{"report_id":"dec5858d-29fb-40cb-9188-49c4b52e2447","version":6,"status":"done","tags":[],"date":"2026-03-02T16:37:26Z","url":{"schema":"https","addr":"pasport-rf-kupit.info/","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":0,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"pasport-rf-kupit.info/","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"title":"Паспорт России без предоплаты - Купить","dom":{"size":9703,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6424)","md5":"e7a4922c09792bc49d4a7cb76e3fe240","sha1":"8d64179e31b2846d296ea6e6b9dcfc93379b2b23","sha256":"2013016b6e3160e55a06a509664c9c03713d8476b33624ce4eb2872b1321c0c8","sha512":"883f77ee2fc55c23b0b28e3ea621c4a60a66723ff9654649d7d8cdd8831e9e061b5c199616f2c5838ed6441f1349014c91f67004960b18bfaa5a15ac9f9eba21","ssdeep":"192:21S7gJMw3YhTrtnnAXWlXELW5nsiJDIcBxb2+l+CbcpVS4BmTEXJftP:1Rw3YhpnnAXWBvce4BwmP","tlshash":"901274222c442cb5ec334a705429738e7d3eccafba518bf9b4f95e61ae01cba0d1161d","dom_hash":"domhash493aa20762b35241ca9f797977afdd97","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pasport-rf-kupit.info/","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":0,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T16:37:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-02","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/64/2a/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pasport-rf-kupit.info","ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-02T16:37:27.956065Z","last_seen":"2026-03-02T16:37:27.956065Z","alert_count":31,"request_count":31,"received_data":1709896,"sent_data":14742,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maps.googleapis.com","ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-03-01T23:00:00.842443Z","alert_count":1,"request_count":11,"received_data":932650,"sent_data":5179,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maps.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-22T14:23:15Z","last_seen":"2026-03-02T00:43:50.147538Z","alert_count":0,"request_count":1,"received_data":297153,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"172.217.19.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-01T22:26:33.479606Z","alert_count":0,"request_count":1,"received_data":3020,"sent_data":841,"comment":"","tags":null,"fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/onion.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc55a88cc4c0590780624ad032a6a7f4","sha1":"f44e6cfa64dddb9669dd52b75ac524862be2a127","sha256":"847aeb80f7c85ba2c79425b19e96b0e03f6dcd24dbcb876b2373d9a5caa39de2","sha512":"92e9b437f556bc7ff471edf8fe1c1cc64687bd29af29a09814661d8de1ef9f94c4c10f5b26838f66c520038ec320037b110beb1d87684fdd78439c180b44da59","ssdeep":"768:8Kbm1iqXt5WoCFescwABib6aY5TpvRC5yR+nPfkgrKy86JEZ7BKOgKG0Kp9FJOX7:iEY9a3/Ve8jR9lJw1","tlshash":"25d2a3987193709383f2b6a1817b110be26d68c5f4488a9d78fc8dd67bf458a21b5f3c","size":30941,"data":"","first_seen":"2026-02-25T19:16:57.939835Z","last_seen":"2026-03-02T17:53:17.007459Z","times_seen":2668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/map.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"174fcc0356d5a2ecf7eaf08a6c9843ba","sha1":"27a6091ec6a9a3bcabfb7dbc50b6e997bdb95e22","sha256":"91e985e223de59888be230d80ae59e087db7590f8ed5fbd8ce85fb0d51f2199f","sha512":"5e6887bc04d5c3e1a72807667a8e700af31b238d7581ddd26948cde0ff4331fb4a89a474147d63c679d9fe5533e5b2fd2e904b972815e43887ba5926fe94fe2f","ssdeep":"1536:xjpnaD+/+hAc809O3KU3TkAKHPekdtF3k6Z0+2udefKQODoX4nP+T7Jpm82nz0Ys:x9naD+/+hAR092J3TkJmatRk6++fefKm","tlshash":"5d8309a5323235765ff6c5e4906b0202a169e44bb009c9ed3d2cdceb9de9c8711fab35","size":81644,"data":"","first_seen":"2026-02-25T19:16:57.950288Z","last_seen":"2026-03-02T17:53:16.996039Z","times_seen":2892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/js/main.min.js","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"16f70e411158c268f78505a97aaa83ae","sha1":"b6f23f3180df91b4a07692e3ad45a843c99db7a4","sha256":"7c82b457b1ff6cafcc5f38dc05a5ba1efa3b1c935c580727d2b61c288cc52092","sha512":"a3fe12bfd7db58f0d52b5a851c288c99a5df2945984cb0e2864c7a2b7abc0da4f0b2a2db3826872b2d1ae3298d3fa76df093fb60662014246cfd7a42e6a89982","ssdeep":"","tlshash":"6a51996ab2641c7808eb146e285fdf866cf21d42de00b794a8f9d40655a0bc113adaff","size":2602,"data":"","first_seen":"2026-02-13T07:43:55.990846Z","last_seen":"2026-06-28T15:36:10.29604Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/geometry.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ef1f5e17e15e2ef4133fb6a0270205f","sha1":"08a6cc103191d8785c0bd1b18be0573f1fb33e1a","sha256":"afe41e2e0f4a79ab7a108b6de474eeeaf44a20d030608f53cef231d22a13b984","sha512":"a76eb7b22c741267815090999cec479ce65066ae4c29f4dc05a1a4ad1f3f9f6bbe3be643773fcea7d2e6ae8982b0d9dafa9065d520f0aa0b75e38bbd0321fcf9","ssdeep":"192:4NBqCTY10e+V6D81ZWdxMchDh+Ah3zNcjXxgwNQw0LZ24BM5K7qRPnRB6AFigMcI:8qCTY10eVD0odxMUFdlcew+Z2B5K7qRQ","tlshash":"89e1c83836ae384b8370abd541b50053e956b25db14bda8c4c7dc78a66f64de01aef38","size":6920,"data":"","first_seen":"2026-02-25T19:16:57.963336Z","last_seen":"2026-03-02T17:56:18.322229Z","times_seen":3291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/main.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59973ec909c809ae3441209ef9e8a031","sha1":"1b85c257d59980005c084d18e3685fb5323c77a4","sha256":"7f52ec42d0d7436682fe41d1f0106069e8567424576c318b1d3fab109df6bfc8","sha512":"6a7ddf7466b40fdcaa70222775aa188d3c3d154468fd20501c562cbe5a152b25c77f5e860fe67cd6f37405bd74e4afd3a9c8e8d9159143cb6fd2d2bacc28e16a","ssdeep":"6144:QPlyfUJf28qcgl6IDr1ydu4hf0XPvB69R/VffrqTrzm249sAZ4GjDsSNnFgR9Uhf:AlyfUp28qcgl6IDr1yduwMXPvB69R/V1","tlshash":"3f542c9472a2306687b2e4e050370106f17e589bf04c8aacb69cdde3bdf69464677f78","size":298777,"data":"","first_seen":"2026-02-25T19:16:57.957768Z","last_seen":"2026-03-02T17:56:13.564842Z","times_seen":2721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d37b382b3ea2dca51eae7f9f677cbd3c","sha1":"39ba3d7af59eb26d209801f018b1baf3b0a4519e","sha256":"d0916835091e7bf04a40d4281f103a12ef334b4d137ddacaa95180719b9aa08a","sha512":"ed5c6212d62aa94f933c3b3eced6ba28f064c93f223ff00785d39c596b9dee7b4eab02e6598e67fc44ca5b4f5e56c8b2aa14f031f0b6d4f08c6b751c0c4bfaa5","ssdeep":"6144:OdmpIgvl+8RvUuaWlye0ySFxchHAvX0fe6TJNiPYbahIJBFTXUWv3:OdmpIgvl+8RcuaWlye0ySFxcVAvX0few","tlshash":"cd64d57c71316b0ee973c85bc627300e90257ddbfa9488bdeef55146ea94989f0e0638","size":312973,"data":"","first_seen":"2026-02-25T19:13:52.919495Z","last_seen":"2026-03-02T17:56:13.669654Z","times_seen":4861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e25ebf41f7ab82187afc5378e1110f7b","sha1":"88576646ea0f475b5a3affb01e08bc38946e1e34","sha256":"d6c7992d3109d03b34d93ab88bb60d6b7fbae5b69dd4451d2c2216e20f3771d9","sha512":"c0a719a8b37a1381fcfc076d63348294fc4f7b312dce4c79a0eba53f37a229a3b3fb71f7a2b3722ac2baf53e7597b6a6f14e0f280f1fe392c8ee3e8ea15e6adc","ssdeep":"3072:LiFBNvGe4AGgut+5nUWHaDl5l9