{"report_id":"f5cd8c13-9941-40f9-9b28-f09ed70830d6","version":6,"status":"done","tags":[],"date":"2026-04-10T18:39:32Z","url":{"schema":"http","addr":"loffi.ru","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"title":"Корпусная мебель и перегородки лофт от LOFFI - производство мебели","dom":{"size":34774,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1453)","md5":"0f70082a25ffe56a55564a0385aef67a","sha1":"9a956045b661cb9dc363917a5f5b72b22ad5a091","sha256":"546b95bba2de00d172f2dd22019123ed59e5deb5f93dd004d17514c255b66064","sha512":"d9c84cd57c700a37e5a51bd5d149fc4593038dd56184208aacd93ee7cf1909c3850319becad42538e31488d017a51ee224493de079455ff6fe6e74beb1faf80d","ssdeep":"384:PtOstCz90PQ5cVNca3aAksqiYSVEU6XA49rX9xz21r:PtOstCz90Y+VNRKZiYmNC9O1r","tlshash":"e9f284a150f06dbb125342f676aa6e222eb59167c4d248117b6c0bf80fe7ed1fd0f924","dom_hash":"domhashdecf48366026d2b1acb3e35fcaa9c053","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"loffi.ru","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T18:39:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.tildacdn.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-07-28","domain_rank":335217,"first_seen":"2017-01-30T11:49:16Z","last_seen":"2026-04-09T04:42:21.628514Z","alert_count":0,"request_count":58,"received_data":1019192,"sent_data":26016,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"script.marquiz.ru","ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2017-07-07","domain_rank":1568372,"first_seen":"2017-09-09T05:03:22Z","last_seen":"2026-04-09T08:21:30.062002Z","alert_count":0,"request_count":1,"received_data":105102,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"loffi.ru","ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":12311959,"sent_data":4617,"comment":"","tags":null,"fingerprints":[{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":2,"received_data":63202,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","ip":{"addr":"92.53.68.17","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":2234898,"sent_data":3260,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yandex.ru","ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-04-08T15:38:02.909278Z","alert_count":0,"request_count":1,"received_data":28708,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chat.chatra.io","ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-31","domain_rank":346426,"first_seen":"2015-03-31T06:17:34Z","last_seen":"2026-04-04T10:20:07.252427Z","alert_count":0,"request_count":4,"received_data":4459,"sent_data":2032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Meteor","description":"","website":"https://www.meteor.com","common_platform_enumeration":"","icon":"Meteor.png","categories":["JavaScript frameworks","Web frameworks"]},{"name":"MongoDB","description":"MongoDB is a document-oriented NoSQL database used for high volume data storage.","website":"https://www.mongodb.org","common_platform_enumeration":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","icon":"MongoDB.png","categories":["Databases"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ucarecdn.com","ip":{"addr":"151.101.129.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-08-01","domain_rank":21962,"first_seen":"2018-06-24T07:35:33Z","last_seen":"2026-04-09T06:19:42.615353Z","alert_count":0,"request_count":1,"received_data":4800,"sent_data":504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"thb.tildacdn.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-07-28","domain_rank":489748,"first_seen":"2024-01-25T04:08:47Z","last_seen":"2026-04-03T21:54:00.755844Z","alert_count":0,"request_count":29,"received_data":44639,"sent_data":13897,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ws.tildacdn.com","ip":{"addr":"178.248.236.28","port":443,"asn":51115,"as":"HLL LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-07-28","domain_rank":382505,"first_seen":"2021-03-04T19:47:29Z","last_seen":"2026-04-05T11:12:26.578229Z","alert_count":0,"request_count":1,"received_data":715,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"call.chatra.io","ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-31","domain_rank":402161,"first_seen":"2015-12-25T14:00:06Z","last_seen":"2026-04-04T10:20:07.211926Z","alert_count":0,"request_count":1,"received_data":47558,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sysstat.tildacdn.com","ip":{"addr":"5.188.159.120","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2015-07-28","domain_rank":898269,"first_seen":"2020-11-27T10:01:52Z","last_seen":"2026-04-09T23:05:19.29081Z","alert_count":0,"request_count":2,"received_data":675,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static3.tildacdn.com","ip":{"addr":"159.69.130.130","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-07-28","domain_rank":1957364,"first_seen":"2020-11-19T18:14:33Z","last_seen":"2026-04-09T23:05:19.310586Z","alert_count":0,"request_count":3,"received_data":4976,"sent_data":1415,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-05T22:39:23.453784Z","alert_count":0,"request_count":2,"received_data":1664,"sent_data":2338,"comment":"","tags":null,"fingerprints":null},{"fqdn":"thumb.tildacdn.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-07-28","domain_rank":3280489,"first_seen":"2019-08-22T23:09:48Z","last_seen":"2026-04-05T22:56:22.930259Z","alert_count":0,"request_count":1,"received_data":3926,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-04-05T23:25:04.847364Z","alert_count":0,"request_count":1,"received_data":84592,"sent_data":437,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.cloudcomments.ru","ip":{"addr":"45.11.27.117","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"domain_registered":"2021-03-09","domain_rank":0,"first_seen":"2021-12-04T17:38:15Z","last_seen":"2026-03-27T08:50:18.950171Z","alert_count":0,"request_count":4,"received_data":947896,"sent_data":1770,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.0.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-05T22:24:03.651898Z","alert_count":0,"request_count":7,"received_data":2481821,"sent_data":3998,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"optim.tildacdn.