{"report_id":"d9331671-64eb-4799-aaa2-33e1c40002cc","version":6,"status":"done","tags":[],"date":"2026-05-28T08:46:55Z","url":{"schema":"https","addr":"avtofranch.kz/","fqdn":"avtofranch.kz","domain":"avtofranch.kz","tld":"kz"},"ip":{"addr":"130.193.59.235","port":0,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"avtofranch.kz/","fqdn":"avtofranch.kz","domain":"avtofranch.kz","tld":"kz"},"title":"Хотите открыть прибыльный и стабильный бизнес?","dom":{"size":10612,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6626)","md5":"13a844e2eedc4a9c40ad66c3e34ff94b","sha1":"d90423c1eb147dd8d28b199d745ce9190170674c","sha256":"9982cad16307cf73def627f29347fad5cc74ea106b76633789a2f1bd1568692f","sha512":"19361747d121d1d01868c5cbae3f0a4d5f7618ce34fa030b9d8cc35997ffd49b38e3b86d12643700c60ec6ba085d29564ca1def6e8d4985c330911bb768f04c3","ssdeep":"192:HyS3Vc4NTjqOuWYCceScexpkM0yjr9FqYrIMzabPD++RpLAhI2pNi5Q7/:B3Vc4NTjNbSb2D+wwT","tlshash":"8f22c6246084d5370703dadcf8d2f71ca8c6723f9e07c5b5a8aa37b40ae5d6788f6422","dom_hash":"domhash24e7d437c86cc013fd2e827385ce77a4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"avtofranch.kz/","fqdn":"avtofranch.kz","domain":"avtofranch.kz","tld":"kz"},"ip":{"addr":"130.193.59.235","port":0,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T08:46:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"avtofranch.kz","ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-05-28T08:46:58.697026Z","last_seen":"2026-05-28T08:46:58.697026Z","alert_count":0,"request_count":2,"received_data":5862,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.media.marquiz.ru","ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2017-07-07","domain_rank":1681102,"first_seen":"2023-04-26T18:35:43Z","last_seen":"2026-05-22T01:06:52.150793Z","alert_count":0,"request_count":2,"received_data":108666,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"o4511155418234880.ingest.de.sentry.io","ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":0,"first_seen":"2026-05-20T09:47:03.414689Z","last_seen":"2026-05-27T16:18:02.869728Z","alert_count":0,"request_count":3,"received_data":1491,"sent_data":1950,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"quiz.provider.marquiz.ru","ip":{"addr":"51.250.33.8","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-07-07","domain_rank":1740035,"first_seen":"2024-10-26T03:08:21Z","last_seen":"2026-05-23T10:36:41.886684Z","alert_count":0,"request_count":1,"received_data":8394,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.mrqz.me","ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2018-10-15","domain_rank":2099418,"first_seen":"2020-06-22T08:46:20Z","last_seen":"2026-05-17T23:48:44.503127Z","alert_count":0,"request_count":34,"received_data":4563420,"sent_data":15783,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.marquiz.ru","ip":{"addr":"130.193.56.53","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-07-07","domain_rank":1633835,"first_seen":"2018-04-24T13:28:04Z","last_seen":"2026-05-22T01:06:51.257859Z","alert_count":0,"request_count":2,"received_data":1080,"sent_data":1100,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-DgQybnXG.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"8e1174e5d68533fdb7f2a36550804342","sha1":"7ec309cc71bb6aa815ad439db920741e12644a1d","sha256":"0de5c6c629effbbaefd9c479a7faa0f723c1dc1723117d2daed4cc7930018926","sha512":"3ee188350ce6f4f809b966de53d089ab7d49fd32e4f5c512dcda2741f427aac14930d70931ac84da0e67e3f47bafeb5d07ed8a6d2cc319fdeef14bbb2975bf8e","ssdeep":"384:ZIMgWrWXrG6nZOsZ44hMBWVZtvhifp8CEm7QofBQrw9vwmn9Fja5PCSU1l0:ZIMVWXrGsOsZ48MBWVZtvhYp8CcofBZC","tlshash":"ec82c7d1b5f3f4ab82f508e1c13a4654bb368b0a9429e0f0a01cd56915e78dc6a7ff78","size":17734,"data":"","first_seen":"2026-04-02T15:06:47.395724Z","last_seen":"2026-06-01T15:18:51.63822Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-DgZI-BJO.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"210e52383e21dd56bb3698615d837fe6","sha1":"d93c3bf4bad351dbd2732032c5f0737334bf3a9a","sha256":"f153346feb075e49a1bf9365d195c02f7a3e1452295f53b55344d1fa74149ac0","sha512":"80b1341733f27e728858869e1a1232e9ded5d636debbaa8ff19ba33190443ac3a32538990d42508377333c1356d017b93e30565ad7142c51b45b399d136d8538","ssdeep":"","tlshash":"f031801ef1dc923c4a5100c095514245b10e26bca0a2585cf5a876fa0b9b25b8f2ee33","size":1460,"data":"","first_seen":"2026-05-28T08:47:05.611436Z","last_seen":"2026-05-28T08:47:05.611436Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"32a4c8b9c3afa794ded3740a77aa2382","sha1":"7c0f471508df6c58b7505306af0459fef46b72cd","sha256":"d3b8f2c8b7e588ba31ead72da09927a929e6d414b19d685d286340fe0fbdc997","sha512":"fc88f3bd813ec6d7734ac4da5d2edb5515c56ba2e84b8fb70eae426e7c1bd1d9b6788a909d46d0171c0ad335449fefd7f81502e93b29134adaef56e480f8cf3f","ssdeep":"","tlshash":"73418624b582e577c37f0269e9b144549b380f45399641e2d4b48f2527dad29f6d7f00","size":1901,"data":"","first_seen":"2026-04-02T05:08:16.226406Z","last_seen":"2026-06-05T20:46:13.798514Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-DyH4K_hl.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b965e00dc680169e11a2a28405f09de","sha1":"a662a4e3dc0a4aa9e0735fa1b37854ed4f388bf1","sha256":"847f9fc5ed094d4cc16b54158621b7f4aa964656de958ae35533326821de9d9a","sha512":"1a74ce8da93fda7aea84056ef42ac7330e1a2dc68985dd32ae6047f4d39a09a3e608be29ee466cacfaa271385f5df16539974a1963cbcdd502d87c08fcfa041c","ssdeep":"12288:IDajOGOIlHG17dvIGNIILA/ANLQu3g5bR21jqMrcEcoV51:IDajOGlLFAJF3g5bR21jqOcEcoV51","tlshash":"cfc45ad972c6707503a742f5907b0106f33a6d74344dc0a8f5acd9ed39a684aa27bf3a","size":553326,"data":"","first_seen":"2026-05-28T08:47:05.647025Z","last_seen":"2026-05-28T08:47:05.647025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/crypto-vendor-CDjmgx-6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"28134a627220142290d1330b54eae4ad","sha1":"08995b3c7e9a3c09270137f7272f4357243b1612","sha256":"69002b7763028cf5f54756af01b7b05916426503d33b6cbc1ad940d803448b31","sha512":"7b1ea9a8293c7e2fe8e2607162dace0ce48c3630d9499d5880cd1d61fd715de14e238163bc6aea99bdd78312ffb7a0c03f88f5654bbe5a698ef57657f78cfb61","ssdeep":"768:6weJAtk50znrah+NxrFkhrkL0ZLlwews5aNFZaZM9OT81390q/nqZzrtNASU9Ar5:reJAiWOwN/khQxewskt5cPtNPU9ArHMU","tlshash":"03633aca328870d163a764e0093f600b72b739a60a6c9588f554eaedac7c6dd4236d3d","size":68911,"data":"","first_seen":"2026-04-02T15:06:47.370542Z","last_seen":"2026-06-01T15:18:51.634119Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-CZIwYJyf.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"8f4582b994b6e1df53925030ca81fd8c","sha1":"8efd89355ccc7b9b820c32b481b52b9f9366cf27","sha256":"31a238179e9f39b7a2470881611c6066ccffae3a418a181cca86ce556c694336","sha512":"8eaa545fc9a3bc4323855bd5a3fb6605891d12d2cb9c670d9ef8a01e70a5ee8065b462e364c8570fb4fb11832f5d9ea6af67b275add925582fda252a294958ba","ssdeep":"1536:QC7fLmS/KRKWQBGRkoILSxft6F0FHjx70bB7GM2IDs:NKiGRknLSxfgmFHjxAbB7GYDs","tlshash":"19f30a8671946c360bef46c724180142e308099dfc5598fcbdbc9dee7b9ac4561aefb8","size":159003,"data":"","first_seen":"2026-04-02T05:08:16.154583Z","last_seen":"2026-06-21T16:39:01.125152Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-DaJ4E6LZ.