g4zxALZXw8r0qqKWLEAMJwMBxvYTk9w/GMPbSg:LiFBN+e4AGP+xb6DlTKAq0xKrwMBVYTp","tlshash":"14c3e7d5719370737fb1a89404a70106b26aa89ab05dcd2db1fdc8f7aef185601f9b38","size":127860,"data":"","first_seen":"2026-02-25T19:13:52.924139Z","last_seen":"2026-03-02T17:56:13.542712Z","times_seen":4863,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-02","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/64/2a/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"73a7d45312af5257409ae353bb5d8421","sha1":"9559fa0f3c98881accae1f6426843f63299d9caf","sha256":"e54e2c323072cf1a7c9f893fca1353afae398dc65dce9e0bbabbbf433ab5ee54","sha512":"754d3f848c2c7f79c52afd2ff56662b1a721c74e8cab0fe7c6ef29d9f55f34c625d9a508d80f21d31b66fcf89a113659799032e5e14232726b32a8e2edfbca8a","ssdeep":"","tlshash":"eb31dd9835127cf6cf53166a2c6a795b7ddc00bf349189f278cc5e098f208b37512a5c","size":1549,"data":"","first_seen":"2026-03-02T16:37:33.77495Z","last_seen":"2026-03-02T16:37:33.77495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyCmL18misQw9KdwqGaw3zHkitj8vG6QF2Y\u0026paint_origin=\u0026libraries=geometry,search\u0026v=weekly\u0026loading=async\u0026language=en_US\u0026callback=onApiLoad","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa8e385c8b5e8414de0389ec1f6ecaa0","sha1":"f7ab17ae6b7406290dfdc9bb6c1487fd9bf9b1ec","sha256":"569f6d8e86a9d4b198c2bce6938cfc262238685acc9fd41e3cd8aea6344fbf83","sha512":"f4f652f4f262f2da2e998233cafd9b21a62dff42f8ab9621011a7ec9089f8ca22e383c910edfd4a1912584becd639859e4d0743c9a2e9ff3dfe9bb2f98985f4d","ssdeep":"384:lVsmiDzc/NFC2mcTAewzgH+KXHjGrue7IyFDCYmuyB6BzoOA0fhRSFkW3O7:lVtuzc1FClcTAeKKXHjGS+IyFpmnKV5h","tlshash":"4842a776a6251d3aed00f03ce49e3e0d39b35e1b2d77ead8b1b2a4c49d254b21c567c2","size":12901,"data":"","first_seen":"2026-03-02T14:04:03.07004Z","last_seen":"2026-03-02T17:53:17.043105Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/search.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d59f881849af73054c5dea3f0eeba49","sha1":"fd975bc2ff2b03cc6fc8e5979c03f559d9285e43","sha256":"5f1d443ec53eac40ec03104c6f7e4b12c871f55211477ac1bd210cf603884c10","sha512":"3f3a810ce344ab8028ba7ed2946b8d3ebf6d8c8ce9ecc0819ed3f9b3fbc5eff6a63d2b24e66ec6f9fa500245b6ca89b293781029d5894678e6b8edd6fb60159c","ssdeep":"","tlshash":"565175e33352b83b8266d27124aa0081c8685853e415854cfdbceddba8f5ea301faf71","size":2643,"data":"","first_seen":"2026-02-25T19:16:57.962258Z","last_seen":"2026-03-02T17:56:13.547034Z","times_seen":2443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.gstatic.com/maps-api-v3/embed/js/64/2a/init_embed.js","fqdn":"maps.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc16c7209979db2b2adc47ac4ada455","sha1":"edcc9fbcf21a0c24aba66f4bbeb19dbce32b8b8c","sha256":"1b02a717ae8ccf5b8c509bef6741e30ebec975804fbad4f0fd0a66b926e847c5","sha512":"462ffbeb2472fcf2ca6c8c6e85b6853f81969f947646bf0fc100df1edf69f732466750caf33e8fa154f10518b20fa6a61905600c919c7df72e68d52f15a5ebb7","ssdeep":"3072:RNRwhNKtcxjB8rXFyAu1iiD7imQgAN/EnDouHK9X31Xvu3IdZt6QIgkHu:/REj2ZyAwiMiWAN/LuHKtZt6QIfO","tlshash":"f7544c9c7661306a92b395f1002f114bb635ecaaf44c85b8f164e8e5ad74cb802b7f7c","size":296292,"data":"","first_seen":"2026-02-25T19:16:57.973824Z","last_seen":"2026-03-02T17:53:17.015208Z","times_seen":2443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/search_impl.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef7012e454f4a5dda1e2123646a22be8","sha1":"e9f8f5e2a4302392c8c6903c8d66c3b123320273","sha256":"7859782cd165621955fb121cde4a816711b875bac9270297d5fb1a5094a23a60","sha512":"eb4f1e44d5928ea114eb7f149fc4ec1f64b83607ee3474ac17a15c29bd0be36b02838473ef609de88e77a738c5b13527ad7e4a97511fd3ed022fa1e05bd71750","ssdeep":"","tlshash":"da7162b535293193024e55b05e998108315ce8ceb10ec4f6bea89f129fbdcdb53f1ab0","size":3586,"data":"","first_seen":"2026-02-25T19:16:57.940873Z","last_seen":"2026-03-02T17:53:17.016969Z","times_seen":2261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/arrow-left.svg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/arrow-left.svg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 27 Feb 2026 06:41:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a13cad-c84\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3204,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fbe306e36320a247acd25b661716918","sha1":"a76c8b7efc31feb8bf6dfeb70f11eef344d7d598","sha256":"a35070631cb4bb5599274c135a8ae050bc2a662aa9f68e8ca44ee4cb5a50e56f","sha512":"73ba054f9b35aa6ec989d53dd8d74f3ab2d7b0f01eb0e19f4f31bf14f0f80dbdebacb58ec39a1fb3070732b4fcc51ba699b00c28b6153cad3e5abe857d42c081","ssdeep":"","tlshash":"c461343a0ec48482567be7309aefef85e62a81c372835d4c77dd98565f304922e77788","first_seen":"2026-03-02T16:37:33.70325Z","last_seen":"2026-06-28T15:36:10.315361Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/fonts/BebasNeueBold/BebasNeueBold.woff","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /fonts/BebasNeueBold/BebasNeueBold.woff HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 19984\r\nlast-modified: Fri, 27 Feb 2026 06:41:09 GMT\r\netag: \"69a13c85-4e10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19984,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 19984, version 1.300","md5":"b39324fd59a2f8a6f4a0aba782db2afa","sha1":"098ffefbf05de10966621071a42c283e32fb4105","sha256":"6f8a00e892c1b6478798ee486d2a7ef8ea46a44982931232dcf29580830f103f","sha512":"c1a24d63882832131ea219ee3566b0254f8251140a6c216dfec94b2424a37cafc945985231f3ae5143cd3b5f6074eed57fcf6770fe521be48431cedec7e0d451","ssdeep":"384:qshda7EounDPhpWIlKng7x0SDrmYzu8F/Gtehdot4WS9RSZNgzeEXnDj:qshdTounDTFzKSWwF/0BS9oLgzX3Dj","tlshash":"d192d06d4f3b8e91ffba15304da4e403af2e121321336156a085d13b9ccd1e6bdc61ab","first_seen":"2025-07-05T04:02:13.096611Z","last_seen":"2026-06-28T15:36:10.316367Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/fonts/Exo2-Bold/Exo2-Bold.woff","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /fonts/Exo2-Bold/Exo2-Bold.woff HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 51584\r\nlast-modified: Fri, 27 Feb 2026 06:41:14 GMT\r\netag: \"69a13c8a-c980\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51584,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 51584, version 1.1","md5":"47e42b92fe37c3571cf798b68e351772","sha1":"48721cc32718170a6639d70b61a44e299446d1b3","sha256":"59bf4b1e5afd3ffcc286eb9c3b407d530f1b87e054433aef07ad3839fa3cc8de","sha512":"e1c19e5d43394a8dcd6166dd031c224ea12346fabcd60afa213758b420dd9c1445357ebc92d4feed8302ba6cc0fbf49ba36ba7bfe256745268fbff7aa3bf1628","ssdeep":"1536:7Fd1pxsRIdqI8UD01xCf/CTLLwnb6Ek872Cr:7Fdxsmdh8UI18f/mLEbT77V","tlshash":"2633023afa1349af470117e4c98e5ae0f71673e986c7fee99803e3719c03a075926931","first_seen":"2026-02-13T07:43:55.977222Z","last_seen":"2026-06-28T15:36:10.320507Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyCmL18misQw9KdwqGaw3zHkitj8vG6QF2Y\u0026paint_origin=\u0026libraries=geometry,search\u0026v=weekly\u0026loading=async\u0026language=en_US\u0026callback=onApiLoad","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps/api/js?key=AIzaSyCmL18misQw9KdwqGaw3zHkitj8vG6QF2Y\u0026paint_origin=\u0026libraries=geometry,search\u0026v=weekly\u0026loading=async\u0026language=en_US\u0026callback=onApiLoad HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\netag: f14e48a7\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 2608\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=11\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12901,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11748)","md5":"aa8e385c8b5e8414de0389ec1f6ecaa0","sha1":"f7ab17ae6b7406290dfdc9bb6c1487fd9bf9b1ec","sha256":"569f6d8e86a9d4b198c2bce6938cfc262238685acc9fd41e3cd8aea6344fbf83","sha512":"f4f652f4f262f2da2e998233cafd9b21a62dff42f8ab9621011a7ec9089f8ca22e383c910edfd4a1912584becd639859e4d0743c9a2e9ff3dfe9bb2f98985f4d","ssdeep":"384:lVsmiDzc/NFC2mcTAewzgH+KXHjGrue7IyFDCYmuyB6BzoOA0fhRSFkW3O7:lVtuzc1FClcTAeKKXHjGS+IyFpmnKV5h","tlshash":"4842a776a6251d3aed00f03ce49e3e0d39b35e1b2d77ead8b1b2a4c49d254b21c567c2","first_seen":"2026-03-02T14:04:03.07004Z","last_seen":"2026-03-02T17:53:17.043105Z","times_seen":38,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":84,"dns":2,"connect":8,"send":0,"wait":20,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2\u00261i10136678\u00262i5243158\u00262e1\u00263u16\u00264m2\u00261u768\u00262u376\u00265m6\u00261e0\u00265sen-US\u00266sus\u002610b1\u002612b1\u002614i47083502\u00268e1\u0026key=AIzaSyCmL18misQw9KdwqGaw3zHkitj8vG6QF2Y\u0026token=11824","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:04.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps/api/js/StaticMapService.GetMapImage?1m2\u00261i10136678\u00262i5243158\u00262e1\u00263u16\u00264m2\u00261u768\u00262u376\u00265m6\u00261e0\u00265sen-US\u00266sus\u002610b1\u002612b1\u002614i47083502\u00268e1\u0026key=AIzaSyCmL18misQw9KdwqGaw3zHkitj8vG6QF2Y\u0026token=11824 HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ndate: Mon, 02 Mar 2026 16:37:04 GMT\r\nexpires: Tue, 03 Mar 2026 16:37:04 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msaispmnec:805:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=msaispmnec:805:0\r\nreport-to: {\"group\":\"msaispmnec:805:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/msaispmnec:805:0\"}],}\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 45735\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: gfet4t7; dur=95\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 376, 8-bit colormap, non-interlaced","md5":"99a2286812006e8f57d274e859cab604","sha1":"9385892a07b3e6096db2c5c5189496fbd391d51f","sha256":"3bfe1892225515c1f1842c10d29c540889bb5712e4f244298783d312e0f4268a","sha512":"5084a88eeca8a2555273991aff3da1f8461885426617d843f963c9cb253d9957df3e9dc01f9c071738d84b71dfe045db8dae4bf523c8a1710120280107428929","ssdeep":"768:tLG3EjzloYSXIp7JukQgpag/rI4mqYLqmdkC/KmHg+1e+6E4+DWnfSu9pV:JuGLJueb/rIXJzw+1e+6E4+6fSIpV","tlshash":"0a23f17e9306ab92e75e5e390ad384a08cb052304db48896d9c7b944c9f9743e0ddbad","first_seen":"2026-03-02T16:37:33.710949Z","last_seen":"2026-03-02T16:37:33.710949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T16:37:02.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 7885\r\nlast-modified: Fri, 27 Feb 2026 06:45:36 GMT\r\netag: \"6a26-64bc895ad4bba-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27174,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1022), with CRLF line terminators","md5":"b40fd1bff257dd5b0c61817e06055b12","sha1":"1b2e287f4ddd9d27521de9df601dcb8c70f815ef","sha256":"c5eb9b7c039e561c73c0e641b5fd2325d0cc465c68e1ec0fceadd4f7da4efa33","sha512":"8a406fa56c088788955c3345d4dee485eb59714f5487ce6f7aee711bb86a54f2ff8409977ede4b722d8f50b13399191b40d445c38b4eba4997f640a8af2e0369","ssdeep":"384:OeudpKqH5Nac7Qag498QEBPiIPLa9KnNzO1iGezAj:OjMBDBPXLWKn9OczAj","tlshash":"5dc29c7046da24aa1121e04be805bf0dfde645bf7f6a930635ac2d7f3bf2814c62b159","first_seen":"2026-03-02T16:37:33.712599Z","last_seen":"2026-03-02T16:37:33.712599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":72,"dns":28,"connect":18,"send":0,"wait":28,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/css/main.min.css","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /css/main.min.css HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Feb 2026 06:41:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a13c83-8910\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35088,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35088), with no line terminators","md5":"56e561b1464403ab0b6daa361a0bf225","sha1":"f4cdcbbb507713665c63a04d0552178822873d20","sha256":"85c4e3d3562386b2593c9faac792d380e7fe37954379132e3b7a32cd91c6504f","sha512":"d23ca46c73bc3bb22f4178a995c08364108eb4da0e5a5353fb6c733958cbaf31c1a5e442b92f8de1b63a9c4969a75deb094170ec542eab2c83cedb81e1cd7b38","ssdeep":"192:DkXKkpIOXHysAsVb707w2cuXkqXi7ajU9V9ru9K9W9rByEhoY40aKbC+M79n3zQs:Xwv8oVYzDMJUZ6AtALyjkAHiwmopA","tlshash":"6af2a631c4442397b237cb1b75c2e814bb359423f41242afeb7d98aa8feab950171b5d","first_seen":"2026-02-13T07:43:55.93477Z","last_seen":"2026-04-28T18:17:05.121652Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/arrow-right.svg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/arrow-right.svg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 27 Feb 2026 06:41:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a13cad-c7e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3198,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e71bb806f52ed16ff91319eb946f8bd7","sha1":"4c5cec1521c10d86dff5e133c058c097e3fff9ef","sha256":"bee25bb4a6b0f872133b3440062143ff6a313645fe887c62904f75ed0e6f3bd9","sha512":"9ea6c905cb5f85dc54a910ed43d58a44d25e364eef3524dfefc098d44b549967df6e95aca4dda86f76ec304b244c07adf7be18507bb8336b0daeb6868e2e8016","ssdeep":"","tlshash":"4861f6391fc88646467be73096eadf85f62a80c372835c4cbbdd58564f308532ea7748","first_seen":"2026-03-02T16:37:33.726676Z","last_seen":"2026-06-28T15:36:10.345532Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/search.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/search.