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-07-28","domain_rank":486948,"first_seen":"2019-11-25T09:31:22Z","last_seen":"2026-04-03T21:54:00.688503Z","alert_count":0,"request_count":5,"received_data":93983,"sent_data":2603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-05T23:57:55.191025Z","alert_count":0,"request_count":4,"received_data":56068,"sent_data":1736,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":2633,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"neo.tildacdn.com","ip":{"addr":"194.48.203.181","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"domain_registered":"2015-07-28","domain_rank":358009,"first_seen":"2022-08-05T12:33:28Z","last_seen":"2026-04-09T04:39:37.778705Z","alert_count":0,"request_count":2,"received_data":4475,"sent_data":883,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-05T22:38:38.539019Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":643,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stat.tildaapi.com","ip":{"addr":"185.129.100.115","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2023-07-31","domain_rank":426885,"first_seen":"2025-05-08T03:21:31.212581Z","last_seen":"2026-04-09T09:43:06.465375Z","alert_count":0,"request_count":1,"received_data":597,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"static.chatra.io","ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-31","domain_rank":470474,"first_seen":"2016-10-28T15:58:38Z","last_seen":"2026-04-08T09:00:47.950116Z","alert_count":0,"request_count":3,"received_data":993109,"sent_data":1426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-N8PMLDN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df0b5fe3e1e1653926f0f8e14fd49d0","sha1":"7552972c5a226f31c75b53c8903f9d2d4a883db5","sha256":"7b0ed84e44dfb0a0398956366388b1c655c5a9102ed5f3f7a82f73c65716fb38","sha512":"8d3b7bffd88598a541878eda81bc76b38dab0c8c0c32a63a3d73cddd616c802774466f61196cd7b12e6ae5d63c2be619e26bb8a3efbeae986236128660641caa","ssdeep":"6144:4ESj7w7Ww0O5OI4wrj8V5GVl5Wc0CVu2YZz:8w7WoJp8cS","tlshash":"f76407cdb7dab45243a3a478903f114ba23a79d2f84cc894f086d9d42e746694277f7c","size":322679,"data":"","first_seen":"2026-04-10T18:39:51.811103Z","last_seen":"2026-04-10T18:39:51.811103Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f382e49205e658d43222f71674bd4d9e","sha1":"86ab93a7a44cd03b2c9e136705d458913caaee78","sha256":"9848f22a67ec7fb20ee3bbe3c30974f68998baae0d4966be7b88eace9a95e739","sha512":"518a3a69c6e9a7e955cc90c31629d4532b85f1f3e524cd7aa736fb39dff150b2fe2b1517f3c2a3cb2d3a6f060a6e2619d21f4bec41c0523086c73594b00474a2","ssdeep":"","tlshash":"9f4176b017aab47ec6591ca10c5f3280a53df9857f0358008f15d44a3498c8ff85fdd5","size":2203,"data":"","first_seen":"2025-08-28T15:47:05.843762Z","last_seen":"2026-04-10T18:39:51.88406Z","times_seen":723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0280f4e461ce3c802bd25ef110d5a405","sha1":"04d3f3668fb145ad1ba0735de68be1e08617eeaf","sha256":"9fc7eb9afc4867af3090939d17e0ee19e3506f7b41c38720daef15505aa7a1c6","sha512":"1b6230f0e7c3dd7fc97f14a3b53d69bdf67de5b74a77cc8c93c42bab455242fb58d5c4d2e7e59b68d36383fbb3d3ecb898bed42c80e92b564f67d94e87d02891","ssdeep":"","tlshash":"f1f0eb86190642483eea0076e739842cb1d6292981318a13ac8fe2523b9c5d98c3daec","size":552,"data":"","first_seen":"2026-04-10T18:39:51.884752Z","last_seen":"2026-04-10T18:39:51.884752Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0c0bd29565b2143b05d400a3c423b25","sha1":"61ec2c6d6309b9f62843fd0be6bdae0d8e17e491","sha256":"3a272736edf0bd9ab465e551bdf476750354e3521ea0ae080a6edce76787877c","sha512":"97fd1df931cb2d553b9d94319b3e5f119443434e555fa8bc21aad7657198564f9a91a398859a760e96d7a7e6ab4d40dc285dd13247a80ba648c79292771341ba","ssdeep":"","tlshash":"b851210824a310d9957b703d732f61593cb9e527314ccd81fc0c96995f64e3a2769fe8","size":2526,"data":"","first_seen":"2023-03-12T06:31:06Z","last_seen":"2026-04-10T18:39:51.886024Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1945d32cc42445da0f65bc77935d451d","sha1":"2c0d954b9f51c89302f72a22c88bb0d742f62b2d","sha256":"d98254658d007ba1c94a610ece3c5996918bfca9fa29d5c7d958fe7c8475f4d0","sha512":"5cdaecb9877be9740e256933fd62adbbc81efc3302509ab2ea53a312d060caade46f1f6dd21e5f402add5a4d76e09325bb9156ccaf5128d08fe12347227cd737","ssdeep":"","tlshash":"67e0c0da7411087170d905f523b1a1287143210868091c22cefdc9146858687481648c","size":341,"data":"","first_seen":"2026-04-10T18:39:51.88673Z","last_seen":"2026-04-10T18:39:51.88673Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollbooster@3/dist/scrollbooster.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9417a268ec57673681451e2a36a70dec","sha1":"fc3093a69f6e529697f429d53a513588a6751529","sha256":"4c9dcbd332e91b1b5ddaa9868a6a456d455b7105e3bce8b6742f4712907a63a5","sha512":"551277d6a82715e7738c4adc6c473f5efb90220eaef99b33bc7bf8aa7589bc79e8dc2ceab51d02550a28bb61cc7ce5b6e82e437d7c4ce7696a9ed82dd1b3a6e9","ssdeep":"","tlshash":"1711af5b3154b8a11b966050431f8017f051487222be75d1e36ecef5bc7446f10a1b5a","size":1000,"data":"","first_seen":"2025-06-25T04:14:48.216338Z","last_seen":"2026-04-10T18:39:51.888062Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f54e742240c303fb82f8ad1b6f95d34","sha1":"e76555193b804b4ef415c356a4ad4e87d5b611f9","sha256":"7633dd4f927592e585c1ac0386d6f3cf4607b7feb78b7094046dc2c948cb6b87","sha512":"75e17ebea427f178f55e4134f25840c8025a73bde042211656347edb60283280b0d20f7436b5440baae643df5d24662b3b3f845d91dcde79c623fddb3e188ce4","ssdeep":"","tlshash":"798000cc33838c0080fc8b000f0f33803a203000c2a00cb00c00b00c3302c83b0c22ca","size":38,"data":"","first_seen":"2023-03-10T00:59:05Z","last_seen":"2026-04-10T20:39:17.989464Z","times_seen":2976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"579132783a774d3d89cfa47d07a4a0b6","sha1":"73632000e6e96455685eaf6fdd9377463aa9b68e","sha256":"c8f53a6daa425b4f8f395f9b1b3eb52cba521c28d6fbbde266cf23b00a994caf","sha512":"631248ca2c9081ae483eaf339aed1f35ee310450332997ddb218c22d1d3e62baa689e1f5577aa373236e20290d114c15cac5833d81612dd9a4a1b7e7354c5749","ssdeep":"","tlshash":"06e02dcb74160cb274ee08f533f0e638b1032608a80a1c32cdfecc386818a87c81b48c","size":337,"data":"","first_seen":"2026-04-10T18:39:51.889367Z","last_seen":"2026-04-10T18:39:51.889367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-77ELWRJTYG\u0026cx=c\u0026gtm=4e6481\u0026bs=ctrl2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cdf965edf1a5f0ac6b1ba3994da6b07","sha1":"26d639287dc8ef7205a6e1dbd09d3d9a85b703b7","sha256":"557839b5b9f21fca18d4ad9914d9614dca8b76a5220c869b2016842ff1310821","sha512":"09353bbd181b623bbba3ce3aeef875adbad6c8b3d6423e8ae6919e343fb481bd085b8f173fcdb3db26e28eabf1a83931af940dc4d39a132635002d48a37790e0","ssdeep":"6144:jhESjtww7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:Zww7WiJKzV8Fuw","tlshash":"eda4f9ceb3d674225396f478903f018ba57b28e2b44cc8a9f189cce42d7469a5167f7c","size":471452,"data":"","first_seen":"2026-04-10T18:39:51.85225Z","last_seen":"2026-04-10T18:39:51.85225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/jquery-1.10.2.