd6e7e98976d6f7e","first_seen":"2024-09-29T20:09:03Z","last_seen":"2026-01-08T14:08:18.567632Z","times_seen":345,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/stylesheets/style.css?v=1.2.3","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/stylesheets/style.css?v=1.2.3 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 21 Jan 2024 21:22:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ad8b32-7af6\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31478,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"868042b645cfa96760183035d1484969","sha1":"8eed5cb11f4d2ebb37b1bc1225ca6822499430a9","sha256":"20907086c2a7a38ce6b1fc10688dea6b1865fdbace4d9deef0f5475fd79e9738","sha512":"096b7c834b49a29c0a7d6b992c5f735ab9bd30412e2f1029ae32085c81a83989fd2bbcb8bc90a3d2e60c13bb09093d7bf3f01ad0294249ae99d0d61400cd8ed6","ssdeep":"384:EnnjssbRudo0F1AlrmAKBM3pBF5Q/SsUFS8PnIrkHD:EnV0F1AlhBF5Q/1UFS8PnIkD","tlshash":"11e222a2fba7194a7117c1987b9baba5335d5053d10acf7cbbd132288f84694d831bcc","first_seen":"2025-09-08T06:40:13.850065Z","last_seen":"2025-09-08T06:40:13.850065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.myangular.life/player?hit=script\u0026sub=actualize\u0026host=gubka-bob.top","fqdn":"s.myangular.life","domain":"myangular.life","tld":"life"},"ip":{"addr":"144.76.37.59","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"s.myangular.life","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:D0:F5:C7:DA:A6:B2:0A:F4:F8:DA:C0:6B:DC:6A:21:29:AE:DE:21","sha256":"85:E4:3F:05:10:3E:50:F7:DB:EF:69:B2:A4:A2:F2:AE:F8:EE:B9:49:EA:27:90:1F:CF:50:AA:03:71:CA:BA:2C"}}},"request":{"raw":"GET /player?hit=script\u0026sub=actualize\u0026host=gubka-bob.top HTTP/1.1\r\nHost: s.myangular.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":174,"dns":32,"connect":25,"send":0,"wait":28,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3D%26n%3D1","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.68","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:34.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzzoola.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AD:3D:5A:FB:EA:0C:06:C6:DD:3E:69:73:36:2A:74:3B:95:70:1E:67","sha256":"73:D5:51:B5:32:C9:CE:3F:65:12:83:12:96:96:39:A9:AD:83:3D:BB:9B:DD:F5:77:84:D8:C9:2A:75:F5:D4:48"}}},"request":{"raw":"GET /cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3D%26n%3D1 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 06:39:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 116\r\nlocation: https://kimberlite.io/rtb/sync/buzzoola?u=8a9550c4-3021-4528-54f3-60ccb01e2c13\u0026f=\u0026n=1\r\nset-cookie: uuid=8a9550c4-3021-4528-54f3-60ccb01e2c13; Path=/; Domain=buzzoola.com; Expires=Wed, 08 Oct 2025 06:39:34 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":103,"dns":42,"connect":28,"send":0,"wait":28,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/dle_js.js?v=26","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/classes/js/dle_js.js?v=26 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 20 Jan 2024 19:48:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65ac2383-84e8\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2518), with CRLF line terminators","md5":"654dd717108dbe849e8de0b7f2ea9ffe","sha1":"6be5abc28cdd2067199a9eb939ad3b5d5581886b","sha256":"234372a224a78421aee6a2a1c90dc630ed01eb134752fdc868d7ede8203fa372","sha512":"b706a463962c544a09db2fb58339c90bb65d527c2775c564ff1af424d8c12f65580fece846159895f58ea68ebb3d6feb155f5867affe85a906ce079f8c6927ca","ssdeep":"768:BO0IWqpGtPIBSN4cvMRHClvfp0ScQvStlDrFmw:BO0bIBSN4cvMRHClvfp0STv0lDrFv","tlshash":"9fe2c50cf5b4791b8aba237ea17f146a80744b63e700cd589a6d43941d72f8c95b3f2e","first_seen":"2023-03-10T12:34:56Z","last_seen":"2026-04-02T12:31:19.943436Z","times_seen":68,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":1,"connect":30,"send":0,"wait":33,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/css/style.css?v=1.4.7","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/css/style.css?v=1.4.7 HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 23 Mar 2024 10:17:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65feac48-2a77\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10871,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"75afbc85f64c7daaaa3999c3ca7083e9","sha1":"b90c2dc730d26b53b8a4ca173b86c2bae42820b3","sha256":"ec9cc1ec90c4f71ac71892533ed18d43216e9160e34058991813c683e8b7e248","sha512":"63840cf90504d9a64b6123076712b57ee3d9b8f07f7db96f252d5a7fce0737cc9d45960b698f5946ae0caa6864be48fd3539cbe089b9321cd00e8227f27f95f1","ssdeep":"192:QPdqP6V/VZJprJYJ61FtUxUzc5YenXszgsV08sHVwJOQ:QYiND3RFg0c59nXsqjHa","tlshash":"0e226242d6b31245601bd1f5afb6e795333a4043a60b9facba643230cf4e6d45537f89","first_seen":"2025-09-08T06:40:13.851892Z","last_seen":"2025-09-08T06:40:13.851892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/engine/classes/js/video_switches.js","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /engine/classes/js/video_switches.js HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"68366a44441ee049e521c9248f9bf7ea","sha1":"6b328676efa8caa7f3de8e643ecdb9b9b09b1d08","sha256":"8b509044ee046d316c6e5cd4be49a813955388f7d515314ee75503ff68a29c84","sha512":"c11e87dccfaf7e9683607aa948bd7bc49ec980d888a013d1064273c6821298328bff73e2b6b5ac4d62db022534cc60fe4c56551c96b0da0702935a3d1435f194","ssdeep":"","tlshash":"43d0a7ae9083624a442211907dc611d2644813b7a87981ec3c876496a16857dc8da9ad","first_seen":"2025-09-08T06:40:13.787978Z","last_seen":"2025-09-08T06:40:13.787978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gubka-bob.top/templates/charmed/dleimages/marker.png","fqdn":"gubka-bob.top","domain":"gubka-bob.top","tld":"top"},"ip":{"addr":"91.240.20.38","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gubka-bob.top/sezon-4/70-4-sezon-6-seriya.html","date":"2025-09-08T06:39:33.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gubka-bob.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 23:41:50 GMT","end":"Sat, 18 Oct 2025 23:41:49 GMT"},"fingerprint":{"sha1":"7E:C0:74:18:BF:7F:4E:F0:83:58:5D:86:5F:58:E8:54:56:50:38:F1","sha256":"C1:79:16:6C:CB:C0:8B:FF:8C:A6:2C:10:03:46:1E:32:5B:F7:27:41:51:CF:CF:ED:8B:26:B9:B4:BA:FA:9B:39"}}},"request":{"raw":"GET /templates/charmed/dleimages/marker.png HTTP/1.1\r\nHost: gubka-bob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gubka-bob.top/templates/charmed/css/engine.css\r\nCookie: PHPSESSID=73f199e7f11271b9f9763f0aae380164; _ohmybid_cmf=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 08 Sep 2025 06:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1883\r\nLast-Modified: Sat, 20 Jan 2024 19:48:20 GMT\r\nConnection: keep-alive\r\nETag: \"65ac2384-75b\"\r\nExpires: Tue, 09 Sep 2025 06:39:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 64, 8-bit/color RGBA, non-interlaced","md5":"004417a6a98320b4f11641d6c2441105","sha1":"222d969222cb52fa16eb621e5930e8978995b79a","sha256":"e393ab33da5f5e3cb8a5fd7beece758d61ae71f7646f9dd100dc562aa667b723","sha512":"169f4c8d983ef44b3f29b211ed9215844583b679b038f6a11b4944f1d5fb25014746c81279ae34e6f448dc9dbcc34b86622e1b35e47670f8d4204ad05b716c08","ssdeep":"","tlshash":"a141f9ea11cb649aec47c5cbd72317742636c3f7054829780885dd6731f099b7e87836","first_seen":"2023-05-01T22:58:48Z","last_seen":"2026-04-04T14:02:45.803654Z","times_seen":870,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}