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1114\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:01:36 GMT\r\nexpires: Thu, 25 Feb 2027 19:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 423327\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2643,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (845)","md5":"2d59f881849af73054c5dea3f0eeba49","sha1":"fd975bc2ff2b03cc6fc8e5979c03f559d9285e43","sha256":"5f1d443ec53eac40ec03104c6f7e4b12c871f55211477ac1bd210cf603884c10","sha512":"3f3a810ce344ab8028ba7ed2946b8d3ebf6d8c8ce9ecc0819ed3f9b3fbc5eff6a63d2b24e66ec6f9fa500245b6ca89b293781029d5894678e6b8edd6fb60159c","ssdeep":"","tlshash":"565175e33352b83b8266d27124aa0081c8685853e415854cfdbceddba8f5ea301faf71","first_seen":"2026-02-25T19:16:57.962258Z","last_seen":"2026-03-02T17:56:13.547034Z","times_seen":2443,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 71878\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:01:32 GMT\r\nexpires: Thu, 25 Feb 2027 19:01:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 423332\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":312973,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (526)","md5":"d37b382b3ea2dca51eae7f9f677cbd3c","sha1":"39ba3d7af59eb26d209801f018b1baf3b0a4519e","sha256":"d0916835091e7bf04a40d4281f103a12ef334b4d137ddacaa95180719b9aa08a","sha512":"ed5c6212d62aa94f933c3b3eced6ba28f064c93f223ff00785d39c596b9dee7b4eab02e6598e67fc44ca5b4f5e56c8b2aa14f031f0b6d4f08c6b751c0c4bfaa5","ssdeep":"6144:OdmpIgvl+8RvUuaWlye0ySFxchHAvX0fe6TJNiPYbahIJBFTXUWv3:OdmpIgvl+8RcuaWlye0ySFxcVAvX0few","tlshash":"cd64d57c71316b0ee973c85bc627300e90257ddbfa9488bdeef55146ea94989f0e0638","first_seen":"2026-02-25T19:13:52.919495Z","last_seen":"2026-03-02T17:56:13.669654Z","times_seen":4861,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/ok.svg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/ok.svg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 27 Feb 2026 06:41:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a13cb2-cf2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3314,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f15cd6d8f07ff097d8fea9c68ee3278a","sha1":"288d4907ae01eb161233e81f40788f779517913d","sha256":"b9620111e622b1d5871baaea7d47814ce60b238bc3e7ad2e84142223f9b4de52","sha512":"7c14bc0ccca3b6212ab91eb27abc027d7a1d8db2bdf9db80aec3031f856e38b13de55881ff66aedde06e6a46f4c17eac806d2461b4ec84f25d21fa9e1440d124","ssdeep":"","tlshash":"24612e158cc0e00653780339fbf45a05ec229183828b0e4cf6ed79679f318963d9f26c","first_seen":"2026-03-02T16:37:33.731905Z","last_seen":"2026-06-28T15:36:10.300852Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/fonts/Exo2-Medium/Exo2-Medium.woff","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /fonts/Exo2-Medium/Exo2-Medium.woff HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 50364\r\nlast-modified: Fri, 27 Feb 2026 06:41:28 GMT\r\netag: \"69a13c98-c4bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50364,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 50364, version 1.1","md5":"d2c92efc24ab2f30faba4a5327e4a5cf","sha1":"7a90d58d51ed5f6056b87be6ef6442b9c99d396b","sha256":"57d9ea1a647041887c7ae65b369c10b75f0855a1ecf74071713c4412f2dfb38f","sha512":"b0cd86c9904ca320def726eba5b1aa2fe091a9e531a06ef919ace9a68cf008416cf99a8d5a73b4f76f3fe9e6ad60fb613f2a18a453815b931e4d355beefc3c16","ssdeep":"1536:+d1uhztRUBs1dIN9nZNxRfflUCSx1pwPfVLlU:+dsUrNtZNxRlUCSTpoVRU","tlshash":"3e33f2370d65021ce5dd195d58c8b6ce4900308fdea6c8def8a281a6e5167eaf318b1d","first_seen":"2026-02-13T07:43:55.941765Z","last_seen":"2026-06-28T15:36:10.337848Z","times_seen":8,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/fonts/FiraSans-Bold/FiraSans-Bold.woff","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /fonts/FiraSans-Bold/FiraSans-Bold.woff HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 127464\r\nlast-modified: Fri, 27 Feb 2026 06:41:40 GMT\r\netag: \"69a13ca4-1f1e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127464,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 127464, version 0.0","md5":"9d8a3d9066881718233c0a4709b6b174","sha1":"3833b2ec233e27d9fec45f7188ec19857d900b50","sha256":"e2fdd6eaff848d8c7c07611b7abb0fd14a12c2c4a83409f811d30ae316d2f76e","sha512":"1d1320455d875f8eb8ee15a7a25124d373bb0ff5726aeefafa66f5bb6a00fd882c7fba2643f8187008c83ab285771d1a0c375abfb365ed222e7505ea7f94322a","ssdeep":"3072:LamSVM3mg42R8aFzCAaAkr5KN4Y4JKe8utAzAgS5HjWLU2I1d+Bor:LQa3mwKQzCTAk9KN4au+zAR5UHkd+Bor","tlshash":"6ec31218c1299c7c79d989aa464d8db322ff87b944d738e70a2ef25d1bc30b81b57294","first_seen":"2026-02-13T07:43:55.952325Z","last_seen":"2026-06-28T15:36:10.333629Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/fonts/FiraSans-Light/FiraSans-Light.woff","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /fonts/FiraSans-Light/FiraSans-Light.woff HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 127008\r\nlast-modified: Fri, 27 Feb 2026 06:41:44 GMT\r\netag: \"69a13ca8-1f020\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127008,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 127008, version 0.0","md5":"58c6e92248aeec9d1f33144c2b550395","sha1":"dea6a2ec867062c63155a692ea82839a0da9e959","sha256":"f4396387ed76270d507f73959e7d783581da76c5c8d1a57f02e0781fbd23aafc","sha512":"a038c46150daa9d329b9e8d0ab800ec06e0662c7ef7f2b6ea1630973d1adfcf0095b9d1be9c8790fadcec48044e30dbf62ba0604f1bd2eff141a27343b160baf","ssdeep":"3072:5eD74GMSOVoD6esR5sqLUaUrxmTBqPqmLfj+2:5m7SpVoDYUaU2Eq2Z","tlshash":"37c3122475204069fa1eff33ce600b46e847f866af5f7f43638e4a0948aeb56cf19245","first_seen":"2026-02-13T07:43:55.972427Z","last_seen":"2026-06-28T15:36:10.319025Z","times_seen":8,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/search_impl.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:04.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/search_impl.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1330\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:01:36 GMT\r\nexpires: Thu, 25 Feb 2027 19:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 423328\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3586,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (565)","md5":"ef7012e454f4a5dda1e2123646a22be8","sha1":"e9f8f5e2a4302392c8c6903c8d66c3b123320273","sha256":"7859782cd165621955fb121cde4a816711b875bac9270297d5fb1a5094a23a60","sha512":"eb4f1e44d5928ea114eb7f149fc4ec1f64b83607ee3474ac17a15c29bd0be36b02838473ef609de88e77a738c5b13527ad7e4a97511fd3ed022fa1e05bd71750","ssdeep":"","tlshash":"da7162b535293193024e55b05e998108315ce8ceb10ec4f6bea89f129fbdcdb53f1ab0","first_seen":"2026-02-25T19:16:57.940873Z","last_seen":"2026-03-02T17:53:17.016969Z","times_seen":2261,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/slider2-2.jpg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:13.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/slider2-2.jpg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28084\r\nlast-modified: Fri, 27 Feb 2026 06:41:56 GMT\r\netag: \"69a13cb4-6db4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28084,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 730x244, components 3","md5":"5b08884d33ca9fc0b79fa25f0e90fd5e","sha1":"a985531ce0f08bc49779751ca85711bc549612cd","sha256":"bb9dbf673c538ef33afcb2092436554195d2d9005b1f34d182a46d897e204327","sha512":"fa76301778e533c0f96ea326422b82fa13c380433ee9b53ba125651b28f8a10cbae896d9cbbd7ed06638fd74c33939ece7bc625e959a229bc1ea7175ee180ee8","ssdeep":"384:FfJ/X9oeALdEWR4XZlDNEO+SnRJVAv/nMh/B7+d6TBhSpXgM1kswob:pJ/XCeUR4plKzcRq/s/B7+d6TBcmdsxb","tlshash":"f5c2e103d6c83d17f8e0913a7263d54b19205c3dffe9c392aa859e72f22a7c0956a4c7","first_seen":"2026-02-13T07:43:55.932174Z","last_seen":"2026-04-28T18:17:05.140855Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/arms.