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdce12c949e78d570c8d44e9c2b23508","sha1":"9afdc4fec954646bd6270caf82f107fdef605bc5","sha256":"c73b004ebf31b395cf237c3d2b13c1e576f385e04660ceb5f7be163ff3c201dc","sha512":"b96588d93fb86228ecc8f501bee6db5f199b20b086fc88c683bbe1feb6c343dec3f99467e1d3140b7f4731d07adf2f918f0ca88bb257d10b5ab8879ff9ce8ed3","ssdeep":"1536:34mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:3GsKXlI2p0WPSbDrstfam","tlshash":"f193f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93064,"data":"","first_seen":"2023-03-07T12:27:49Z","last_seen":"2026-04-10T20:39:17.862886Z","times_seen":4204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"07423f1d2faba871da4bf35646033af5","sha1":"45e2dc843d0b7629cf47609ebd2089b14bcb3a5a","sha256":"ad4786a69f6c19a092a6c04379f3f1cc5295204b141661353521d4e316fc7cc3","sha512":"dd22de102042722f27d32da195592a13b9eeaf6976d27f1488fc3cb875c25279393a26767bc97f11ba7ca0a904ba7ea73c0c9178393d2335979ddbf7999658d6","ssdeep":"","tlshash":"36e06149f80d0871327b057553bf8515b0637514457109514cad859438659e3d50addd","size":402,"data":"","first_seen":"2026-04-10T18:39:51.890643Z","last_seen":"2026-04-10T18:39:51.890643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccd0edd113b78697e04fb5c1b519a5cd","sha1":"a6eedf84389e1bc9f757bc2d19538f8c8d1cae9d","sha256":"a57b5242b9a9adc4c1ef846c365147b89c472b9cd770face331efcb965346b25","sha512":"7a9cc9f66b3ed0fabecc532b1b595754dbe311782d7cac7d8ae116ab3de199b694da6fc3a75a5c9a9633b927432ea5fa3cc223ccc3b2185c0c73e4a480584c16","ssdeep":"1536:mnWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhMr:GUL5uxNL/4Cr3lOr","tlshash":"8083f9dd73c2b06257bb20b9006f640ff2364d6a280d8564f125d8e9bcb5a4d827bf6d","size":83606,"data":"","first_seen":"2023-03-07T01:16:40Z","last_seen":"2026-04-10T21:41:18.315147Z","times_seen":5837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c8ecad9a7d374a14c669fcbcf7c5d58","sha1":"9aa3129b785ba50ee0d0513253e6175654f8451e","sha256":"11366138e7eeb344bf44a9af02555da4e7ab951646e22b2b90be7ac128bb2e00","sha512":"005b8525cd43cb96905b9ac912fdb86c70d74cae430225ce4f2820306fbc35a065adb9c955c7d3871e0118ab5a527a84ce6304b0c95c2e516ad18d00d53df0ee","ssdeep":"","tlshash":"0e11239c45092134401be2a1b1bfd7083a3aa265b32840c450adddb46ba2e852233dcc","size":1070,"data":"","first_seen":"2024-10-11T08:26:26.133713Z","last_seen":"2026-04-10T20:39:17.99003Z","times_seen":2644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/ws/project3267520/tilda-blocks-page27921274.min.js?t=1775157563","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2decbc547ff43c696e64a33356abf470","sha1":"99d1a42bdabf586cd97819b42f95a818fe251bbf","sha256":"ad971ab2ff72a55872568c94db4ae263770cfc7584df6ac92ce7ceb07646e3ba","sha512":"0d70af09a25d193210e61c8d8f226315e6897d5467934eff9d09d66515fde28d1d874616db75454cdf6049ffdce827313c077140cfcbaf0a1febd5e94e4ad62f","ssdeep":"1536:djJOyNQnzkJQlzcplEIE0xirfUXVRK97PF9:5YyNQn4Mz4PtPK97P/","tlshash":"1533c9f939102072c4ef5677d15f2bc5b6311292bc064ca0945acdfc9db49c25fe2aae","size":50744,"data":"","first_seen":"2026-04-10T18:39:51.877473Z","last_seen":"2026-04-10T18:39:51.877473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.roistat.com/api/site/1.0/e4037e210c7e4b542f69eb7168f30904/init?referrer=https%3A%2F%2Floffi.ru%2F","fqdn":"cloud.roistat.com","domain":"roistat.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0173c45c082e5bcc0be7eee8875ef775","sha1":"6d70ee63f94e227ea7035faf3744e2d187baa719","sha256":"028d9cefde2d3c0b56494b395b785eb54c22bea89f6e1412c9e2086273b33e7d","sha512":"095b8267af8f640fd4ba4992a18960bc1c73fe09d3206b98733b0070d99f7e3fa46fe83637ec1773c4d526098b31ecefd7890f1ca9d6dc5be98181a1d9c8317c","ssdeep":"","tlshash":"fb80008c0a82c208a2e20028828a3e30b22b2220a8b203300088c008028080888b30aa","size":28,"data":"","first_seen":"2023-03-07T13:10:16Z","last_seen":"2026-04-10T18:39:51.892593Z","times_seen":839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-M7NXTZP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8df175fb01fba35ecc56b2ab4c0ef75f","sha1":"20824d3306c53f038627a85f1cdf1600d98f9fcd","sha256":"6809246f759bcb9355bbf2e08b84aefd006fc2e18e5f5eec1b6f26c93bd7666b","sha512":"324bcbad3c1e175ff4d29749671a139176f8a1ade3d22015d906d6251435ea0667c9129afcc169f3d1028bc98c46cf340d2e988151b04a1a70b689e1e54895d6","ssdeep":"","tlshash":"fd11275f7451b37b523333abe13fcd4df13930725e09b41581fb4888aa6363a105985e","size":1000,"data":"","first_seen":"2026-04-10T18:39:51.89327Z","last_seen":"2026-04-10T18:39:51.89327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-animation-2.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2219912e772b40c1433a34e532d76fec","sha1":"33901bdeccbda70885f394bb0bda42710b61f25f","sha256":"c764f6558612179a585b3b4e0f4e952a12142d0b158c5b570160cdf3db82b524","sha512":"09afda2a6005396922fa293a737e3ee43b830a9c612f78e49ff73dbb017824c86dcf81965f0dcbf891fd046e922b72d381b300b5ddd226124b8a43e6bb2ce902","ssdeep":"768:56fSctcnLcn1cnscntcnOcnFcnccnTcnGcnhcnCcnPcn2cnvcn6g+6bc78INhAiJ:pCYhze","tlshash":"1bf2a69bf654a032437732b281cf618c5e345d55a50644acba3dd88f2864a4ae37fe3f","size":35449,"data":"","first_seen":"2025-11-25T15:07:41.355429Z","last_seen":"2026-04-10T21:51:46.233217Z","times_seen":953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-menusub-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b4adc18c70ebdd5d472cbda4500519a","sha1":"a5f008fc94d4d03ff35b437b6d915aeeb6fa87dd","sha256":"41e216740d395d4e207e384ee4e1379897e22846f7ced58f80581b336f4d76b0","sha512":"c1c5cb62ba99c7261b2ec6d0f7d65a0d1681ce3252ea23c8bbf1a521d01032009ce49112c7fc882ce05299254d1b0c1187c231101025f391f0303f3a0d9e4699","ssdeep":"768:tagp0hWDBkkGmDu2zASyrr01gk7wIRiyMDTfo3zRqDp2hxL6RHVXNLr1YlX9Zjq0:tayLyEpxx3SVXNLpKjjku","tlshash":"b20363d87944663245e35e79a1dfec8b5330d17d8c09e8001879cbe92df888f72d6a9a","size":40590,"data":"","first_seen":"2026-03-31T15:40:14.446215Z","last_seen":"2026-04-10T18:39:51.878603Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f578cc44ad2037e7ad99568e150c4bf","sha1":"49ca5a3957ac327dfbdcd0038d6dbb777513aecb","sha256":"b35cf8beea2d618ff404dbf77a9fde02cdfaf2d411b1e4077a65e7195b57da51","sha512":"5c9bd5cace35aeca57a064dc30457271230db1246b4db1aba4192ff96671cec74f355b8d35ed16502fcad4670dd45871ad4d27bd15b250fa39090bede197dd9c","ssdeep":"","tlshash":"f64180c4e98527bf44dfaa67b2ae4dd4a321d4c5d54e44104272cbdb0da0483fbe16dc","size":1881,"data":"","first_seen":"2026-04-10T18:39:51.894535Z","last_seen":"2026-04-10T18:39:51.894535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-cover-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ab145eb917714b1f05079f14a113c5c","sha1":"e1da1d0e1458f891c995520a5ea544f88384c9bd","sha256":"1478b4d14b5a972dd7241b9f87be10e6c7df36eda115bede48e95282f6eb4da1","sha512":