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"038ec1106a3df58467dda6be1be29abe","sha1":"e58d13976a767ccb719087999e0d3ebe55aeb961","sha256":"a88afa06de1e948bc50a6c7b2d08a8c6953f596fbdb3ec711b1047678d092e04","sha512":"2c3c3e2352cb3ca13e417271539b0fce06c9e1022b041d0f29b8d9f511b28c6f65c2190040637bd390c2eca663f2a9ab62c77ff0d1148ed35b7aeb5b3ef0affd","ssdeep":"6144:4nxAM3H9/gv7PPcHgFVIK5huiaqoxOX1Lq05Rd8jdPkiIxZK6TbXTDAMkOJznncQ:8xAM3H9/gv7PPcHgFVIK5huia1OX1LqW","tlshash":"4e444a9db4515178c37788aab8150600f32c2ba8f91c45dcf9fd6eda6ae4c50327af78","size":261680,"data":"","first_seen":"2026-05-28T08:47:05.604075Z","last_seen":"2026-05-28T08:47:05.604075Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-DRiVRosX.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"73d64bd690353349304c346e343e099e","sha1":"1df9988b3d65b5b15c155f97af0e74b8a52ccd94","sha256":"ee5c06199d7a69cd88e280f4eeb36ade807ed0b04447a032a9bd9be8e3703ac9","sha512":"8b3213d586ed38238ff5ac528bad064c8d5dd7e882998938cd6540f171c885ae757ef1b99d45b0187d4c61690b68930a8f227566b1de2fadbf48eadcb6b7e4de","ssdeep":"192:SFwlYejKqbtyE/yPs8se0FsEsULEY1hRLSLc3Pz4Ir8FGmpjkLMI9tpirdXLhY87:SF4DXsAzvQGaN1UQ7H","tlshash":"5fe1944994b95e38ddf7a35970c423007b541f9cb2ad4068f0fd56bd2be1098b3e6ea1","size":7155,"data":"","first_seen":"2026-05-28T08:47:05.607404Z","last_seen":"2026-05-28T08:47:05.607404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/vue-vendor-CTYaFD1O.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"f22a488d22f0036abb5c94f6007fb69a","sha1":"8aa85870ee7371e676921b64b0932a05f87581f8","sha256":"7183d95922c3ba013d485c0051d254416e42154cafea334969d414d805b99272","sha512":"07c60d74060c5ecf4d9347865594b9671f945ad31adc5bea6e8fdcaef66a3c540827f7cba912026b6540aecb699e033714e8e1cb94470e5b195aaad7a3516e05","ssdeep":"6144:wtJkSkLOxM2Scx/Wq11z2uP28RnxB0diLNZNUIC0W2RLXL4iziJ:IPkLQM2ZWq1x2uPFBxB04ue4nJ","tlshash":"074439e93192707643e609e150bb1006f3396858380d84e8f56ce9ef3d7694a51bbfbe","size":271373,"data":"","first_seen":"2026-04-02T05:08:16.169755Z","last_seen":"2026-06-21T16:39:01.238264Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/marquiz-vendor-BrM_Ykol.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"710c0a0d591b0cd13f0aa5fd7e3b8cf4","sha1":"18707cac2626803a59b2941d5f74318d20d13457","sha256":"afb2bdcfe55bf3f67e2baa9b452ce2e97da81d4c0869a1c2d3d09f07fdd82cfd","sha512":"19ebe449158cfb503de16c530c8257d29b583e0042c64cc541a9979de3727144f43a0aa6314ed7ab03f1af83fec772730c4d8774317ca2ef960d850307bed75d","ssdeep":"6144:+LkkSJroogaZuoxzc98M32W7p8BV3fSkSJroODDfhz41f:+IkSoopsjkSoO/E","tlshash":"2f54c4c972d3f0a583a364b0406f480af23e6d65a84cd068f2b7d5e5bcb9909c177f69","size":292557,"data":"","first_seen":"2026-04-02T15:06:47.384922Z","last_seen":"2026-06-01T15:18:51.642528Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/vue-vendor-CTYaFD1O.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/vue-vendor-CTYaFD1O.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"f22a488d22f0036abb5c94f6007fb69a\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 9746a329288e9e64\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271373,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44147)","md5":"f22a488d22f0036abb5c94f6007fb69a","sha1":"8aa85870ee7371e676921b64b0932a05f87581f8","sha256":"7183d95922c3ba013d485c0051d254416e42154cafea334969d414d805b99272","sha512":"07c60d74060c5ecf4d9347865594b9671f945ad31adc5bea6e8fdcaef66a3c540827f7cba912026b6540aecb699e033714e8e1cb94470e5b195aaad7a3516e05","ssdeep":"6144:wtJkSkLOxM2Scx/Wq11z2uP28RnxB0diLNZNUIC0W2RLXL4iziJ:IPkLQM2ZWq1x2uPFBxB04ue4nJ","tlshash":"074439e93192707643e609e150bb1006f3396858380d84e8f56ce9ef3d7694a51bbfbe","first_seen":"2026-04-02T05:08:16.169755Z","last_seen":"2026-06-21T16:39:01.238264Z","times_seen":91,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-DaJ4E6LZ.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Main-DaJ4E6LZ.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"038ec1106a3df58467dda6be1be29abe\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 9aa9939731ecd6d4\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62974)","md5":"038ec1106a3df58467dda6be1be29abe","sha1":"e58d13976a767ccb719087999e0d3ebe55aeb961","sha256":"a88afa06de1e948bc50a6c7b2d08a8c6953f596fbdb3ec711b1047678d092e04","sha512":"2c3c3e2352cb3ca13e417271539b0fce06c9e1022b041d0f29b8d9f511b28c6f65c2190040637bd390c2eca663f2a9ab62c77ff0d1148ed35b7aeb5b3ef0affd","ssdeep":"6144:4nxAM3H9/gv7PPcHgFVIK5huiaqoxOX1Lq05Rd8jdPkiIxZK6TbXTDAMkOJznncQ:8xAM3H9/gv7PPcHgFVIK5huia1OX1LqW","tlshash":"4e444a9db4515178c37788aab8150600f32c2ba8f91c45dcf9fd6eda6ae4c50327af78","first_seen":"2026-05-28T08:47:05.604075Z","last_seen":"2026-05-28T08:47:05.604075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.marquiz.ru/v1/analytics/opening?lng=en-US\u0026tz=UTC","fqdn":"api.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"130.193.56.53","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 11:49:05 GMT","end":"Sat, 01 Aug 2026 11:49:04 GMT"},"fingerprint":{"sha1":"A7:99:85:BC:F5:2D:05:19:D9:6C:29:FD:F9:86:D7:09:6F:0C:73:EE","sha256":"50:29:25:0E:36:48:D5:FB:61:F4:AC:62:35:B0:FF:21:10:D3:D0:5F:E2:C8:FE:BB:A5:3C:F5:13:E7:B0:B2:87"}}},"request":{"raw":"OPTIONS /v1/analytics/opening?lng=en-US\u0026tz=UTC HTTP/1.1\r\nHost: api.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://avtofranch.kz\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T07:32:21.585315Z","times_seen":16818461,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":70,"dns":1,"connect":30,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Regular-BGIKGzAk.woff2","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Regular-BGIKGzAk.woff2 HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28260\r\netag: \"2c8b07ea9c186608d63d64b7dfe9045f\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: cc9560f3af88144d\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28260, version 1.0","md5":"2c8b07ea9c186608d63d64b7dfe9045f","sha1":"2d550e6f5d1179483b99bc8f2fd47613b88c0f11","sha256":"25209e0f01765fad0a6331ad3baf3ed94bd0eaed8c26d87694c5a57524a6030d","sha512":"ca6b768b8d78e16208857e822a5e94f2453ea51ab460f2571c975f69b630ae32b8234a3da1c93dba800eeac7fa7985857d15bad23c886a55cab9be352549e533","ssdeep":"768:wcagi+XB3PidEY0uUNxpd4tAQqBPKor0CM/iBm6djjcWHj:wcbxB3z9uUxAtqByogCNBmqjjcWD","tlshash":"50c2e1249ab03a15eb46bebee2b5613cefe2b8d4091d5dde07c3acbd410d61164f5821","first_seen":"2023-04-09T12:27:54Z","last_seen":"2026-06-06T11:48:23.678695Z","times_seen":289,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-DRiVRosX.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/StartPage-DRiVRosX.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"73d64bd690353349304c346e343e099e\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 662be7eac35bb6d7\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7155,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7154)","md5":"73d64bd690353349304c346e343e099e","sha1":"1df9988b3d65b5b15c155f97af0e74b8a52ccd94","sha256":"ee5c06199d7a69cd88e280f4eeb36ade807ed0b04447a032a9bd9be8e3703ac9","sha512":"8b3213d586ed38238ff5ac528bad064c8d5dd7e882998938cd6540f171c885ae757ef1b99d45b0187d4c61690b68930a8f227566b1de2fadbf48eadcb6b7e4de","ssdeep":"192:SFwlYejKqbtyE/yPs8se0FsEsULEY1hRLSLc3Pz4Ir8FGmpjkLMI9tpirdXLhY87:SF4DXsAzvQGaN1UQ7H","tlshash":"5fe1944994b95e38ddf7a35970c423007b541f9cb2ad4068f0fd56bd2be1098b3e6ea1","first_seen":"2026-05-28T08:47:05.607404Z","last_seen":"2026-05-28T08:47:05.607404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avtofranch.kz/favicon.ico","fqdn":"avtofranch.kz","domain":"avtofranch.kz","tld":"kz"},"ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avtofranch.