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/arms.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 401\r\nlast-modified: Fri, 27 Feb 2026 06:41:48 GMT\r\netag: \"69a13cac-191\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit gray+alpha, non-interlaced","md5":"3cb5e0e0b3fe31c51d85c34543b09a6f","sha1":"bbaf1b1f7d17b866a3aef784ee85bb0f54bcdd3e","sha256":"2e9e3452946945dd64389f1769bea9cc9da2d2c125e010fa8399febaf586772f","sha512":"c85dc20aaa6cde8b7d80190b288f18cfc391c4ca17183dade91dc9d9b1583f806c1b887f989baf95b671e55c96b47a5802dff340422241c8ae79c38f7f4dd632","ssdeep":"","tlshash":"ede0f179a3495e5ca3af2531c1c535106cb5cb53524586ac3cfc6a4dd024e5c9e1679c","first_seen":"2026-02-13T07:43:55.970857Z","last_seen":"2026-04-28T18:17:05.152729Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.gstatic.com/maps-api-v3/embed/js/64/2a/init_embed.js","fqdn":"maps.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /maps-api-v3/embed/js/64/2a/init_embed.js HTTP/1.1\r\nHost: maps.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 81200\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:01:32 GMT\r\nexpires: Thu, 25 Feb 2027 19:01:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:20:57 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 423331\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":296292,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1842)","md5":"ecc16c7209979db2b2adc47ac4ada455","sha1":"edcc9fbcf21a0c24aba66f4bbeb19dbce32b8b8c","sha256":"1b02a717ae8ccf5b8c509bef6741e30ebec975804fbad4f0fd0a66b926e847c5","sha512":"462ffbeb2472fcf2ca6c8c6e85b6853f81969f947646bf0fc100df1edf69f732466750caf33e8fa154f10518b20fa6a61905600c919c7df72e68d52f15a5ebb7","ssdeep":"3072:RNRwhNKtcxjB8rXFyAu1iiD7imQgAN/EnDouHK9X31Xvu3IdZt6QIgkHu:/REj2ZyAwiMiWAN/LuHKtZt6QIfO","tlshash":"f7544c9c7661306a92b395f1002f114bb635ecaaf44c85b8f164e8e5ad74cb802b7f7c","first_seen":"2026-02-25T19:16:57.973824Z","last_seen":"2026-03-02T17:53:17.015208Z","times_seen":2443,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":23,"receive":42,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/main.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/main.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 85216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:01:36 GMT\r\nexpires: Thu, 25 Feb 2027 19:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 423327\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":298777,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"59973ec909c809ae3441209ef9e8a031","sha1":"1b85c257d59980005c084d18e3685fb5323c77a4","sha256":"7f52ec42d0d7436682fe41d1f0106069e8567424576c318b1d3fab109df6bfc8","sha512":"6a7ddf7466b40fdcaa70222775aa188d3c3d154468fd20501c562cbe5a152b25c77f5e860fe67cd6f37405bd74e4afd3a9c8e8d9159143cb6fd2d2bacc28e16a","ssdeep":"6144:QPlyfUJf28qcgl6IDr1ydu4hf0XPvB69R/VffrqTrzm249sAZ4GjDsSNnFgR9Uhf:AlyfUp28qcgl6IDr1yduwMXPvB69R/V1","tlshash":"3f542c9472a2306687b2e4e050370106f17e589bf04c8aacb69cdde3bdf69464677f78","first_seen":"2026-02-25T19:16:57.957768Z","last_seen":"2026-03-02T17:56:13.564842Z","times_seen":2721,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37695\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:30 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 26794\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (726)","md5":"e25ebf41f7ab82187afc5378e1110f7b","sha1":"88576646ea0f475b5a3affb01e08bc38946e1e34","sha256":"d6c7992d3109d03b34d93ab88bb60d6b7fbae5b69dd4451d2c2216e20f3771d9","sha512":"c0a719a8b37a1381fcfc076d63348294fc4f7b312dce4c79a0eba53f37a229a3b3fb71f7a2b3722ac2baf53e7597b6a6f14e0f280f1fe392c8ee3e8ea15e6adc","ssdeep":"3072:LiFBNvGe4AGgut+5nUWHaDl5l9g4zxALZXw8r0qqKWLEAMJwMBxvYTk9w/GMPbSg:LiFBN+e4AGP+xb6DlTKAq0xKrwMBVYTp","tlshash":"14c3e7d5719370737fb1a89404a70106b26aa89ab05dcd2db1fdc8f7aef185601f9b38","first_seen":"2026-02-25T19:13:52.924139Z","last_seen":"2026-03-02T17:56:13.542712Z","times_seen":4863,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-02","alert":"Hunting_JS_WebAssembly","trigger":"maps.googleapis.com/maps-api-v3/api/js/64/2a/common.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/map.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:04.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/map.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25944\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:01:33 GMT\r\nexpires: Thu, 25 Feb 2027 19:01:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 423331\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81644,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3328)","md5":"174fcc0356d5a2ecf7eaf08a6c9843ba","sha1":"27a6091ec6a9a3bcabfb7dbc50b6e997bdb95e22","sha256":"91e985e223de59888be230d80ae59e087db7590f8ed5fbd8ce85fb0d51f2199f","sha512":"5e6887bc04d5c3e1a72807667a8e700af31b238d7581ddd26948cde0ff4331fb4a89a474147d63c679d9fe5533e5b2fd2e904b972815e43887ba5926fe94fe2f","ssdeep":"1536:xjpnaD+/+hAc809O3KU3TkAKHPekdtF3k6Z0+2udefKQODoX4nP+T7Jpm82nz0Ys:x9naD+/+hAR092J3TkJmatRk6++fefKm","tlshash":"5d8309a5323235765ff6c5e4906b0202a169e44bb009c9ed3d2cdceb9de9c8711fab35","first_seen":"2026-02-25T19:16:57.950288Z","last_seen":"2026-03-02T17:53:16.996039Z","times_seen":2892,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/logo.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1624\r\nlast-modified: Fri, 27 Feb 2026 06:41:52 GMT\r\netag: \"69a13cb0-658\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 47, 8-bit colormap, non-interlaced","md5":"f80d3f5de6ed8c53c516fa1c62b93b96","sha1":"304b4d5518100cb7ab6da16d991d81859681831f","sha256":"d5ab1dd34bfd6fef2ffde7321b3f61b8d33cff78acc3e34e42e3455ba2374133","sha512":"cf7a1b088998baedf362fd0487e3600cb11a515e74dc0b8b33147eb0154f117a8fc6264ab07a5a7761737c7d56d1a1da339cd41ca8b34059cec2916e5183989a","ssdeep":"","tlshash":"743150b225468f22ea83e3b3c66829fce4043d041315a225eefbf9d03ab22456c75458","first_seen":"2026-02-13T07:43:55.957755Z","last_seen":"2026-04-21T04:39:24.944624Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/news1.jpg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/news1.jpg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13393\r\nlast-modified: Fri, 27 Feb 2026 06:41:53 GMT\r\netag: \"69a13cb1-3451\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13393,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 296x155, components 3","md5":"869786df6cf958ac9329f40bf96bd046","sha1":"baa61ed63a35fce9cdaba9091e3e0f08c10150f0","sha256":"ca539c8bdca0a6d775127036de677cbc2af0ab7a4a38671f223d2ae2b05e9e67","sha512":"4ff9bfda49c75859ad8af33695234c686b7514858fc10f7ea1ae19e4ede4797fb9dd6b5cdf6bca328cd04b83ad50ee15a31885ef8583d4e19d826a8fcb6b0f6d","ssdeep":"192:vWOtHhD/VHveBTS2M1xPwnE9ow4JgiMCUonT6lGQGvEDca76zMPaEomrBOx0:eOrVHveix4yM7MsT6lnGvEDcaWzJRmp","tlshash":"5352b0a5f6c50d92ececaaf090a6c053b712b9263397a3d300ee1642b79f5a981c9552","first_seen":"2026-02-13T07:43:55.948102Z","last_seen":"2026-04-28T18:17:05.114517Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/quote.