"2f8e05d7fe8ac1d76a04c1e1be7b9d436cb4e64e185a4c9ff0d492d52e0aa15bf5e111d70b35400401554b22b794daaa2436aa01845e2ba703324ff938fd910d","ssdeep":"384:qoSYIVGKgEWq6IlqNY5t/fvkVqzSDwDHRXpOQFtwwlcfUc:qoSYIVNHWq6IlqNYt/fvkVqzSDwDHRXq","tlshash":"e2727438b229783f4a9b257b6caeb34177702110f60244107e19d4986bf8e8ff653de9","size":16409,"data":"","first_seen":"2026-04-08T08:59:52.235474Z","last_seen":"2026-04-10T18:39:51.856974Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e150065293a3e96d0a4b8ddde6f0fbab","sha1":"6eb4870d032e7a2ab63d43cc1a0e418c57d482e1","sha256":"da78045b038622cc8e3c41e2631a6050799f916ff7fc872da0331e59c21f56b3","sha512":"40bf76bb8ab6eb4030c80058a40155b0cd1d62b058e88beccd026287e2ba48df0bff7140111e36e851f2363408838b8e0452ffa46f1bf877d32af1bd454d9ca7","ssdeep":"","tlshash":"dbe086a8b45b61b7852a2557f16b5b00193da846f80fc8184e188a9d2e1241a588a619","size":310,"data":"","first_seen":"2026-04-10T18:39:51.895842Z","last_seen":"2026-04-10T18:39:51.895842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f8bf0e0fb3f899b2b0d4b597d30bf98","sha1":"14a3b8853a247fd6c4c292c36ac51b0494ffa762","sha256":"92a813928e41c6ac010c354678d676f304ac4e5e5cc2b8056b5b9bd15cf4ae47","sha512":"3148ab7ef18edb6367c97d8ed31096bf64fa0e665a66875733b4f1cac51184f6f4c13291b92da119e43b30d81f557f4a805e804c735cc3e23da44d2d558003c1","ssdeep":"","tlshash":"c3b01108f82f3a83000230a8e02b2a08083aa802a80bc8000a0008ac3eaa00c800ec0f","size":88,"data":"","first_seen":"2026-04-10T18:39:51.897339Z","last_seen":"2026-04-10T18:39:51.897339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-scripts-3.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ce49b1b94c882409564be1f2f6b1b55","sha1":"49af92e89858c68224dbf01f303c610d7064c464","sha256":"0559eceec65bb4d3c7e26b1df8144d2d423fad9570d56231ba4bc7ba33509f48","sha512":"ce8580ea190fea469ca2176c24c280b58ca920a60b358fe6aa8c19f89623906f683df075dc7723f2c4c5a8dc3f0f0ed8ae23c3fcbc790c8f673440c8b1f4ce0e","ssdeep":"","tlshash":"e611af48b104b93b02b397e122df63493671d564a8974560c078fcd1b469cd7856bfea","size":1000,"data":"","first_seen":"2025-05-12T02:41:43.422748Z","last_seen":"2026-04-10T20:39:18.008364Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neo.tildacdn.com/js/tilda-fallback-1.0.min.js","fqdn":"neo.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"194.48.203.181","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e582042c3e2c49a8f2c1aaf96c70da0","sha1":"d72ccdcc11d24594480a4ca8b699c029a8e0765c","sha256":"cdf65e26b905a653bce60df182886b032b606940391badb1e3a655f434ca446c","sha512":"b289159bb4cd83316ce8a9a9e0e53a845065454ac847e54fcddecbdb201ee84c0a4623c5288680e472e5c47bb4ef5852b399df43786a1e745f4165d99a6b0644","ssdeep":"","tlshash":"c741cc70a51fdc324e2393ab94bbf71734b901066d0bd1c22aa9dfdc9c62c8a5355b4e","size":1918,"data":"","first_seen":"2023-03-07T18:27:23Z","last_seen":"2026-04-10T20:39:17.972653Z","times_seen":3929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"eba71d1ae76eb3c0dc68f69e4f8129fd","sha1":"950a571cc8d2b3289ae72c16e2ea5f7bf07b335e","sha256":"8a9a14768c9ca838e84a8577858e4f9e086b37553cfaafd80a497c3dd5ac7cc7","sha512":"7ed66a7d03050ee0ed429f7ac6a3592d2272edfb0dd1398aa97887433f1b94cfc7f10209f138d7586c04be79725a4e9477a80bc90091e30b1c3f0a159c0bcb91","ssdeep":"96:RwjNDEDI/d1j2bDEna8aydH9H24yfiypUm:yIDI6bD8jaydH9H2FfiypUm","tlshash":"bab15805e1ba195f4173602e5a537014aa68017f7c46f61bf77c0b8d1fdba1ec2b9a4c","size":5581,"data":"","first_seen":"2026-04-10T18:39:51.899391Z","last_seen":"2026-04-10T18:39:51.899391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.chatra.io/jscss/7d8b6a8987294abbe8eee9ac227340f24b378090.js?meteor_js_resource=true","fqdn":"static.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bb57cc7dd811817264666199daf5907","sha1":"4efcaa70f1f229b7b6be5fe799682e8d891d95f5","sha256":"08d204551f7a6c1055b145eab91cd7b75fbc763bfdb850ac49a8549172523684","sha512":"3520fd6a17e04c654de669dfb80a966d6595e0687da2797acc65328aa387fde065d42b16522560fc19e5d0327f43a04f85bc74e74e1922c6b16eebaf0c9ce01a","ssdeep":"12288:NF3+ERvDTY7hgX2s1zbJPBy1FlZzEeHCgD2eHzIGuSwqOU+:N4G7Tms1zbJBy1FDzEeHFxzIGuSwqr+","tlshash":"fd1519b8b1a1f9a503a7226d587b6002bf392957340e8450f12cc9ea7f7858d6277f3d","size":906389,"data":"","first_seen":"2025-12-16T12:36:34.259981Z","last_seen":"2026-04-10T18:39:51.830487Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/sandbox%20eval%20code","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-10T21:53:59.762243Z","times_seen":784722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-10T21:53:59.776193Z","times_seen":783155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-errors-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"afae85e9209913000d4e81934f55f2c3","sha1":"d1f019d9740cef62dec134025926c7a2c669d3db","sha256":"6e5e9ef93d1cfbafb362c941abb36418c483c0f8edf5a0f98b59a3bb1e0b91de","sha512":"020a91dbf23254b19182a66381823a49905352d5cea0a5a2342065f83c055a0ee9c75320d7b36a85311e6e86fb7a5ffa6daf22a0c45f7f9ee8a8838e292dc2b3","ssdeep":"","tlshash":"e751ac970e40d4730db61e928be7370638615d6e14bbd4412123a4ae7c8af9bec58fda","size":3065,"data":"","first_seen":"2023-03-07T14:57:56Z","last_seen":"2026-04-10T21:48:21.17618Z","times_seen":871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KXHV4K5S3C\u0026cx=c\u0026gtm=4e6481\u0026bs=ctrl2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1019446a92cfbb1d10683d6770b85fbc","sha1":"e887ebbf38121e130f437b9b1afae3f42659881c","sha256":"baa9cce3cb2cbd2eba05cac028acee762411698f3af96f87a7c7ef125b86a31a","sha512":"5893eb38866df6d821886a8e73da455924a3e8e87b480bb34d39569e19b7ebad8f19930cce59605523b0c1901648b0387ed48eb6de06b18ed15259d3e8bd6daa","ssdeep":"6144:1bESjtww7Iw2e5OI4wlz+j8V5iXVl5Wc0CVb2+pE5zV85RJoDLXx:xww7IiJ7zM8VPzVrh","tlshash":"37b409ceb3d574225296f478d03f01cba97b29e2b49cc8aaf099cce02d7455a5127f78","size":507403,"data":"","first_seen":"2026-04-10T18:39:51.849632Z","last_seen":"2026-04-10T18:39:51.849632Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-performance-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"085a93dc89fe3b0b497f99a222f9ac57","sha1":"339d9c7557c0fd2ca1c4d73227f9274bdd080ef3","sha256":"15cb1cffa887ec74a9ae3dad3c5c539e2b24c0c2e8e66f82fa536406e0c95db1","sha512":"429b8c4d240686dd6ff59ac1945a825bcfaa51cd3914fd49f68c7492054268729d87ed07a4d0a3e2a30bdeb0cbabd1fb715baa43dc02f1ea0fb7c49471f9501c","ssdeep":"","tlshash":"ca6172a5e32030772577082e22dfb20671b90751ac060c2e523ea5443cab5cbc7e7f5e","size":3312,"data":"","first_seen":"2023-03-08T20:13:50Z","last_seen":"2026-04-10T18:39:51.727063Z","times_seen":737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-menu-widgeticons-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