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 11:31:12 GMT","end":"Wed, 29 Jul 2026 11:31:11 GMT"},"fingerprint":{"sha1":"43:AE:63:3E:92:A8:C9:8D:18:1C:8F:0A:C9:8D:C4:F9:F3:FC:15:3F","sha256":"EB:AA:F4:D9:BC:B8:83:3A:E4:CE:2F:72:01:0B:2C:8D:69:46:D3:11:E4:5D:2E:CB:88:9D:1A:85:A4:EF:AE:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: avtofranch.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 3237\r\netag: \"7ce1a75cf3983d1d334e6fabca0fd505\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-request-id: 5a30bbc3978e7cac\r\nx-cached: HIT\r\nx-cached-openresty: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3237,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"7ce1a75cf3983d1d334e6fabca0fd505","sha1":"bd7ea46437be182e9ab18a58e5e8cd59c3968972","sha256":"6401e2add110bb09d8ccaed1bec1fbd48d7f0899e2e431d1987a19ed6953ae6e","sha512":"f0f74c71a4c4db2b97fef604e65a4a75decd8906f051930b3dfa79add4f27cc2d384efece86f3b7e896ecbedcdb307e8f6b1658b817e21ea2c809bc43392902f","ssdeep":"","tlshash":"24616f2383f2238155214f04a13dcbfcf5404f9bda3915558931f869f269dae9503b42","first_seen":"2024-12-08T03:17:13.383098Z","last_seen":"2026-06-01T15:18:51.646489Z","times_seen":114,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-DRiVRosX.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/StartPage-DRiVRosX.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"73d64bd690353349304c346e343e099e\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: f1c60a859912cc1a\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7155,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7154)","md5":"73d64bd690353349304c346e343e099e","sha1":"1df9988b3d65b5b15c155f97af0e74b8a52ccd94","sha256":"ee5c06199d7a69cd88e280f4eeb36ade807ed0b04447a032a9bd9be8e3703ac9","sha512":"8b3213d586ed38238ff5ac528bad064c8d5dd7e882998938cd6540f171c885ae757ef1b99d45b0187d4c61690b68930a8f227566b1de2fadbf48eadcb6b7e4de","ssdeep":"192:SFwlYejKqbtyE/yPs8se0FsEsULEY1hRLSLc3Pz4Ir8FGmpjkLMI9tpirdXLhY87:SF4DXsAzvQGaN1UQ7H","tlshash":"5fe1944994b95e38ddf7a35970c423007b541f9cb2ad4068f0fd56bd2be1098b3e6ea1","first_seen":"2026-05-28T08:47:05.607404Z","last_seen":"2026-05-28T08:47:05.607404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-DgZI-BJO.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/CookieNotice-DgZI-BJO.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"210e52383e21dd56bb3698615d837fe6\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: dbba8a278489e9a1\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1445)","md5":"210e52383e21dd56bb3698615d837fe6","sha1":"d93c3bf4bad351dbd2732032c5f0737334bf3a9a","sha256":"f153346feb075e49a1bf9365d195c02f7a3e1452295f53b55344d1fa74149ac0","sha512":"80b1341733f27e728858869e1a1232e9ded5d636debbaa8ff19ba33190443ac3a32538990d42508377333c1356d017b93e30565ad7142c51b45b399d136d8538","ssdeep":"","tlshash":"f031801ef1dc923c4a5100c095514245b10e26bca0a2585cf5a876fa0b9b25b8f2ee33","first_seen":"2026-05-28T08:47:05.611436Z","last_seen":"2026-05-28T08:47:05.611436Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.media.marquiz.ru/v1/image/upload/2Frv1RW3J3ZkYdYvoWHHbe.jpeg?format=webp\u0026func=auto\u0026fit=cover\u0026width=128\u0026dpr=1","fqdn":"cdn.media.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.media.marquiz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 07:58:22 GMT","end":"Thu, 20 Aug 2026 07:58:21 GMT"},"fingerprint":{"sha1":"DA:B1:01:42:09:6A:85:19:CC:3B:8D:42:80:36:72:00:2E:23:65:C4","sha256":"D7:AD:96:68:D4:84:E6:29:68:8A:D7:EA:7E:59:80:0B:C7:8C:E1:FF:8C:86:50:77:E2:C2:DE:31:77:79:55:90"}}},"request":{"raw":"GET /v1/image/upload/2Frv1RW3J3ZkYdYvoWHHbe.jpeg?format=webp\u0026func=auto\u0026fit=cover\u0026width=128\u0026dpr=1 HTTP/1.1\r\nHost: cdn.media.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: image/webp\r\nvary: accept, save-data\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=345600\r\netag: 6a1755e4c155248cad87c77f\r\nx-request-id: a243f53e3753f25a\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x71, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be39a9d140fb0d3ce1520cf0ecdfac02","sha1":"494c58d347f8f1fa6ec37383787fb84c98a47832","sha256":"cd7306ebe6a121dc1b2456e456274e6c94f0db6a1ca083b376594a6f41aec70a","sha512":"eed9df43b60edd8aea6fcf8dbdef4c6665ce2572a994cbbc4dd90ab0cb11de53449046a759a3d57d5a030d036a78066bdd9945c69025a9455111f102a4bf50bc","ssdeep":"","tlshash":"4f616cd43136480c8d0691e7a2de13b93f51c02ac69ec8e3dca920ebd45b977f3192a4","first_seen":"2026-05-28T08:47:05.613135Z","last_seen":"2026-05-28T08:47:05.613135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":109,"dns":0,"connect":43,"send":0,"wait":140,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Medium-B0L0cBlt.woff2","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Medium-B0L0cBlt.woff2 HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29296\r\netag: \"dcc50aca38c591ba7746c9ae90a16b67\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 0ba1abbafb560ac6\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29296, version 1.0","md5":"dcc50aca38c591ba7746c9ae90a16b67","sha1":"37bc92597046be4ba85a8ff5f7e1034606e9f431","sha256":"6589d27de60e678c3e38f593af996efb1b97d76d374c7b6f7b79fae676bb297a","sha512":"01c426d78b4580b8e619762b912ec71b0a6107b3eb850d938811e50d05d55014deb9c7b2791229427584c894a160d222cf5ce930da8632b2cede8f8305525e63","ssdeep":"768:8OqCErcHPxeAnzCiLAIBZtwBEgRf9byyeny9qrN:8agcvxeSznFBZtwBLl9bgnCqB","tlshash":"8fd2f12dc53acf9416e06b8bf8d26d303a42a7d6cbf54d54a824cf2f6984a11f71724d","first_seen":"2023-05-08T17:13:57Z","last_seen":"2026-06-05T20:14:51.562081Z","times_seen":293,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-DgQybnXG.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/maps-vendor-DgQybnXG.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"8e1174e5d68533fdb7f2a36550804342\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: f205efd26ed414da\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17733)","md5":"8e1174e5d68533fdb7f2a36550804342","sha1":"7ec309cc71bb6aa815ad439db920741e12644a1d","sha256":"0de5c6c629effbbaefd9c479a7faa0f723c1dc1723117d2daed4cc7930018926","sha512":"3ee188350ce6f4f809b966de53d089ab7d49fd32e4f5c512dcda2741f427aac14930d70931ac84da0e67e3f47bafeb5d07ed8a6d2cc319fdeef14bbb2975bf8e","ssdeep":"384:ZIMgWrWXrG6nZOsZ44hMBWVZtvhifp8CEm7QofBQrw9vwmn9Fja5PCSU1l0:ZIMVWXrGsOsZ48MBWVZtvhYp8CcofBZC","tlshash":"ec82c7d1b5f3f4ab82f508e1c13a4654bb368b0a9429e0f0a01cd56915e78dc6a7ff78","first_seen":"2026-04-02T15:06:47.395724Z","last_seen":"2026-06-01T15:18:51.63822Z","times_seen":6,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-BNCx9VBM.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:32.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/buefy-vendor-BNCx9VBM.