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/quote.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 332\r\nlast-modified: Fri, 27 Feb 2026 06:41:55 GMT\r\netag: \"69a13cb3-14c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 4-bit colormap, non-interlaced","md5":"925b4b302c0331d6db86c221fdfc7746","sha1":"6fde3aa97cafda778992fcdb2bdd224ed7f1b83a","sha256":"fa0522e9109ab1d011b585c075f0eae6e566948816624d5faf5033f49a3c6773","sha512":"987b57679d5d24b6056c9ed4296f6333aae47df2793ecbee6273ad3602659b5462fc4246050e6470e4128204a62050e95bae75fd6605034fe14cb3e15a28a58a","ssdeep":"","tlshash":"95e0c28bd2481c25ce1d07338f99aed55a66839d5807a52b29c1c6ad0a62a40936da22","first_seen":"2026-02-13T07:43:55.923086Z","last_seen":"2026-04-28T18:17:05.143741Z","times_seen":7,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/fonts/Exo2-LightItalic/Exo2-LightItalic.woff","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /fonts/Exo2-LightItalic/Exo2-LightItalic.woff HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 50748\r\nlast-modified: Fri, 27 Feb 2026 06:41:27 GMT\r\netag: \"69a13c97-c63c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50748,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 50748, version 1.1","md5":"3fd4ece16257ad91aa953a683da456a5","sha1":"5396d51b5cefcb56a871aba97548affe59d69d8e","sha256":"718b51c08fcc6a8619f24ee39f5c64e550fedce41484e4ff2c08e9d1109e6ed0","sha512":"de3fbd23be0878617d125fd7fb3d361ab5b52e93be77a4be9f959550f65c2c6a5733e0ee1ab9df0edd7d5096b6ec361b008b95c5c680ed8318c69c06323b67ae","ssdeep":"768:wRE0bd1fUN7Xbz4ouc9F72SRYespffQp2nuWi4HOzro9IOWnqXZX3Q91w:mzbd185rz4ouE7RPknuWn+roOIZXO1w","tlshash":"0c33f23e85cd0826c3a2753049c8eb5894eb13f957b7c2f9908650cb9b63566363cf5b","first_seen":"2026-02-13T07:43:55.981263Z","last_seen":"2026-06-28T15:36:10.332119Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/news2.jpg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/news2.jpg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26314\r\nlast-modified: Fri, 27 Feb 2026 06:41:54 GMT\r\netag: \"69a13cb2-66ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 296x155, components 3","md5":"b4749d3240049ee4d08a4632d419be7c","sha1":"b9281121d2c8832a991dfd52f9e518f862dc8a4e","sha256":"17244f8fa61e88b0c6fa7beef6fca41f5e80ce40e1468a1464e15dcbf662a531","sha512":"4d4c9fc3b95041d0f88f9b21c739466c394127e33b5cc8826f6c18f28d038e3b32fb5cf1522471ce8f8d061192744d2cefb50a624526030e41fb26f580e66e0c","ssdeep":"768:gUTWX9iXo+F7IqxJ0v9h/Kwd1EZLzEdSOQI:LWXw7l0v9XdS6dwI","tlshash":"1cc2d045bac26f349cd50cb29218e26463305d088ce7c9a21aea3f7fbd7316675981f6","first_seen":"2026-02-13T07:43:55.937223Z","last_seen":"2026-04-28T18:17:05.141928Z","times_seen":7,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/js/main.min.js","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /js/main.min.js HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 27 Feb 2026 06:42:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a13cb9-a2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2602,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2602), with no line terminators","md5":"16f70e411158c268f78505a97aaa83ae","sha1":"b6f23f3180df91b4a07692e3ad45a843c99db7a4","sha256":"7c82b457b1ff6cafcc5f38dc05a5ba1efa3b1c935c580727d2b61c288cc52092","sha512":"a3fe12bfd7db58f0d52b5a851c288c99a5df2945984cb0e2864c7a2b7abc0da4f0b2a2db3826872b2d1ae3298d3fa76df093fb60662014246cfd7a42e6a89982","ssdeep":"","tlshash":"6a51996ab2641c7808eb146e285fdf866cf21d42de00b794a8f9d40655a0bc113adaff","first_seen":"2026-02-13T07:43:55.990846Z","last_seen":"2026-06-28T15:36:10.29604Z","times_seen":8,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/fonts/Exo2-Light/Exo2-Light.woff","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /fonts/Exo2-Light/Exo2-Light.woff HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 48744\r\nlast-modified: Fri, 27 Feb 2026 06:41:25 GMT\r\netag: \"69a13c95-be68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48744,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 48744, version 1.1","md5":"babb3f4dc3171adfae8927cd36a8fbc5","sha1":"bc8d60d24465e048683d8473cdc56cc1a05c75a6","sha256":"f28386526363796aa9b83ce2151455ff322b9226ed2afd46b79165bdcfed4f1a","sha512":"89e6c548cd1a145fb1572a3a7a2278cc174abf7ba3a77c941fb0ba106e7499978b90c8bc1d8f3e776fd75dafda41592d526de5c176d5c86e2e8cb62e1e49167b","ssdeep":"768:dPTd13z0iD8eYGz0QBZmShDCsg6eepluhP2ejQ4OZLpfNromUuRjsckV/CCyLNti:dTd1D0SYJQmOHg6Dplm8fVaTBCPa","tlshash":"df23021faeb81832d9825f34d118830cee1c33ded467ead5d1699063bb27de54256387","first_seen":"2026-02-13T07:43:55.96279Z","last_seen":"2026-06-28T15:36:10.3273Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/favicon.ico","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 27 Feb 2026 06:37:46 GMT\r\netag: W/\"b52-64bc879a09d80\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-07-26T11:03:03.899323Z","times_seen":7297,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/geometry.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/geometry.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2498\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 08:42:06 GMT\r\nexpires: Fri, 26 Feb 2027 08:42:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 374097\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6920,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (597)","md5":"8ef1f5e17e15e2ef4133fb6a0270205f","sha1":"08a6cc103191d8785c0bd1b18be0573f1fb33e1a","sha256":"afe41e2e0f4a79ab7a108b6de474eeeaf44a20d030608f53cef231d22a13b984","sha512":"a76eb7b22c741267815090999cec479ce65066ae4c29f4dc05a1a4ad1f3f9f6bbe3be643773fcea7d2e6ae8982b0d9dafa9065d520f0aa0b75e38bbd0321fcf9","ssdeep":"192:4NBqCTY10e+V6D81ZWdxMchDh+Ah3zNcjXxgwNQw0LZ24BM5K7qRPnRB6AFigMcI:8qCTY10eVD0odxMUFdlcew+Z2B5K7qRQ","tlshash":"89e1c83836ae384b8370abd541b50053e956b25db14bda8c4c7dc78a66f64de01aef38","first_seen":"2026-02-25T19:16:57.963336Z","last_seen":"2026-03-02T17:56:18.322229Z","times_seen":3291,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/woman.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/woman.