3804032b042b651173e1514bb4fa53bb","sha1":"2675147fbf28f302a72abdb8477b184419a889a8","sha256":"e51f827e9fc321f9eebf9d035dc76b84cb6198276acca1141d1d638daf753b25","sha512":"9b9b0736203642c357de61da46c0a766f5fd14ef6818ff8203119469eee90847308d5b15f1e5f1ea48af07f50a117afc97cf5f1df489d398753e7012f459d007","ssdeep":"192:E2CUgSOK923NLf4neiCNBYG6mWUUZz7zr/jWOfHDCiLo:E2CcOg8Lgn7CUGd1UPzr/jrfHDJU","tlshash":"3bf1417c519e607703a61ca3d14b3345af7142fdfe068e804c29ee667c348eabde2655","size":7506,"data":"","first_seen":"2025-10-31T18:23:09.543007Z","last_seen":"2026-04-10T21:48:21.12745Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-lazyload-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ad0915384153521ebbf22746e562d2f","sha1":"157477ab06b8798a8fcaeddd51d41b84b6864ad8","sha256":"025e9d638edd640333695841bb52f2385835de630d869719389244fc83c1303f","sha512":"64ac69f2cdf4997952254a1931941d5ed56ac9b69b5fe5599e6e43c937da65277ef3ec73386818b13e382e2b9100da3b6ad4db1291849a21da300ebea4858733","ssdeep":"384:KN48L56BZVBicX7UwlLlArKTgSffCeUrhwjVLdUf41j6Eqy+dvZCHHTa+92Gc3Mu:KN48L56BZ7icX7UmLiOTUTrijVLdUQ1Q","tlshash":"31923b6c3a81f536b6b251b123ff06437234265af9024051fc29e0dc6af8c47b757b9a","size":20358,"data":"","first_seen":"2026-04-02T11:36:30.123145Z","last_seen":"2026-04-10T21:51:46.149748Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"57be4b15e4c5298edf8beb184c4265af","sha1":"1c767a2843aeeb3a292322c123530627a72f7001","sha256":"714f91ff22e846bdfb8628be3b24c9351133d39fddecd3936ca2e112294f27c7","sha512":"42071a7038ff74f081d8cc469970bdd35b6f0fa99b07a10d17777da7f694599b0299509a56f15ad79b4012eec444e6b4a4900f974723472f326e8ea8d7fb5975","ssdeep":"","tlshash":"b7b01208fc5f72c301023135d8270114083ea8015c0bc4854e0030ac7e3900c540e40e","size":95,"data":"","first_seen":"2026-04-10T18:39:51.902026Z","last_seen":"2026-04-10T18:39:51.902026Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-77ELWRJTYG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ef11e61f1890b036747f8c6ade0e761","sha1":"ff95f1f2701ec67abc999ad0867669f986043a3f","sha256":"78ca3821d625202dc51258c8ad1f05fd9a3845b9c8a9565b96cda09470d7fb56","sha512":"91f4e8581cc93b95b759cd0e2a42d3f3f140fee3bf5381ba241a29c5d64ab0c2ce53de22a5bf0936291927942f4f8dbaaf8ddf66796ad8ecd1c8084c054080e7","ssdeep":"6144:jgESjtww7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:qww7WiJKzV8Fuw","tlshash":"2aa4f9ceb3d674225396f478903f018ba57b28e2b44cc8a9f189cce42d7469a5167f7c","size":471441,"data":"","first_seen":"2026-04-10T18:39:51.821649Z","last_seen":"2026-04-10T18:39:51.821649Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.cloudcomments.ru/app/dist/install.js","fqdn":"app.cloudcomments.ru","domain":"cloudcomments.ru","tld":"ru"},"ip":{"addr":"45.11.27.117","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a26e11edec84d3e9f9b74eebf6f9b1","sha1":"6203f267f7bcf3134286bfaa89633b1eafd580e0","sha256":"4b3fa6d6f695437c8fa196afb0ab1e1eed691a0c48e14a3576d3ed33743b0444","sha512":"bfd1a0dc5ad7f7c577af5ae3532026197d4c5eb089a55a5c04c84bf497fe9fbd6be31846fca08a60f9039911bd6cdaedd9fb6eb5f20eeaae0bad181932de8c63","ssdeep":"","tlshash":"9f01cb980ca0c0a5a23018d1f5136636f1d3612d3416d142c5cd896c2e0afda7967e6d","size":676,"data":"","first_seen":"2025-10-16T02:41:21.002632Z","last_seen":"2026-04-10T18:39:51.716911Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.chatra.io/meteor_runtime_config.js?hash=da8143f5382a64fa191927792406ca34490ef4b2","fqdn":"chat.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84855286d492f34963bbbfd99456f93f","sha1":"71597d44d6ee3406f31dea8b90877356781a0a3f","sha256":"b33a881fb88be0e685e0d43897ebbc21717875173eb9161ca390354fe62de15c","sha512":"4d9e5aafa7c53d54d9788835cbc8841650169aa1a90d1a0e1abf7cef31c89769f929e65e54a164e2e9b4af61b40210cab62e1aa5fbd27a03e94dfa2d07f7abc5","ssdeep":"","tlshash":"2f0125e3e7d497370e118759f0293d44667d882b19da6431a448bc6d0c3cbe2530192f","size":772,"data":"","first_seen":"2025-12-16T12:36:34.241378Z","last_seen":"2026-04-10T18:39:51.819458Z","times_seen":343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-stat-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"be35049cb22a1f9a118c4742dc739195","sha1":"fff4bb02119b777cc0f265efa51ab1e0aa87330c","sha256":"30299b6ef1aff24831fb728ee4edaf4fc02c8c7dd0806bfa90f3e3ea7fe2bb80","sha512":"628a8be11e89820691e629ad562a23a7921b2227bf6029f80b6da09b5e361069585f8aae61ef2de36a4daaa5c8cc7544351f4df513201e10b88064ac39eba690","ssdeep":"192:2gQsCK6tC4XHHD4V7Rqy6n1sQpvbvQnJ9RSRQMjieIJBIgd5ZNOCRnZ:2DsCK6Q4klssQpvLQnJ9RSVjxIJBI+dj","tlshash":"6e12c6ad2969213106f612ab63bfb78530339121b8039480215ed5543eb8fa79f1ffcb","size":9690,"data":"","first_seen":"2025-05-06T10:57:23.743997Z","last_seen":"2026-04-10T20:39:17.835004Z","times_seen":3062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-zero-1.1.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bbde502c2938e3f47ad7dd68dff6e04","sha1":"769fecc2e78fe7e1e68af6090a21e090b1ce1661","sha256":"8e45763afe4c97ceaddf2e1f3e9f68dc46d5100501a0ee5624a8a5e7c41472ef","sha512":"cf6f23ce57e2f522a36b20219ffb0450c3b4dd4b2408df2bea2c5a9ebcffd045acdfa6749e436640467c7a51966cc9a815ded02f65ac052d5500276a1473ccd1","ssdeep":"768:b5pKi2jqTzjkRFeMV0MkWG5Zg5TMuwYdrtNqpgAEbw7myr2TfObTvII6YzpHS1fe:b5/xY7XxG+hmpvB4WTEMD0VsjBlLOhLs","tlshash":"f5131978f634303b817726b7845f3706ba357195a74f4484ce29c496783c88fba63ea5","size":44340,"data":"","first_seen":"2026-03-31T09:06:34.991144Z","last_seen":"2026-04-10T21:51:46.249679Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-phone-mask-1.1.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"71744625654361277624d01d96c83363","sha1":"7fdd072709528876b3dbf05a98a5dd9427f05145","sha256":"3d4249cb3d33c9bdd1350b4840be141c89862254727428017261b4322b9859e4","sha512":"6add75a1e07b0d77efe4412a1a37661496ace478bdc5a7a7c80d5c348145d022edbc51469a4413d77b5b29efb52a828359031b65cb2170a6f48aff2d19cc0aa5","ssdeep":"768:TeJvHRzbRTQaj+NCQONsloYW66FtsVqyG4TVp97bgFByX7onD3N93SLyo637E5xw:fNusl/G4lCWyhY7gCUF9FB","tlshash":"220370509a2f012dd4668f6c40a57349c23db6ecbfd181cb8acdedea0055eb2e725e71","size":38904,"data":"","first_seen":"2026-04-02T12:44:04.49659Z","last_seen":"2026-04-10T21:51:46.230439Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdf25a895336595169043557b3dbf429","sha1":"fbabc8ef1441f05508d8cf93ebc2687f7032e700","sha256":"80f8b5b63a7173de2bc8aaee336d8aa0ea34810e2e93533cf062d6e0d38020a0","sha512":"df949bb0320db06c672d9b44188d6ff999e33e8e7b87bc215b1099b09ac13fa55b4cc06ef6453b42567e036217e89436f003bf1c8f74a29874469abac75bbc8d","ssdeep":"","tlshash":"9a3140502524e539099706ce71ffa203b582c01ebc4ac081975fdcb8b8a5e874e0af9b","size":1720,"data":"","first