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:32 GMT\r\ncontent-type: text/css\r\netag: W/\"64375bac4efe8d89a7d073dd0ae2a282\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 1674da63cd380617\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":410531,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"64375bac4efe8d89a7d073dd0ae2a282","sha1":"7b557f90aa2c019d4b1d989ced0ca4e8642b0aeb","sha256":"e22412669754464ac11547ec411c0e8a49ba8459759d14d97d0662a846773e97","sha512":"628879d7557e3f2a29491b0825f874d68a18ac9311f927cba3d6e8012c10457b39bdc7a73ddd5e5aa432dc7c699af337db1bffbe8357d0e27f2b1ca1faa9316d","ssdeep":"1536:wXjSz2pa49JJEZYUBm5hFZ/j2zELhBTvCnHqkRy4OtUMNUMtENXd/lUgXwk:qL7/7T9UMQXdkk","tlshash":"9794f87bd9913d4f31138c2d14d0b3a8171e9469d20627fbb4a3b5a4c78b78a1a73f4a","first_seen":"2026-01-29T05:38:46.521512Z","last_seen":"2026-06-21T16:39:01.239882Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":564,"dns":59,"connect":44,"send":0,"wait":153,"receive":0,"ssl":462},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-DgZI-BJO.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/CookieNotice-DgZI-BJO.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"210e52383e21dd56bb3698615d837fe6\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 2309837791cec6bb\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1445)","md5":"210e52383e21dd56bb3698615d837fe6","sha1":"d93c3bf4bad351dbd2732032c5f0737334bf3a9a","sha256":"f153346feb075e49a1bf9365d195c02f7a3e1452295f53b55344d1fa74149ac0","sha512":"80b1341733f27e728858869e1a1232e9ded5d636debbaa8ff19ba33190443ac3a32538990d42508377333c1356d017b93e30565ad7142c51b45b399d136d8538","ssdeep":"","tlshash":"f031801ef1dc923c4a5100c095514245b10e26bca0a2585cf5a876fa0b9b25b8f2ee33","first_seen":"2026-05-28T08:47:05.611436Z","last_seen":"2026-05-28T08:47:05.611436Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/static/favicon.png","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /static/favicon.png HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1622\r\netag: \"1aaad956a9d395908564d05b7ddddc67\"\r\nlast-modified: Thu, 19 Mar 2026 12:39:15 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 64c5013bf0e362e3\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"1aaad956a9d395908564d05b7ddddc67","sha1":"04c75adb1588c0dc00117941308a3de2794b01b4","sha256":"3e403cc3142bb407c3803a0851bcff86dae02c6a3f1987771d9a602998292e91","sha512":"d3bc4e9fd93072eeda26df4544cbf44f62532f3fcec8299a269f3d99ab307a7de6eaee89d087bbbc3661591d0d087a613610760450a6c20ff02d180a234d13d7","ssdeep":"","tlshash":"64312c61ffbed5bc78149c57301750f770f8850a085e884d4728fb93061ba88628b1ca","first_seen":"2025-03-07T19:48:19.632449Z","last_seen":"2026-05-28T08:47:05.619373Z","times_seen":56,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avtofranch.kz/","fqdn":"avtofranch.kz","domain":"avtofranch.kz","tld":"kz"},"ip":{"addr":"130.193.59.235","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T08:46:31.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avtofranch.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 11:31:12 GMT","end":"Wed, 29 Jul 2026 11:31:11 GMT"},"fingerprint":{"sha1":"43:AE:63:3E:92:A8:C9:8D:18:1C:8F:0A:C9:8D:C4:F9:F3:FC:15:3F","sha256":"EB:AA:F4:D9:BC:B8:83:3A:E4:CE:2F:72:01:0B:2C:8D:69:46:D3:11:E4:5D:2E:CB:88:9D:1A:85:A4:EF:AE:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: avtofranch.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 28 May 2026 08:46:32 GMT\r\ncontent-type: text/html\r\netag: W/\"2c2575eadfd4dbf64627e564ba48dee5\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-request-id: 54aea4f0951b5b35\r\nx-cached: HIT\r\nx-cached-openresty: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2c2575eadfd4dbf64627e564ba48dee5","sha1":"f96a6d03bd77e5aba84d53a108a132bff3852c7a","sha256":"1befa443a06035d86961b9225011692616f2dd8fedccf553b85630aee268078f","sha512":"0e9a39aa7409f9cc44490c89d39d91e6a475d90843192a923914b9403fab0018b693319439f7ffe02d4563728afcde7e799ea3b72a1c9f39980e45aee421e09f","ssdeep":"","tlshash":"83316a2824a0c8075a10d68dbed65138e85bb31f142ee4f1f95a4a7d9f0076745fb86b","first_seen":"2026-05-28T08:47:05.621197Z","last_seen":"2026-05-28T08:47:05.621197Z","times_seen":1,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":135,"dns":58,"connect":33,"send":0,"wait":35,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-DgQybnXG.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/maps-vendor-DgQybnXG.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"8e1174e5d68533fdb7f2a36550804342\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: e8c6c6ca6caf7139\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17733)","md5":"8e1174e5d68533fdb7f2a36550804342","sha1":"7ec309cc71bb6aa815ad439db920741e12644a1d","sha256":"0de5c6c629effbbaefd9c479a7faa0f723c1dc1723117d2daed4cc7930018926","sha512":"3ee188350ce6f4f809b966de53d089ab7d49fd32e4f5c512dcda2741f427aac14930d70931ac84da0e67e3f47bafeb5d07ed8a6d2cc319fdeef14bbb2975bf8e","ssdeep":"384:ZIMgWrWXrG6nZOsZ44hMBWVZtvhifp8CEm7QofBQrw9vwmn9Fja5PCSU1l0:ZIMVWXrGsOsZ48MBWVZtvhYp8CcofBZC","tlshash":"ec82c7d1b5f3f4ab82f508e1c13a4654bb368b0a9429e0f0a01cd56915e78dc6a7ff78","first_seen":"2026-04-02T15:06:47.395724Z","last_seen":"2026-06-01T15:18:51.63822Z","times_seen":6,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-BpDctIOf.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Main-BpDctIOf.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: text/css\r\netag: W/\"8019ed3c10392bfef6591fe20f574a0a\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 685589d97daf5bda\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8019ed3c10392bfef6591fe20f574a0a","sha1":"26667457303d26828c822e47d63583955d0d418b","sha256":"033fe37518ea87caac3e1737590ae98c379935b4c10ec2f176d5d9ee57203f59","sha512":"daaa922bb5fc6077327e34589134686cbccac320f79ee01b2a935a8b70fbec5f616b204d4f20bcc4d338e1394eaf383854840517e0a6fa986c45d2d89ad70baa","ssdeep":"1536:XZHVOMQL5GKN/qXlAGqXlATrtAK4+ec1w6cKNHgI86YcNjPgQWZucyyiM2CklfhN:n+4rtAK4+ec1w6cKaI8hcNjPNJYGr8K","tlshash":"d414d77f9c901358e51bcd1503d89ba89218e427e6220beebb133d05cbc77d725ea64b","first_seen":"2026-05-28T08:47:05.623003Z","last_seen":"2026-05-28T08:47:05.623003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4511155418234880.ingest.de.sentry.io/api/4511417187565648/envelope/?sentry_version=7\u0026sentry_key=f5416842c632ec3315e410d90222596e\u0026sentry_client=sentry.javascript.vue%2F10.53.1","fqdn":"o4511155418234880.ingest.de.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.de.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"88:B6:7E:84:32:D7:21:B3:BE:6F:2B:53:57:B5:0A:DF:6B:21:F8:A8","sha256":"FA:57:F8:3E:A4:0F:67:9F:A8:27:49:85:F1:73:F9:33:F5:C9:90:B9:57:B9:DF:30:F6:F0:CE:D2:29:09:9D:76"}}},"request":{"raw":"POST /api/4511417187565648/envelope/?sentry_version=7\u0026sentry_key=f5416842c632ec3315e410d90222596e\u0026sentry_client=sentry.javascript.vue%2F10.53.1 HTTP/1.1\r\nHost: o4511155418234880.ingest.de.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 426\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":426,"data":"{\"sent_at\":\"2026-05-28T08:46:33.790Z\",\"sdk\":{\"name\":\"sentry.javascript.vue\",\"version\":\"10.53.1\"}}\n{\"type\":\"session\"}\n{\"sid\":\"3401d3ab0ba8436b83fd93a78cb2ccb7\",\"init\":true,\"started\":\"2026-05-28T08:46:33.790Z\",\"timestamp\":\"2026-05-28T08:46:33.790Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"864dcfa6\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-29T07:33:14.934147Z","times_seen":723320,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/CookieNotice-DjEl1qyK.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/CookieNotice-DjEl1qyK.