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 44756\r\nlast-modified: Fri, 27 Feb 2026 06:41:57 GMT\r\netag: \"69a13cb5-aed4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 267 x 423, 8-bit colormap, non-interlaced","md5":"71e7570b379860232285353b62bf3e27","sha1":"4e0697dfc7b58f8313f30dea3dd7cc4654c25b26","sha256":"cb0500b0966bf024d7aeab360d973dbe66e40ae2c20c261a1a46d269a3e4e248","sha512":"a4e3ca02933545e8db4ea0c6523709b69f4b783881c76a9e9f111beb6030e8b5c5fad7990dda9aab03eb166e17c62ab0bae5c08b1292cfaa2d4aee968014eed5","ssdeep":"768:d/pq2hsfSi6WgIujo/bG63A3X3r2hgGT4ANg1r8D+iNel/vNWg8zinWQ1bb/JlQz:d/pCfSibuQy63A3X31GT4c2i0NZnWQ1i","tlshash":"6613f25f75ee0ed5a09810e0ca1b07bd35055fdeb610e36dee90059e2129af12d77fa0","first_seen":"2026-02-13T07:43:55.989178Z","last_seen":"2026-04-28T18:17:05.129141Z","times_seen":7,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/news3.jpg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/news3.jpg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19111\r\nlast-modified: Fri, 27 Feb 2026 06:41:54 GMT\r\netag: \"69a13cb2-4aa7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 296x155, components 3","md5":"d781b0344ccea820359a7b88be007779","sha1":"69f747ddc5d076bbeef18be898cc60b6fef7b812","sha256":"33a69ff1354500b4769b66630ac0a5f9ecd9fb75e02937a99a213e2e1f96e247","sha512":"20974424c49fc56b7709fe17595bae2aa4f67d98a4bfedfeaa6cc7cd90a9d01ece928545c2f2dab9c010b0e4a48ff64b63e7eba73f477aab6451d9c7bc824fb7","ssdeep":"384:t73UprKxmDCVeAJiKQFe6BpauIumSg/GO5pdshT0T8m/Aaj6p/2X+Rl:tSKxmDCltQFBYmghT/r6pOXUl","tlshash":"e082e1870f224d62d2d3d5621f06cf6a126ade4b66b7833359cec92d7df01c0d78aa21","first_seen":"2026-02-13T07:43:55.959445Z","last_seen":"2026-04-28T18:17:05.17359Z","times_seen":7,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/arms2.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/arms2.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 50478\r\nlast-modified: Fri, 27 Feb 2026 06:41:48 GMT\r\netag: \"69a13cac-c52e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 353 x 388, 8-bit colormap, non-interlaced","md5":"7f67463f0444b401948bb6a24cd32dc2","sha1":"2c5336c8696735028ba8af3da8615d48bfeb1db4","sha256":"4d408aaef48a6e2ada13ba00e417f27944a4c3a9fe64db1708e68e6c746fae47","sha512":"3f06a211753f1b91043f2a07869ba6e108f44004744316ff607157c430ba00c70ce2485e7bca26a750eecd5845b4aaa180f1aed558523c4faa83bb299ce3efd0","ssdeep":"1536:h7cErVSmUnTv2MMi5YWfmsOWuR9fOiQ3W8zJn:VcQ7JMZi9WuR9jQ3W8J","tlshash":"9b33029aaed12d61b37c5a1cfe93f058001b1f312b83116d3bf710195b2826bbeacd46","first_seen":"2026-02-13T07:43:55.950155Z","last_seen":"2026-04-28T18:17:05.113646Z","times_seen":7,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/slider2-1.jpg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/slider2-1.jpg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61985\r\nlast-modified: Fri, 27 Feb 2026 06:41:56 GMT\r\netag: \"69a13cb4-f221\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61985,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 731 x 244, 8-bit colormap, non-interlaced","md5":"bb75e45c69c2322dc63a26cb3cd012d9","sha1":"6965ffd88df964aa7c251d47913667bf048639a9","sha256":"1ba6977903da01fa4aadbdb779a45bc834c803dcd6af3b4908e56845d4b6533e","sha512":"5f31497fd3bdea11272f5c2626d2c42cc4d412a57d30c50b2a55401c6cf64ed2a411d8872155779c793f5b6b98ffe93d10dd28b3eb909561983067afe4fdbbad","ssdeep":"768:idLXDse89H7zs5V2JfJSSAszH2fucFVH1raiwe2mdjjsK+/z0EcvT9bj4QI:idHse8J7zs6HWfuc3hpwcjH+/z05T94j","tlshash":"a95302a39ad59d4f5283e77824c5c3a7f40a69de23623512f13f9e23172cd2389d4e60","first_seen":"2026-02-13T07:43:55.964439Z","last_seen":"2026-04-28T18:17:05.131676Z","times_seen":7,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/icon-prepayment.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:13.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/icon-prepayment.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2035\r\nlast-modified: Fri, 27 Feb 2026 06:41:51 GMT\r\netag: \"69a13caf-7f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 59 x 59, 8-bit/color RGBA, non-interlaced","md5":"d34bb4cc645de684cc1e4cc14cb99bde","sha1":"029c88c212f37212136261c63a24665811214dd8","sha256":"4fa3ef3605db3f7829ea6078228d7f27020d4ce343227a2f9892e853de555887","sha512":"5546a0be05485706a78702eacdb4a3dbcb098c39b5c47c3025f3fbb24d4ef17b9446bebd2ff580e5d5b4ad15ea37a43f2d6c515f17a0958fe0d659ec89f0515b","ssdeep":"","tlshash":"88410a8353a3d8a7e4cb719b72537825cece31e64c3e2804219e575f52523cb48895d9","first_seen":"2026-02-13T07:43:55.987165Z","last_seen":"2026-04-28T18:17:05.171001Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/icon-duplicate-passport.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:13.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/icon-duplicate-passport.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 4044\r\nlast-modified: Fri, 27 Feb 2026 06:41:50 GMT\r\netag: \"69a13cae-fcc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 69 x 69, 8-bit/color RGBA, non-interlaced","md5":"0bc830048c0ffbe68016b6f937adb398","sha1":"c59e41fe055a31ce73027b03c23edfecae655eb9","sha256":"08239ab00eef6b255743910e3a69187f48cff646ef06ef2b4d0bd5833a3203f4","sha512":"cf36bd3c78cfb87be81269891c78fa43b988f9b9c20325e89c81ab16c139a3589b989cbd6ee68894875806c2197a9b3ec296b96b82acfbc28e62622b20f8438e","ssdeep":"","tlshash":"c8818fa3a264b615048fbf83b2027db984e173af79b64977294ba93c05c810c2d7701f","first_seen":"2026-02-13T07:43:55.925866Z","last_seen":"2026-04-28T18:17:05.111478Z","times_seen":7,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:39:05 GMT","end":"Mon, 13 Apr 2026 08:39:04 GMT"},"fingerprint":{"sha1":"AC:37:C7:AF:75:CB:27:69:D4:EC:B6:A6:68:E1:51:4A:A3:99:78:B0","sha256":"63:86:A6:69:FF:ED:40:2B:88:13:6E:3E:4F:01:08:AB:8D:96:19:72:D3:22:DD:14:05:79:8E:5D:58:1F:0D:39"}}},"request":{"raw":"GET /maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-pXPd4IwZUYsLXWSIo9AByQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\ncache-control: no-cache, must-revalidate\r\nx-robots-tag: noindex,nofollow\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 1005\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=158\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]}],"data":{"size":2263,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1282)","md5":"7cc0663a12fd4a300ce6c0f92d95aace","sha1":"4561411deb4a0f8c6181499586fd7142f8b414d5","sha256":"f213c34f4921cb53f81dd377c45f87d2851f54baf5b11ac8ffc779ae9f936c02","sha512":"61619ddad876430e0e3a19319d80b0345a732847437127cbebda3192b8d3b029b035fd1de14d88e73f546b9cb15660c8eba37b974b5e798ee138f4ff4ffed2d8","ssdeep":"","tlshash":"d8414e982922acf2ce520552196a374b3dde407f3891cdf239cc1e06cf119a77803a2d","first_seen":"2026-03-02T16:37:33.762312Z","last_seen":"2026-03-02T16:37:33.762312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":175,"dns":1,"connect":21,"send":0,"wait":180,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/bg-header.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/bg-header.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 305474\r\nlast-modified: Fri, 27 Feb 2026 06:41:50 GMT\r\netag: \"69a13cae-4a942\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":305474,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 833 x 753, 8-bit colormap, non-interlaced","md5":"33d026cbbbc83b644106f74ba78e5288","sha1":"0726ce0a5fe9d01b8f3d83c26e2ff2d12d747f1b","sha256":"18dd7776f422740d377af94058634cb9667bc0e71b31bd6dc7368ae714c8dcec","sha512":"7e6aed2d472d0cbabab2ac49acbadd497e78b17ea783d653f13336ace4d52ae0751386b068e8b8c8caa69142cc432025b5bf1bb79b37040618ea698023c0c027","ssdeep":"6144:LObuBIrE7PbO06BBGuFqH7Jtvy5qGRdjTUax:LUuBIrE7PbO0UGHvy5qSnx","tlshash":"0d54233d1d7eea2a915f9443d8635c49bc8e81914f434ca06c328bf65da27726fe630e","first_seen":"2026-02-13T07:43:55.939535Z","last_seen":"2026-04-28T18:17:05.148665Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/telegram.