_seen":"2024-10-05T17:34:40Z","last_seen":"2026-04-10T21:48:21.171254Z","times_seen":1018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c351767040bfbd3e0ab656899fcca60f","sha1":"125f81d39d15239643b386dac389b775baf729b8","sha256":"245c1764bafdce8193b069a82ceb1e67c2bf5701e590a8e88d59a8a46c4913ba","sha512":"0cd0f55e985d4f16ef7473a31d9912e76cb9c2816e91677439085b96eb185f692de8f75b6c4cd2b7659da71fba16f044289b7241ba63e1d035ebbf4bff6c0b46","ssdeep":"","tlshash":"22b01208fc6f71c301023139d82b0114043fa8015c0bc4894f0030ac7e3900c540e40d","size":95,"data":"","first_seen":"2026-04-10T18:39:51.903355Z","last_seen":"2026-04-10T18:39:51.903355Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4744d1c6e1ec21b7b230090dd1439f3d","sha1":"b410251e6b8d5db35ab6e78609159da435d26636","sha256":"46ecaeb82be7e20d19c12c9ff9dc01d189aaa77b9cb42458974e7de5a52c2348","sha512":"78df6f4fdf92c349db97ae4d27e28c83d5c4c8c1a3deabd5d6e144e46be23591907dd49c12adf2df73aae10d0df92049604287ac851c38d069eb44602ba0f671","ssdeep":"","tlshash":"fdb01108f02f328b00223aa8a02b2a08083b2802bc0a8820220808a83eae00c800ac0f","size":88,"data":"","first_seen":"2026-04-10T18:39:51.904659Z","last_seen":"2026-04-10T18:39:51.904659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-animation-2.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-animation-2.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 25 Nov 2025 14:58:34 GMT\r\netag: W/\"6925c41a-8a79\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-11-25T15:11:05+00:00, 2026-03-14T23:24:34+00:00\r\nx-node: m9-up-gc66, m9-up-gc80\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35449,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (35448)","md5":"2219912e772b40c1433a34e532d76fec","sha1":"33901bdeccbda70885f394bb0bda42710b61f25f","sha256":"c764f6558612179a585b3b4e0f4e952a12142d0b158c5b570160cdf3db82b524","sha512":"09afda2a6005396922fa293a737e3ee43b830a9c612f78e49ff73dbb017824c86dcf81965f0dcbf891fd046e922b72d381b300b5ddd226124b8a43e6bb2ce902","ssdeep":"768:56fSctcnLcn1cnscntcnOcnFcnccnTcnGcnhcnCcnPcn2cnvcn6g+6bc78INhAiJ:pCYhze","tlshash":"1bf2a69bf654a032437732b281cf618c5e345d55a50644acba3dd88f2864a4ae37fe3f","first_seen":"2025-11-25T15:07:41.355429Z","last_seen":"2026-04-10T21:51:46.233217Z","times_seen":953,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":825,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3932-3837-4537-a466-623934383631/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3932-3837-4537-a466-623934383631/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-24, or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:30+00:00\r\nx-node: m9p-up-gc152, m9-up-gc81\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 8-bit/color RGB, non-interlaced","md5":"5730854a92f22e3cdcf7a89d79cd69e5","sha1":"b2703a5665dfd151a51ed3746db5925a2b62594c","sha256":"784356eadd59c62d5472032c0be6c5de2f73ce74850a086a659c2f11f1c46347","sha512":"2a631cfa23945399d22d176908ca6cb78189d3b88960de10c6c43d54a600bed783e6fad00e8b4f251bd5f286c6c68e29c315adfbe9820d7fa4aec8739a7010a3","ssdeep":"","tlshash":"a601655fb6600f72d430a27845a45b12e8e09cc51d112e7f7244002a1c478c78d8d3e3","first_seen":"2026-04-10T18:39:51.708588Z","last_seen":"2026-04-10T18:39:51.708588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.marquiz.ru/v2.js","fqdn":"script.marquiz.ru","domain":"marquiz.ru","tld":"ru"},"ip":{"addr":"188.72.103.3","port":443,"asn":215013,"as":"Yandex.Cloud LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.marquiz.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:12:18 GMT","end":"Thu, 04 Jun 2026 02:12:17 GMT"},"fingerprint":{"sha1":"B4:C9:5E:75:BB:6F:79:9A:CE:B8:75:09:20:CC:40:FE:33:43:00:CE","sha256":"6C:67:A9:5D:D9:EF:70:19:6C:29:A5:9B:7D:9E:11:2C:4E:65:35:3F:24:B0:60:27:25:C8:E4:06:C2:21:FB:DC"}}},"request":{"raw":"GET /v2.js HTTP/1.1\r\nHost: script.marquiz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nx-request-id: b5f19ace54dedff1\r\netag: W/\"6877f770426fb70d45eecf9cdb566ffa\"\r\nlast-modified: Mon, 30 Mar 2026 08:26:14 GMT\r\ncache-control: max-age=345600\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8a0dd878594c367981cf7a50345addcc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P6\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: IN-Jlv13-RK4JmoDFAA44AYIYv09BG88RnUA8fznrtrddP4EpM2DlA==\r\nage: 79359\r\ncache-host: yccdn-rndttk-1.yccdn.cloud.yandex.net\r\ncache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104474,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41559)","md5":"6877f770426fb70d45eecf9cdb566ffa","sha1":"060061d0a3f6c01c52b73eebc1e5116f648ed8af","sha256":"6a5bdfcb1dc3224e35ce6322925f2ba6a8c052ed25ad663af4bcf82b6d0f8c2f","sha512":"2eeb23d2d73300ca743c2e5a39f9a28206bc41a0e0d64753c0c406c1a7d3388c38e62f9b3eb18e1ebe574ebf81c93e3c57c5e5b5c859274df1009d3b7d2c9015","ssdeep":"1536:/QLAEzAUhQLXtsmSL5rCFHrNXnpl76We4raj08GqreMNFuiIQSJH:uAAQzYL5rCFHrNSWeGNSzNFuiI5","tlshash":"33a33ae8728570b046e721fac03f120eb3396424b48a9994e529dce56df8d8f5273f6d","first_seen":"2026-03-31T22:58:37.049998Z","last_seen":"2026-04-10T18:39:51.710403Z","times_seen":33,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":256,"dns":124,"connect":42,"send":0,"wait":54,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3465-6234-4437-b636-633037316465/1.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3465-6234-4437-b636-633037316465/1.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"ec21125dc54cb8731caa52c4d4e715f7\"\r\nlast-modified: Mon, 30 May 2022 09:27:28 GMT\r\nage: 0\r\nx-tilda-origin: or-28\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9p-up-gc152, m9-up-gc228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5260,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec21125dc54cb8731caa52c4d4e715f7","sha1":"d4a70c097c8da6d83511855258b786846136f061","sha256":"3686a03a2f2b16aa5af4971352344dc69567b02aef88ce2a3df935850e6f4189","sha512":"48cd67081eb34cf320311a1ff13f033507782bc3785f77b9ff2e09b6e63140838e01439dbea139306fd6a14d0fe330e9d780e8508c3cc4a092e7b44600bfe277","ssdeep":"96:GS56RXCMss9y3en45TbU4Wy8FLopVl+jp3FNtAVz79NhNuQAV9C+CgBq6bHrqvQm:GKXMss9yy4pbULkcTNtAV5mCVLIOvtb","tlshash":"60b173cd2fb199f49a89c7d7bf1250dc2d13557bbe948e2cc08c5f68249983caa58583","first_seen":"2026-04-10T18:39:51.711394Z","last_seen":"2026-04-10T18:39:51.711394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3164-3537-4364-b032-333066353663/photo.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3164-3537-4364-b032-333066353663/photo.