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: text/css\r\netag: W/\"dc204ab3b242a664b6479984d9567c6a\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: f4ba7b5798c95d16\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5868)","md5":"dc204ab3b242a664b6479984d9567c6a","sha1":"a83f0e2a50e26ee841b98fd0022f468c8e6137ae","sha256":"ade95fea77741c889701523343798434864d68b09e8f5b0947c210dac0390079","sha512":"020ad9e3b5336aff74cd1f17af3abb622edc248850fce463c07c6aeff7dbb6b5a82c7c59e3c727eedd7af45cfb930c550666e2a9145b02efeea9c18ae5ac929b","ssdeep":"48:eCebOZCebOps5i/s5i8XJjAcisGkcisG2UJUENqoCfNwJdlCaiMwhXJuWw7VRmEm:eCebOZCebOl/8XJjwCrkaiMkEzsb/","tlshash":"b0c1df7f6da9038eb65b4d1653dc5aa80109c26398620ede334338468fcbbeb25d9747","first_seen":"2026-05-28T08:47:05.625628Z","last_seen":"2026-06-06T16:17:40.777286Z","times_seen":8,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"32a4c8b9c3afa794ded3740a77aa2382\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 8a6c4cce0fc9bf78\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1901,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1899)","md5":"32a4c8b9c3afa794ded3740a77aa2382","sha1":"7c0f471508df6c58b7505306af0459fef46b72cd","sha256":"d3b8f2c8b7e588ba31ead72da09927a929e6d414b19d685d286340fe0fbdc997","sha512":"fc88f3bd813ec6d7734ac4da5d2edb5515c56ba2e84b8fb70eae426e7c1bd1d9b6788a909d46d0171c0ad335449fefd7f81502e93b29134adaef56e480f8cf3f","ssdeep":"","tlshash":"73418624b582e577c37f0269e9b144549b380f45399641e2d4b48f2527dad29f6d7f00","first_seen":"2026-04-02T05:08:16.226406Z","last_seen":"2026-06-05T20:46:13.798514Z","times_seen":56,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/ConversionTrigger.vue_vue_type_style_index_0_lang-DKhms2rM.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"32a4c8b9c3afa794ded3740a77aa2382\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 936d156d82b1b677\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1901,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1899)","md5":"32a4c8b9c3afa794ded3740a77aa2382","sha1":"7c0f471508df6c58b7505306af0459fef46b72cd","sha256":"d3b8f2c8b7e588ba31ead72da09927a929e6d414b19d685d286340fe0fbdc997","sha512":"fc88f3bd813ec6d7734ac4da5d2edb5515c56ba2e84b8fb70eae426e7c1bd1d9b6788a909d46d0171c0ad335449fefd7f81502e93b29134adaef56e480f8cf3f","ssdeep":"","tlshash":"73418624b582e577c37f0269e9b144549b380f45399641e2d4b48f2527dad29f6d7f00","first_seen":"2026-04-02T05:08:16.226406Z","last_seen":"2026-06-05T20:46:13.798514Z","times_seen":56,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4511155418234880.ingest.de.sentry.io/api/4511417187565648/envelope/?sentry_version=7\u0026sentry_key=f5416842c632ec3315e410d90222596e\u0026sentry_client=sentry.javascript.vue%2F10.53.1","fqdn":"o4511155418234880.ingest.de.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.de.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"88:B6:7E:84:32:D7:21:B3:BE:6F:2B:53:57:B5:0A:DF:6B:21:F8:A8","sha256":"FA:57:F8:3E:A4:0F:67:9F:A8:27:49:85:F1:73:F9:33:F5:C9:90:B9:57:B9:DF:30:F6:F0:CE:D2:29:09:9D:76"}}},"request":{"raw":"POST /api/4511417187565648/envelope/?sentry_version=7\u0026sentry_key=f5416842c632ec3315e410d90222596e\u0026sentry_client=sentry.javascript.vue%2F10.53.1 HTTP/1.1\r\nHost: o4511155418234880.ingest.de.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 431\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":431,"data":"{\"sent_at\":\"2026-05-28T08:46:33.790Z\",\"sdk\":{\"name\":\"sentry.javascript.vue\",\"version\":\"10.53.1\"}}\n{\"type\":\"session\"}\n{\"sid\":\"c6fca54c29a647f9ad4193b615f78f6f\",\"init\":false,\"started\":\"2026-05-28T08:46:33.499Z\",\"timestamp\":\"2026-05-28T08:46:33.790Z\",\"status\":\"exited\",\"errors\":0,\"attrs\":{\"release\":\"864dcfa6\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-29T07:33:14.934147Z","times_seen":723320,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/maps-vendor-idVO1THo.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:32.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/maps-vendor-idVO1THo.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 403\r\netag: \"611e7356ef02a7e8e6a20f492680fbf4\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 604410995805ee89\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (402)","md5":"611e7356ef02a7e8e6a20f492680fbf4","sha1":"5f93d4095d77b4ba10f8b3608624126b24be315d","sha256":"6b428d99fe1c61c633ef8ce0614719faa8f0ceeeece5271061c2e7bffaf0f75e","sha512":"85e0ec65996a8eb75139ce91a1bc3818c6975d46d67b978fe03f59160cb2bba61fea15f03fef4ed33f24f58bae9b159490d33bf73b135872f0fad894e7b4ebde","ssdeep":"","tlshash":"2de0e532eed3ad3aa062076a95e01e0d1e30d923a5138ea8d27162989779c4a280d2d3","first_seen":"2026-01-29T05:38:46.614475Z","last_seen":"2026-06-21T16:39:01.130809Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1275,"timings":{"blocked":565,"dns":60,"connect":47,"send":0,"wait":141,"receive":0,"ssl":458},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/vue-vendor-CTYaFD1O.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/vue-vendor-CTYaFD1O.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"f22a488d22f0036abb5c94f6007fb69a\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 51ab45fc611c1cc4\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271373,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44147)","md5":"f22a488d22f0036abb5c94f6007fb69a","sha1":"8aa85870ee7371e676921b64b0932a05f87581f8","sha256":"7183d95922c3ba013d485c0051d254416e42154cafea334969d414d805b99272","sha512":"07c60d74060c5ecf4d9347865594b9671f945ad31adc5bea6e8fdcaef66a3c540827f7cba912026b6540aecb699e033714e8e1cb94470e5b195aaad7a3516e05","ssdeep":"6144:wtJkSkLOxM2Scx/Wq11z2uP28RnxB0diLNZNUIC0W2RLXL4iziJ:IPkLQM2ZWq1x2uPFBxB04ue4nJ","tlshash":"074439e93192707643e609e150bb1006f3396858380d84e8f56ce9ef3d7694a51bbfbe","first_seen":"2026-04-02T05:08:16.169755Z","last_seen":"2026-06-21T16:39:01.238264Z","times_seen":91,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/marquiz-vendor-BrM_Ykol.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/marquiz-vendor-BrM_Ykol.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"710c0a0d591b0cd13f0aa5fd7e3b8cf4\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 3cf75b88d84dd39c\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292557,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38073)","md5":"710c0a0d591b0cd13f0aa5fd7e3b8cf4","sha1":"18707cac2626803a59b2941d5f74318d20d13457","sha256":"afb2bdcfe55bf3f67e2baa9b452ce2e97da81d4c0869a1c2d3d09f07fdd82cfd","sha512":"19ebe449158cfb503de16c530c8257d29b583e0042c64cc541a9979de3727144f43a0aa6314ed7ab03f1af83fec772730c4d8774317ca2ef960d850307bed75d","ssdeep":"6144:+LkkSJroogaZuoxzc98M32W7p8BV3fSkSJroODDfhz41f:+IkSoopsjkSoO/E","tlshash":"2f54c4c972d3f0a583a364b0406f480af23e6d65a84cd068f2b7d5e5bcb9909c177f69","first_seen":"2026-04-02T15:06:47.384922Z","last_seen":"2026-06-01T15:18:51.642528Z","times_seen":6,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/Main-DaJ4E6LZ.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/Main-DaJ4E6LZ.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"038ec1106a3df58467dda6be1be29abe\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: bb7e8cb6c55aceb8\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62974)","md5":"038ec1106a3df58467dda6be1be29abe","sha1":"e58d13976a767ccb719087999e0d3ebe55aeb961","sha256":"a88afa06de1e948bc50a6c7b2d08a8c6953f596fbdb3ec711b1047678d092e04","sha512":"2c3c3e2352cb3ca13e417271539b0fce06c9e1022b041d0f29b8d9f511b28c6f65c2190040637bd390c2eca663f2a9ab62c77ff0d1148ed35b7aeb5b3ef0affd","ssdeep":"6144:4nxAM3H9/gv7PPcHgFVIK5huiaqoxOX1Lq05Rd8jdPkiIxZK6TbXTDAMkOJznncQ:8xAM3H9/gv7PPcHgFVIK5huia1OX1LqW","tlshash":"4e444a9db4515178c37788aab8150600f32c2ba8f91c45dcf9fd6eda6ae4c50327af78","first_seen":"2026-05-28T08:47:05.604075Z","last_seen":"2026-05-28T08:47:05.604075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/StartPage-sU5ujwOD.