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/telegram.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 458\r\nlast-modified: Fri, 27 Feb 2026 06:41:57 GMT\r\netag: \"69a13cb5-1ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 18, 8-bit/color RGBA, non-interlaced","md5":"d554216b7ccfdd8136d5bb1f11e7f52f","sha1":"a8f86f90e3629aa83bc8723d0cc7caf2dc89ff4f","sha256":"51a5977c7e7748ecc43b91f7fb52b8a7d724444c8f205319b862f59fa473299a","sha512":"5f4e808010e00fb352117cf776448779b5b5352a35548957ba324885dbdd9c8734162e1d02d7714e7802ae89deb0d8feb8460136739155c757bfbef6d626373e","ssdeep":"","tlshash":"33f0238b753cb16bf3ef582269f779a4ce3eb0a12a289816bda1d44c0056f0d4ea2501","first_seen":"2026-02-13T07:43:55.96116Z","last_seen":"2026-04-28T18:17:05.122825Z","times_seen":7,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/passport.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/passport.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 337023\r\nlast-modified: Fri, 27 Feb 2026 06:41:55 GMT\r\netag: \"69a13cb3-5247f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":337023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 450, 8-bit/color RGBA, non-interlaced","md5":"e3dadde94a094e1159798338aaa38f4f","sha1":"7700fadff4d5bf3db0c347c35b4786de85339516","sha256":"616b9df3a5b10fdde85ab3e078ed5934114b352bc315794b180de68986004620","sha512":"b2a49c0046139b5e03886af70af5e73c404c83daa1224451d868acef6172f2e3d6b04dc601dfef6606cf003d0d2a558b377a60f62205e56adc82dfefb3503ecb","ssdeep":"6144:YbYjsW8jjkQcF74sC3a1CO3dxaUVy6yun4Wt6kxtrrrXXdCm3ZgkK3n/JqP:+WojLc1zCq1CO3baUy+n4WtFTXFCz/JS","tlshash":"3c64237cf8f3edc57f8b2f1857e99c09a0a47b8a419545748bee9d6862620043c2fed4","first_seen":"2026-02-13T07:43:55.944196Z","last_seen":"2026-04-28T18:17:05.138845Z","times_seen":7,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:03.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 02 Mar 2026 16:37:04 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.google.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=9\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-07-26T12:23:14.171104Z","times_seen":426638,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/64/2a/onion.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d2244.2673869556506!2d37.51482361593123!3d55.771227780558284!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x46b54973f9c1079d%3A0xadfa0b07f60e1ec!2zMS3RjyDQnNCw0LPQuNGB0YLRgNCw0LvRjNC90LDRjyDRg9C7LiwgMjUsINCc0L7RgdC60LLQsCwg0KDQvtGB0YHQuNGPLCAxMjMwMDc!5e0!3m2!1sru!2sua!4v1527768611407","date":"2026-03-02T16:37:04.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /maps-api-v3/api/js/64/2a/onion.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10067\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:01:36 GMT\r\nexpires: Thu, 25 Feb 2027 19:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 09:21:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 423328\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30941,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1803)","md5":"bc55a88cc4c0590780624ad032a6a7f4","sha1":"f44e6cfa64dddb9669dd52b75ac524862be2a127","sha256":"847aeb80f7c85ba2c79425b19e96b0e03f6dcd24dbcb876b2373d9a5caa39de2","sha512":"92e9b437f556bc7ff471edf8fe1c1cc64687bd29af29a09814661d8de1ef9f94c4c10f5b26838f66c520038ec320037b110beb1d87684fdd78439c180b44da59","ssdeep":"768:8Kbm1iqXt5WoCFescwABib6aY5TpvRC5yR+nPfkgrKy86JEZ7BKOgKG0Kp9FJOX7:iEY9a3/Ve8jR9lJw1","tlshash":"25d2a3987193709383f2b6a1817b110be26d68c5f4488a9d78fc8dd67bf458a21b5f3c","first_seen":"2026-02-25T19:16:57.939835Z","last_seen":"2026-03-02T17:53:17.007459Z","times_seen":2668,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/man.png","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:13.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/man.png HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/css/main.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 181612\r\nlast-modified: Fri, 27 Feb 2026 06:41:52 GMT\r\netag: \"69a13cb0-2c56c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 442 x 442, 8-bit/color RGBA, non-interlaced","md5":"9bf26cb904086b1eaefeae6df4e6cf38","sha1":"afc43ea714562fb795d06c577fc5ffd6530d8dd2","sha256":"36ce4949b544ee313fbca0841507995529a0e073f319cb16d8c307a5b41efae3","sha512":"ac9ed6a71af7403a5a97a3830f357ffaa7b565e67f310ca45e249cfbefebd1da611205278b435c7ca6d6b7cdba6acfb93d5535a229755638c60d2f38e78a2b54","ssdeep":"3072:t1PGJF3w7oWmOVr0RzNoW40+mbfimUrDbqwJHM763HellGfAwkOMbIWwC3Y:bPGb3wU/OSRCPqhODNJHMG3mGPkVbIWQ","tlshash":"4804238f43c8542ad4ec487949432df71059c3c543a9ea3db0a6532f3609a77a7ed23e","first_seen":"2026-02-13T07:43:55.94609Z","last_seen":"2026-04-28T18:17:05.156373Z","times_seen":7,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pasport-rf-kupit.info/img/item-1.jpg","fqdn":"pasport-rf-kupit.info","domain":"pasport-rf-kupit.info","tld":"info"},"ip":{"addr":"85.208.186.116","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pasport-rf-kupit.info/","date":"2026-03-02T16:37:03.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pasport-rf-kupit.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:49:35 GMT","end":"Thu, 28 May 2026 05:49:34 GMT"},"fingerprint":{"sha1":"EC:4D:3B:38:5B:42:E4:95:2F:86:1B:C2:B1:EA:8B:41:42:B1:33:8A","sha256":"1D:04:31:3C:A8:62:71:3E:1B:74:08:45:7B:81:15:2F:00:B2:84:8F:E8:1A:D1:12:E9:75:32:99:86:5A:3D:8E"}}},"request":{"raw":"GET /img/item-1.jpg HTTP/1.1\r\nHost: pasport-rf-kupit.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pasport-rf-kupit.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70026\r\nlast-modified: Fri, 27 Feb 2026 06:41:51 GMT\r\netag: \"69a13caf-1118a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 730x372, components 3","md5":"beaeb48597aa640a0bf4a0d970905c3f","sha1":"4356db6057d0053becd32e10d30baa1a722565e1","sha256":"637a56cb5e6245aabe9513cf98a6eb86a8afa668b4d47faea5c65eb1a4f6a138","sha512":"d7894253b452cefbdef8bea122900fed3e6cab32bc44bd816741ff120c176ca9e58d7febfcf2c77789ca57b86859d8cbc80e6a421d86577af6074389b55e5f82","ssdeep":"1536:RVrXckB6qYP/St8Yp7AqOehQaNVPyAENJKnJNrkEtdTSMAgiT1oc:RaPLP2CvaNm4zrk7oc","tlshash":"3663020bba5a0aaff44bcd2495f851a33979cf4570302aeb50837d285543d9d3e5b0ee","first_seen":"2026-02-13T07:43:55.921233Z","last_seen":"2026-04-28T18:17:05.150582Z","times_seen":7,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"pasport-rf-kupit.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}