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"ed07b27afd0968167b14184885bf5186\"\r\nlast-modified: Mon, 30 May 2022 09:43:53 GMT\r\nage: 0\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9-up-gc46, m9-up-gc89\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3396,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed07b27afd0968167b14184885bf5186","sha1":"a92920f089dda51b72b21d190722d4f1980edfe0","sha256":"5c39a2c0a34658d7f8c0e941acb801f6ad2f21be08e27d752475fa2028f501c5","sha512":"4e02d932c3c20295144ab513c4dcc6d67987233884f2d4c992ce70ca417001717739a86a75bc57f24474054a2b69b37b500b7373354693815016b84b95469618","ssdeep":"","tlshash":"a56195dc2b755ec88accdbde3f0145bd1e53c176c9c4899ae04d9f8a5482a5dbc86e03","first_seen":"2026-04-10T18:39:51.713115Z","last_seen":"2026-04-10T18:39:51.713115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-cover-1.0.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:57.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-cover-1.0.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 20 Jan 2025 11:43:23 GMT\r\netag: W/\"678e36db-aba\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-12-25T00:29:56+00:00, 2026-03-17T00:00:07+00:00\r\nx-node: m9-up-gc37, m9-up-gc231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2746,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2746), with no line terminators","md5":"1826de7ecb5c507fed8ce40e106daba7","sha1":"0c94520d8b2dbff95c47f558e66c8537b603b6ba","sha256":"0594b7cf653420132560d51dfb797ba5b76a8525a32161f3376fd25093a59520","sha512":"b0254a824ae2b5851b2420a307075a195100f4556b6a84899606b5add0f5b5785f6f43c833140ddbe57226b06bffdc9a520e86f9d48f3ea18753f7707e3667f7","ssdeep":"","tlshash":"e1510e2238a6100db51ba625daccc778073dc523e1e61efd3a1774768346eddb16a90b","first_seen":"2025-02-04T10:26:47.930158Z","last_seen":"2026-04-10T18:39:51.714626Z","times_seen":948,"resource_available":false,"data":null}},"time_used":1996,"timings":{"blocked":870,"dns":643,"connect":128,"send":0,"wait":216,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-video-processor-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-video-processor-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 28 Jan 2026 13:46:26 GMT\r\netag: W/\"697a1332-3e13\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-01-28T13:57:03+00:00, 2026-03-29T13:57:04+00:00\r\nx-node: m9p-up-gc10, m9-up-gc10\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15890)","md5":"fa91f566715855e720873195c7c8078d","sha1":"d8cef4e00c89d45f4103f72a79a9d49cce8f7fc4","sha256":"f876b8e009233b7ab0ab8caf1e6a1ca7f4dc399f989c0df3b526dc281df12eb1","sha512":"920d7bf1004f987a1d5ff28d60277208a7ab9f5a283800067356ccb5d91b4d69364c098192f48aebea02ff9c1068c3561c074404724c4b209f8a5d95cdfe36be","ssdeep":"384:pJvYVJ8bSMKfUq6pUVi07x71wCuTrwHQzHxVdftYnc5dHiJcsrUbS31:pCJ8bSMKfUxpUVOfwHoHxV7Ync5dHiJL","tlshash":"5a62a434f34c787184d205ba64ae3a0139f15968a74a40706f2be45c2e6cecf705bfea","first_seen":"2026-01-29T02:46:10.88545Z","last_seen":"2026-04-10T18:39:51.715429Z","times_seen":144,"resource_available":true,"data":null}},"time_used":1057,"timings":{"blocked":815,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-skiplink-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-skiplink-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 19 Oct 2023 07:35:23 GMT\r\netag: W/\"6530dc3b-757\"\r\ntserver: 11\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-11-20T08:31:41+00:00, 2026-03-17T00:04:41+00:00\r\nx-node: m9p-up-gc23, m9-up-gc8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1879,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1842)","md5":"ea12dec71e029eba297d483c7a123962","sha1":"e07887a24d4dba4e2e3ba5aabe2ca68dadea86ae","sha256":"e30be28d85f8db5566078029d843d227687fd73ccfd6757d37b69b2fc06bf48d","sha512":"f71e32c78fe244b32640012f18b54b8cdc19f3d43402dbd814d105133d3d0ed229ec3ec57097cee96fcb87fc248eab4ec9e054c097e45186f291d8e3552d8979","ssdeep":"","tlshash":"8a417355e1d61c3682ea6364c1ee2ecdf0b1e0bafe924486d4ced07bbdb6dc90199701","first_seen":"2023-10-19T12:07:16Z","last_seen":"2026-04-10T18:39:51.716149Z","times_seen":2287,"resource_available":true,"data":null}},"time_used":1049,"timings":{"blocked":809,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.cloudcomments.ru/app/dist/install.js","fqdn":"app.cloudcomments.ru","domain":"cloudcomments.ru","tld":"ru"},"ip":{"addr":"45.11.27.117","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cloudcomments.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 21:06:15 GMT","end":"Sat, 30 May 2026 21:06:14 GMT"},"fingerprint":{"sha1":"C4:20:0F:45:61:83:EF:D7:51:7A:C8:79:DE:B9:C6:81:42:C2:6A:AD","sha256":"3B:16:E9:D1:A7:9B:27:09:70:F6:6A:5C:F6:A6:E1:3C:64:91:CB:1F:95:A1:46:0D:DB:E6:0E:52:D0:12:F9:2A"}}},"request":{"raw":"GET /app/dist/install.js HTTP/1.1\r\nHost: app.cloudcomments.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 676\r\nlast-modified: Tue, 22 Apr 2025 05:09:47 GMT\r\netag: \"6807249b-2a4\"\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e1a26e11edec84d3e9f9b74eebf6f9b1","sha1":"6203f267f7bcf3134286bfaa89633b1eafd580e0","sha256":"4b3fa6d6f695437c8fa196afb0ab1e1eed691a0c48e14a3576d3ed33743b0444","sha512":"bfd1a0dc5ad7f7c577af5ae3532026197d4c5eb089a55a5c04c84bf497fe9fbd6be31846fca08a60f9039911bd6cdaedd9fb6eb5f20eeaae0bad181932de8c63","ssdeep":"","tlshash":"9f01cb980ca0c0a5a23018d1f5136636f1d3612d3416d142c5cd896c2e0afda7967e6d","first_seen":"2025-10-16T02:41:21.002632Z","last_seen":"2026-04-10T18:39:51.716911Z","times_seen":3,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":14,"connect":67,"send":0,"wait":71,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild6566-6636-4937-a131-386336376232/Left.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6566-6636-4937-a131-386336376232/Left.