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/StartPage-sU5ujwOD.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: text/css\r\netag: W/\"ddd379233f0e0c9a6feafbafbfa1d01e\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: bbe377a18ed5dd6b\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55109)","md5":"ddd379233f0e0c9a6feafbafbfa1d01e","sha1":"572a145a84057edcc1780651168e64063aa4d481","sha256":"5f69617ca46c01feff5d0a71518a67777a0279fc6f35fd6105900ba55d9f5052","sha512":"a074982b5e40c5fb1c2fc6634c896c4131cbd6434aeb0e5d1766bc31a793214a28c35d10874758d606f3ae9add271a547efea0eda2b86f9d27f5672504d2a0d5","ssdeep":"1536:2BSjCA8Vn1yi1CaUZUxLnLoa68aRLop6fopbvLoO6caxLo16xaUXUUUG8s:2BSjCA8Vn1yi1C8Ln9aRMbvdaxr78s","tlshash":"2933fd664af6c239cd1fdb5533d833884e78920ab10f16fda436a96547c339e0793e86","first_seen":"2026-05-28T08:47:05.641736Z","last_seen":"2026-06-05T20:46:13.877646Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quiz.provider.marquiz.ru/v1/quizzes/findByDomain?domain=avtofranch.kz","fqdn":"quiz.provider.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"51.250.33.8","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quiz.provider.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 00:36:23 GMT","end":"Sat, 04 Jul 2026 00:36:22 GMT"},"fingerprint":{"sha1":"EF:52:F8:79:25:19:72:E6:8C:94:EF:2E:2B:B3:B4:7D:6F:BD:61:C4","sha256":"D8:0E:3B:65:9C:12:77:6D:B6:BE:B0:A4:16:ED:48:E1:B1:BA:57:CC:B9:8E:23:AE:60:53:60:AB:28:55:4E:E4"}}},"request":{"raw":"GET /v1/quizzes/findByDomain?domain=avtofranch.kz HTTP/1.1\r\nHost: quiz.provider.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-xss-protection: 0\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 7998\r\netag: W/\"1f3e-hpFg6S3Q4/eHJQ64Cula8DRm0dA\"\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\nserver: ycalb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7998,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03af80f358b69dcc079b0163f117a0c5","sha1":"869160e92dd0e3f787250eb80ae95af03466d1d0","sha256":"4598c81f709918f1e9760318238b988f497b0abfdd6a6796f62dfa8c2fd37060","sha512":"d3bef1b6c368dfac5c1b6f1d4d4b2f85114094961f36a975b51e77c2dc16be33c3605c0e2b6eb621f8463f782ac092e40ee34aa5a80f8d8ea2b899764de24999","ssdeep":"192:SEZN8TNpIff2KoMK1Uj0urDsvXDrNWopQYrx7Mm:SEZcAZSUj0IMDRWmf1z","tlshash":"8af1651041681cff5645e68be84c7f0badee057f3ac95e1494acde7d61eb068c231a27","first_seen":"2026-05-28T08:47:05.644048Z","last_seen":"2026-05-28T08:47:05.644048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":103,"dns":27,"connect":32,"send":0,"wait":40,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/ConversionTrigger-Cm-uOaHj.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/ConversionTrigger-Cm-uOaHj.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: text/css\r\netag: W/\"adb2884e003fceebf5bdabf18739d756\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 59a2433f7dfb68f5\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7955,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7954)","md5":"adb2884e003fceebf5bdabf18739d756","sha1":"d47a5d7cca349bb24749d8a48e5e9ad2276ffd9f","sha256":"52f320032cb32dfbaa6da27b9f85352370081378f025b67335713b91cbf763c0","sha512":"d92359e49b46ceff8b5a7faa4135663e94e625a5629504562bad76d7420be9c2fef4c29af27a92c6e1d1d4e8a418e060b939750739d5db96e0a9ad27274f3c0e","ssdeep":"192:eCebiCebICBlTucKvE/F6nr8SeqAYRMKcJKFZg99jhe5kChe5k6di:VlTucZ/gr8SeqAYRMKcJKI9jqidi","tlshash":"04f1eebf9991028ae55f4e27c7dc99a80218c76724720ede738364078bc7bee61d9743","first_seen":"2026-03-14T09:25:34.008684Z","last_seen":"2026-06-05T20:46:13.875695Z","times_seen":62,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-DyH4K_hl.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/index-DyH4K_hl.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"2b965e00dc680169e11a2a28405f09de\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 16ffa504888d31ff\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":553326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20512)","md5":"2b965e00dc680169e11a2a28405f09de","sha1":"a662a4e3dc0a4aa9e0735fa1b37854ed4f388bf1","sha256":"847f9fc5ed094d4cc16b54158621b7f4aa964656de958ae35533326821de9d9a","sha512":"1a74ce8da93fda7aea84056ef42ac7330e1a2dc68985dd32ae6047f4d39a09a3e608be29ee466cacfaa271385f5df16539974a1963cbcdd502d87c08fcfa041c","ssdeep":"12288:IDajOGOIlHG17dvIGNIILA/ANLQu3g5bR21jqMrcEcoV51:IDajOGlLFAJF3g5bR21jqOcEcoV51","tlshash":"cfc45ad972c6707503a742f5907b0106f33a6d74344dc0a8f5acd9ed39a684aa27bf3a","first_seen":"2026-05-28T08:47:05.647025Z","last_seen":"2026-05-28T08:47:05.647025Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.media.marquiz.ru/v1/image/upload/2Frv1RW3J3ZkYdYvoWHHbe.jpeg?format=webp\u0026func=auto\u0026fit=cover\u0026width=1280\u0026dpr=1","fqdn":"cdn.media.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.media.marquiz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 07:58:22 GMT","end":"Thu, 20 Aug 2026 07:58:21 GMT"},"fingerprint":{"sha1":"DA:B1:01:42:09:6A:85:19:CC:3B:8D:42:80:36:72:00:2E:23:65:C4","sha256":"D7:AD:96:68:D4:84:E6:29:68:8A:D7:EA:7E:59:80:0B:C7:8C:E1:FF:8C:86:50:77:E2:C2:DE:31:77:79:55:90"}}},"request":{"raw":"GET /v1/image/upload/2Frv1RW3J3ZkYdYvoWHHbe.jpeg?format=webp\u0026func=auto\u0026fit=cover\u0026width=1280\u0026dpr=1 HTTP/1.1\r\nHost: cdn.media.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: image/webp\r\nvary: accept, save-data\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=345600\r\netag: 6a0dad5feaf0bf7b85fa2d85\r\nx-request-id: 3927df2bcf4ebddb\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x714, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6ecab127247d992223abfa71aa35b532","sha1":"106810dca81c74b963b9a5fc8b2dd8fe16f312ba","sha256":"85bd208fd0f3c168e0d56d7d7bb08ea8629b44c6ae8b42d2656faf85c77f4309","sha512":"5410afe8e5f9c01798b1433130267d49fa3f5a3897a49f8d15a82aa3f0762bfae0fd6422970141da04658ad8b9c1fecda7d61a8f5a451158952adb5672e3e339","ssdeep":"3072:9gxU3Kzd87ac3lKMWWRGoH5F1C1EYnsWgwK9/H:9gG3rac3EM9GoZF81nshwKt","tlshash":"fba302c38e99f6175954e94e30dc0fef9a3ca270c569279a42e4f44b340a9dfde402da","first_seen":"2026-05-28T08:47:05.649446Z","last_seen":"2026-05-28T08:47:05.649446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":167,"dns":13,"connect":51,"send":0,"wait":201,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/price-C_q33ZMl.png","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/price-C_q33ZMl.png HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 110252\r\netag: \"f1900f4f4641a0546cef5666ab04d013\"\r\nlast-modified: Fri, 15 May 2026 06:55:50 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 8e41f0eebf6a8a9f\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 272 x 312, 8-bit/color RGBA, non-interlaced","md5":"f1900f4f4641a0546cef5666ab04d013","sha1":"8042e500c3c1ff442a9589dfe36701dc50badf2d","sha256":"58c1378ea8439755268466d0db0ee1efbf7ee2aede9091b868d5e7cdab2bb48c","sha512":"5ba8662344004d9642efbbac00d825f9e9f2e7efa60b3d08e9d3bd7a2075768a62969cf42dd1ce7ba02c6f52b5ea67a56eaaaf16804f1637ea46de0cfc62cabf","ssdeep":"3072:yBBqKLLPVrhSNp4UmsS6swbcC+80/9w6HSU:6jLLPlhSNp4skCk/9jHSU","tlshash":"07b302f95865b60435c72b724abf65408ad3219fc1814abcba4ec463bf14794aecfe43","first_seen":"2025-05-19T09:58:47.059438Z","last_seen":"2026-05-28T08:47:05.652062Z","times_seen":19,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-CZIwYJyf.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/buefy-vendor-CZIwYJyf.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"8f4582b994b6e1df53925030ca81fd8c\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 22d72bef0281480c\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41287)","md5":"8f4582b994b6e1df53925030ca81fd8c","sha1":"8efd89355ccc7b9b820c32b481b52b9f9366cf27","sha256":"31a238179e9f39b7a2470881611c6066ccffae3a418a181cca86ce556c694336","sha512":"8eaa545fc9a3bc4323855bd5a3fb6605891d12d2cb9c670d9ef8a01e70a5ee8065b462e364c8570fb4fb11832f5d9ea6af67b275add925582fda252a294958ba","ssdeep":"1536:QC7fLmS/KRKWQBGRkoILSxft6F0FHjx70bB7GM2IDs:NKiGRknLSxfgmFHjxAbB7GYDs","tlshash":"19f30a8671946c360bef46c724180142e308099dfc5598fcbdbc9dee7b9ac4561aefb8","first_seen":"2026-04-02T05:08:16.154583Z","last_seen":"2026-06-21T16:39:01.125152Z","times_seen":91,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-D7BcS2pK.css","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:32.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/index-D7BcS2pK.css HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:32 GMT\r\ncontent-type: text/css\r\netag: W/\"2c27bd36488c9dbefaf822a615d95936\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 218512544e68bc44\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":323035,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61093), with no line terminators","md5":"56a3c0f95aead629ec6af21974e67557","sha1":"f5a998e2494f0fd0ba4d019bdaec75363423c86f","sha256":"8b7cf26c653e7ea43fcf9f2528caaf3c6f90774f9d0d4a36e8dc3d24c6b4748b","sha512":"779f2deee6a5ffa3d83ff33f2d4aa76b4fc3507b01bc3c6a34ad523b9dd181105c1c515fd80f4a7e3ebd4bb75295d8954b1e2af06f7a4f77aec4ab0f829fee8e","ssdeep":"1536:qVQlv/cHmDs0IlbhTPvBgnQfrG1Xkna6Ss+AxfODqOLZ4BqkAjzfw1VZN7c7RsvU:q93Pjr+UaRG7YJbL/QPfn88nzbBf5W/","tlshash":"c364a4e9d10805d2b73be923d384f79a6017f2b2c5091c6af96a150d6ec766126c3f3e","first_seen":"2026-05-28T08:47:05.655638Z","last_seen":"2026-05-28T08:47:05.655638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":561,"dns":58,"connect":48,"send":0,"wait":45,"receive":0,"ssl":456},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/crypto-vendor-CDjmgx-6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/crypto-vendor-CDjmgx-6.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"28134a627220142290d1330b54eae4ad\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 9dbd78a24bd54d14\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68911,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28134a627220142290d1330b54eae4ad","sha1":"08995b3c7e9a3c09270137f7272f4357243b1612","sha256":"69002b7763028cf5f54756af01b7b05916426503d33b6cbc1ad940d803448b31","sha512":"7b1ea9a8293c7e2fe8e2607162dace0ce48c3630d9499d5880cd1d61fd715de14e238163bc6aea99bdd78312ffb7a0c03f88f5654bbe5a698ef57657f78cfb61","ssdeep":"768:6weJAtk50znrah+NxrFkhrkL0ZLlwews5aNFZaZM9OT81390q/nqZzrtNASU9Ar5:reJAiWOwN/khQxewskt5cPtNPU9ArHMU","tlshash":"03633aca328870d163a764e0093f600b72b739a60a6c9588f554eaedac7c6dd4236d3d","first_seen":"2026-04-02T15:06:47.370542Z","last_seen":"2026-06-01T15:18:51.634119Z","times_seen":6,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4511155418234880.ingest.de.sentry.io/api/4511417187565648/envelope/?sentry_version=7\u0026sentry_key=f5416842c632ec3315e410d90222596e\u0026sentry_client=sentry.javascript.vue%2F10.53.1","fqdn":"o4511155418234880.ingest.de.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.de.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"88:B6:7E:84:32:D7:21:B3:BE:6F:2B:53:57:B5:0A:DF:6B:21:F8:A8","sha256":"FA:57:F8:3E:A4:0F:67:9F:A8:27:49:85:F1:73:F9:33:F5:C9:90:B9:57:B9:DF:30:F6:F0:CE:D2:29:09:9D:76"}}},"request":{"raw":"POST /api/4511417187565648/envelope/?sentry_version=7\u0026sentry_key=f5416842c632ec3315e410d90222596e\u0026sentry_client=sentry.javascript.vue%2F10.53.1 HTTP/1.1\r\nHost: o4511155418234880.ingest.de.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 426\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":426,"data":"{\"sent_at\":\"2026-05-28T08:46:33.499Z\",\"sdk\":{\"name\":\"sentry.javascript.vue\",\"version\":\"10.53.1\"}}\n{\"type\":\"session\"}\n{\"sid\":\"c6fca54c29a647f9ad4193b615f78f6f\",\"init\":true,\"started\":\"2026-05-28T08:46:33.499Z\",\"timestamp\":\"2026-05-28T08:46:33.499Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"864dcfa6\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-29T07:33:14.934147Z","times_seen":723320,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":112,"dns":24,"connect":25,"send":0,"wait":39,"receive":6,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.marquiz.ru/v1/analytics/opening?lng=en-US\u0026tz=UTC","fqdn":"api.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"130.193.56.53","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 11:49:05 GMT","end":"Sat, 01 Aug 2026 11:49:04 GMT"},"fingerprint":{"sha1":"A7:99:85:BC:F5:2D:05:19:D9:6C:29:FD:F9:86:D7:09:6F:0C:73:EE","sha256":"50:29:25:0E:36:48:D5:FB:61:F4:AC:62:35:B0:FF:21:10:D3:D0:5F:E2:C8:FE:BB:A5:3C:F5:13:E7:B0:B2:87"}}},"request":{"raw":"POST /v1/analytics/opening?lng=en-US\u0026tz=UTC HTTP/1.1\r\nHost: api.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"quizId\":\"69df18e2fcca0200193d7eda\",\"visitorId\":\"81791dcc-220c-48bd-86a2-288a00f16e96\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\naccess-control-allow-origin: https://avtofranch.kz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nsurrogate-control: no-store\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-06-29T07:10:49.834956Z","times_seen":32927,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/catalog-Beq42vgs.png","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/catalog-Beq42vgs.png HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 65026\r\netag: \"150ec5dcdd229722e7bea482ddf9bf70\"\r\nlast-modified: Thu, 19 Mar 2026 12:39:14 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: d5948b70fbadd5d6\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 306 x 282, 8-bit/color RGBA, non-interlaced","md5":"150ec5dcdd229722e7bea482ddf9bf70","sha1":"6bb65670613d2765787638f53d41b85694d64300","sha256":"f5f28cf8205390047ccf66e29336ba98e9f62edccc8b062779f5ea14a489f8c4","sha512":"0ee3af150f6a93728dfd3937f7fab57c0b66d0cf04cc5ab36c1668948e02f21858d557ab73a0d684fcadb52334ab9d9677ec484dbff8310a91fd8348308b041c","ssdeep":"1536:/pwbKR9jszSPJ4BmoWvhE1bfJkbvY2M+nU4a:6bK/jsKJ4B0hQkbi+nE","tlshash":"5d5301094e4078b260875b768ac5e9894f23a21fc5d0aca2b90e5e410f76ff12ced5f6","first_seen":"2023-05-10T15:33:41Z","last_seen":"2026-05-28T08:47:05.659272Z","times_seen":23,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/buefy-vendor-CZIwYJyf.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/buefy-vendor-CZIwYJyf.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"8f4582b994b6e1df53925030ca81fd8c\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: f4ea317b6766fad0\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41287)","md5":"8f4582b994b6e1df53925030ca81fd8c","sha1":"8efd89355ccc7b9b820c32b481b52b9f9366cf27","sha256":"31a238179e9f39b7a2470881611c6066ccffae3a418a181cca86ce556c694336","sha512":"8eaa545fc9a3bc4323855bd5a3fb6605891d12d2cb9c670d9ef8a01e70a5ee8065b462e364c8570fb4fb11832f5d9ea6af67b275add925582fda252a294958ba","ssdeep":"1536:QC7fLmS/KRKWQBGRkoILSxft6F0FHjx70bB7GM2IDs:NKiGRknLSxfgmFHjxAbB7GYDs","tlshash":"19f30a8671946c360bef46c724180142e308099dfc5598fcbdbc9dee7b9ac4561aefb8","first_seen":"2026-04-02T05:08:16.154583Z","last_seen":"2026-06-21T16:39:01.125152Z","times_seen":91,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/marquiz-vendor-BrM_Ykol.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/marquiz-vendor-BrM_Ykol.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://avtofranch.kz/\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"710c0a0d591b0cd13f0aa5fd7e3b8cf4\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 14503ff7e93754fb\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292557,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38073)","md5":"710c0a0d591b0cd13f0aa5fd7e3b8cf4","sha1":"18707cac2626803a59b2941d5f74318d20d13457","sha256":"afb2bdcfe55bf3f67e2baa9b452ce2e97da81d4c0869a1c2d3d09f07fdd82cfd","sha512":"19ebe449158cfb503de16c530c8257d29b583e0042c64cc541a9979de3727144f43a0aa6314ed7ab03f1af83fec772730c4d8774317ca2ef960d850307bed75d","ssdeep":"6144:+LkkSJroogaZuoxzc98M32W7p8BV3fSkSJroODDfhz41f:+IkSoopsjkSoO/E","tlshash":"2f54c4c972d3f0a583a364b0406f480af23e6d65a84cd068f2b7d5e5bcb9909c177f69","first_seen":"2026-04-02T15:06:47.384922Z","last_seen":"2026-06-01T15:18:51.642528Z","times_seen":6,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/whitelabelRu-JwwhnusU.svg","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/whitelabelRu-JwwhnusU.svg HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.mrqz.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/assets/Main-BpDctIOf.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"3737516599cee4a10e1d3a3317a7d075\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 0914009d0675ba44\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: MISS\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (967)","md5":"3737516599cee4a10e1d3a3317a7d075","sha1":"6e7ad0037798f7197a6ae71a62f18b5c4385d5e0","sha256":"110137cf081c0219dd8f6f260b4709a9ecbff68dc314f72baf9dd0a58e17c942","sha512":"82fbf64adcbb14cd10042f3433a4bc4ed9fda9b4d32b4cf86900af8928ada8b21430711dae6c642c332c6a6ef78f06c700f8ec038d72c894de8c95eba9475726","ssdeep":"192:Ws5FBDSyHA56kKW3KwAvhPWdWUupEpY3dWRWPYMT/8hPNWMdOL7rfDgu6QBY7jd5:vLZZke0+UfO7rrgR/d5","tlshash":"741224d432f841d4b443864edb3f01b3a8f9bcf79e9093e4e6919e54e10b4f449b69a1","first_seen":"2025-04-30T07:15:59.076015Z","last_seen":"2026-06-05T20:46:13.878942Z","times_seen":337,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/SemiBold2-fQv7AVbs.woff2","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:34.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/SemiBold2-fQv7AVbs.woff2 HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28892\r\netag: \"a72293461a122cdc3c8430e8d58a4219\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 2f89c9b3f4695c4c\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28892,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28892, version 1.0","md5":"a72293461a122cdc3c8430e8d58a4219","sha1":"4de27ddd675c3d4bea9c497a2743545e1da19cd6","sha256":"c0eb55048100de95c96b40e8c5bec08f2fc771c3fd96c73d36587bfd0c7a3ba0","sha512":"35184b4d20d146594e958a702e7a3894fc5f837be2f0916d33a2b2ed8fbbc603aa24a12edcc023ab1cf971c2f9556b6ff4ea099527a903354ded30adabcf5fda","ssdeep":"384:octfnJlLfGCrYIvzil/TKj85jU/SiUl6WLB7XXi3XawR8aURtoOtyjItOJCNZpJ:oct/PfGCr5ipFmKLB7niHa5a0TMIvNZr","tlshash":"48d2e0be8decd03e91ca87bff9d591afc2003a6bdd5bbacf8356084882091874241216","first_seen":"2023-05-10T15:33:40Z","last_seen":"2026-06-06T11:48:23.629779Z","times_seen":234,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/index-DyH4K_hl.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:32.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/index-DyH4K_hl.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://avtofranch.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:32 GMT\r\ncontent-type: application/javascript\r\netag: W/\"2b965e00dc680169e11a2a28405f09de\"\r\nlast-modified: Thu, 28 May 2026 07:33:11 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 4c171d1016270af8\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":553326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20512)","md5":"2b965e00dc680169e11a2a28405f09de","sha1":"a662a4e3dc0a4aa9e0735fa1b37854ed4f388bf1","sha256":"847f9fc5ed094d4cc16b54158621b7f4aa964656de958ae35533326821de9d9a","sha512":"1a74ce8da93fda7aea84056ef42ac7330e1a2dc68985dd32ae6047f4d39a09a3e608be29ee466cacfaa271385f5df16539974a1963cbcdd502d87c08fcfa041c","ssdeep":"12288:IDajOGOIlHG17dvIGNIILA/ANLQu3g5bR21jqMrcEcoV51:IDajOGlLFAJF3g5bR21jqOcEcoV51","tlshash":"cfc45ad972c6707503a742f5907b0106f33a6d74344dc0a8f5acd9ed39a684aa27bf3a","first_seen":"2026-05-28T08:47:05.647025Z","last_seen":"2026-05-28T08:47:05.647025Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1327,"timings":{"blocked":568,"dns":63,"connect":41,"send":0,"wait":185,"receive":0,"ssl":466},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mrqz.me/assets/crypto-vendor-CDjmgx-6.js","fqdn":"cdn.mrqz.me","domain":"mrqz.me","tld":"me"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avtofranch.kz/","date":"2026-05-28T08:46:33.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrqz.me","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Nov 2025 18:50:57 GMT","end":"Sun, 20 Dec 2026 18:50:56 GMT"},"fingerprint":{"sha1":"90:45:C9:59:CC:8C:5F:91:86:25:00:53:B3:F7:52:0F:C9:AA:EC:AE","sha256":"A2:07:CB:17:87:F1:08:10:0C:AD:FB:D7:A1:07:73:46:5E:8E:7B:4E:2A:51:FC:73:BF:BE:A2:3E:CF:F3:1C:13"}}},"request":{"raw":"GET /assets/crypto-vendor-CDjmgx-6.js HTTP/1.1\r\nHost: cdn.mrqz.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://avtofranch.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.mrqz.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:46:33 GMT\r\ncontent-type: application/javascript\r\netag: W/\"28134a627220142290d1330b54eae4ad\"\r\nlast-modified: Thu, 28 May 2026 07:33:10 GMT\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-request-id: 77a669070a0e6618\r\naccess-control-allow-origin: *\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncache-control: max-age=345600\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68911,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28134a627220142290d1330b54eae4ad","sha1":"08995b3c7e9a3c09270137f7272f4357243b1612","sha256":"69002b7763028cf5f54756af01b7b05916426503d33b6cbc1ad940d803448b31","sha512":"7b1ea9a8293c7e2fe8e2607162dace0ce48c3630d9499d5880cd1d61fd715de14e238163bc6aea99bdd78312ffb7a0c03f88f5654bbe5a698ef57657f78cfb61","ssdeep":"768:6weJAtk50znrah+NxrFkhrkL0ZLlwews5aNFZaZM9OT81390q/nqZzrtNASU9Ar5:reJAiWOwN/khQxewskt5cPtNPU9ArHMU","tlshash":"03633aca328870d163a764e0093f600b72b739a60a6c9588f554eaedac7c6dd4236d3d","first_seen":"2026-04-02T15:06:47.370542Z","last_seen":"2026-06-01T15:18:51.634119Z","times_seen":6,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}