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"2dd0c857f6d5b318f41b24e7488066c5\"\r\nlast-modified: Tue, 07 Jun 2022 10:20:21 GMT\r\nage: 0\r\nt-server: or-13\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: BYPASS, HIT\r\nx-cached-since: 2025-07-01T15:39:41+00:00, 2026-03-01T17:15:38+00:00\r\nx-node: m9p-up-gc23, m9-up-gc71\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":703,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2dd0c857f6d5b318f41b24e7488066c5","sha1":"71915b3a00af6983a546dc2dfd070a3211d34e4c","sha256":"5d9bfc253527af24e62754397a2475598c9344107f2297a234c51768b4fe9a5f","sha512":"b33cf646fd5b78c82bfa9c7d83b797cd1f3006c160436525df56c3424d1c81273e467666dbf79048d2ca897b17360c9d0fcef9273b2b937c66727771f49e155b","ssdeep":"","tlshash":"1e01fed27298ebdcce854326cbaaa550e26332c085d60014d6c6e3192c3e0cd8afa2c5","first_seen":"2026-04-10T18:39:51.718456Z","last_seen":"2026-04-10T18:39:51.718456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":789,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-M7NXTZP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-M7NXTZP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\nexpires: Fri, 10 Apr 2026 18:38:59 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 10 Apr 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 119740\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346891,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4971)","md5":"5079d503f169e5e97c3a7b37c59ac6d6","sha1":"961fff9289056087920fb0afa1d221b8869e47e2","sha256":"d28ee3db7096383899d196ab17bee91e73799d9c665cd5b01f571d4b22dde08d","sha512":"0711c9558fa8f72a0c5397153b6ab45134c3a13ae36e305fe70ff12aee677d09ebfc62e7a9c48f60bf9e90894674f385770f296b456e3e51a7851c5a8cb2a575","ssdeep":"6144:045cESjaw7Ww0O5OI4wrj8V5GVl5Wc0CV/2Yss:Vxw7WoJp8Fg","tlshash":"0e7408cdb3da746243a3a478903f114ba23a79d2f84cc898f185d9d42e74a694277f7c","first_seen":"2026-04-10T18:39:51.719964Z","last_seen":"2026-04-10T18:39:51.719964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":34,"receive":19,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6230-3962-4437-a265-636331643530/-/resizeb/20x/__.jpg","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6230-3962-4437-a265-636331643530/-/resizeb/20x/__.jpg HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/jpeg\r\nx-tilda-origin: or-21, or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-13T07:24:04+00:00, 2026-04-10T03:42:30+00:00\r\nx-node: m9-up-gc37, m9-up-gc97\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":882,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x28, components 3","md5":"4a016cb289349b5c0150e7696715c784","sha1":"48b45345d35da786ae71dddee2f49dcdcd249d34","sha256":"921b87b7d24f5719bfbae4e8b8b87a6fd858d4171504cd8b2f519312450a9c7b","sha512":"2807e326fce9d3ac6741be8955616b6e5a0a73177bbccc4037b2e06975c7d0cbe28cd1bd1331820d00f8c5db032ed4ed113bd5fd82c1d471da7fe9199f17b388","ssdeep":"","tlshash":"ba11206bab530b00ef2391be59173373e18788c27e54763a6a624265ce50cf4cd5de9c","first_seen":"2026-04-10T18:39:51.721517Z","last_seen":"2026-04-10T18:39:51.721517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3331-6130-4232-a639-356535636361/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3331-6130-4232-a639-356535636361/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-26, or-26\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc37, m9-up-gc97\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 8-bit/color RGB, non-interlaced","md5":"41f676eb3fa0abba51693ab87d0f162d","sha1":"1bc026abfb581b4e1b42902ed3e70ef15c545bc8","sha256":"f6b5b407bb7d6447d0418d93d87962ecabc549ab14a6ddd4f5a4d716df90570b","sha512":"2d321128391cafbdb8d19a8fbf379cade15256d09dc886ff001b80109f2a8785a72be6569d7cd0ee05846b0a81fb78874f51cb45bf638d5afa694f92cca53102","ssdeep":"","tlshash":"7d01259d2b906f66c2ab243c943f6742aa25fd45011f9917527b443d2cc1c185f7d942","first_seen":"2026-04-10T18:39:51.723124Z","last_seen":"2026-04-10T18:39:51.723124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/lib/flags/flags7.png","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /lib/flags/flags7.png HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 16022\r\netag: \"f3afe21c0e68faa5c47253edae171990\"\r\nlast-modified: Thu, 29 Aug 2024 08:24:26 GMT\r\nage: 0\r\nt-server: or-13\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-08-20T10:46:32+00:00, 2026-02-17T10:24:50+00:00\r\nx-node: m9p-up-gc25, m9-up-gc81\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 390 x 368, 8-bit colormap, non-interlaced","md5":"f3afe21c0e68faa5c47253edae171990","sha1":"b9fa27673c0c25248704e186e14e66a5a8aaccd6","sha256":"8b0b0ed59ece9154a4b973dadfd07984ae75d27ae304667825679fd95ff06fd5","sha512":"3d1e5acddb4fc8f0bbf84a942cd61a29dae415268aebcdcd09c16bbd268bbce14755a0deb972f66baafd16c85b716004764d0d2004f81223ced887505b6df45b","ssdeep":"384:JYeAqUzOy+dfG8kQRxkBp8M2f5oCix+KHuYbzfxpaXa6qCD:qqUzOyB1POMs5oiKtfxQXaFe","tlshash":"d272d086d3aee5e44c6f638a8be85dadb59a4bf40041dd32581d0e6effb0d849904cb4","first_seen":"2024-10-15T03:12:48.645673Z","last_seen":"2026-04-10T20:39:17.980466Z","times_seen":736,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optim.tildacdn.com/tild3932-3837-4537-a466-623934383631/-/cover/432x384/center/center/-/format/webp/_.png.webp","fqdn":"optim.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3932-3837-4537-a466-623934383631/-/cover/432x384/center/center/-/format/webp/_.png.webp HTTP/1.1\r\nHost: optim.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24802\r\nlast-modified: Tue, 31 Mar 2026 03:03:39 GMT\r\netag: \"69cb398b-60e2\"\r\ncache-control: public, max-age=10368000\r\naccess-control-allow-origin: *\r\ncache: MISS, HIT\r\nx-cached-since: 2026-04-05T03:43:19+00:00\r\nx-node: m9p-up-gc25, m9-up-gc33\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24802,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x384, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e90737d54239cdfb2304b6b6ff46873e","sha1":"63ad1abd83734f2036ede074665559084142fe62","sha256":"77602de56cadf666976f6cc2453790bc06aa8d8dfd315380feda8573ab2bedc0","sha512":"514447349b48bcdb7e1ff614e6c7a6be0e85a328f45f2147e49fd8d06fd0fb15aa9be84cc3fa7c67bac5cc77d42aff3f0b0ff8d2dc6b156cbe4876c7afd6f2f8","ssdeep":"768:ilWBS5Cn/uAvYC5AwBuaYoZPGMrg6mTgfPAbi:icBOe6C7uaYUg6C2Abi","tlshash":"ddb2e0871eb8874dbb0f69ca32089f72ffda1b163276556acce6540e3823875093351a","first_seen":"2026-04-10T18:39:51.725438Z","last_seen":"2026-04-10T18:39:51.725438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":135,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-performance-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-performance-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 05 Dec 2022 06:48:46 GMT\r\netag: W/\"638d944e-cf0\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-22\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:03 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-11-30T02:40:00+00:00, 2026-03-12T23:24:36+00:00\r\nx-node: m9-up-gc47, m9-up-gc82\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3312,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3312), with no line terminators","md5":"085a93dc89fe3b0b497f99a222f9ac57","sha1":"339d9c7557c0fd2ca1c4d73227f9274bdd080ef3","sha256":"15cb1cffa887ec74a9ae3dad3c5c539e2b24c0c2e8e66f82fa536406e0c95db1","sha512":"429b8c4d240686dd6ff59ac1945a825bcfaa51cd3914fd49f68c7492054268729d87ed07a4d0a3e2a30bdeb0cbabd1fb715baa43dc02f1ea0fb7c49471f9501c","ssdeep":"","tlshash":"ca6172a5e32030772577082e22dfb20671b90751ac060c2e523ea5443cab5cbc7e7f5e","first_seen":"2023-03-08T20:13:50Z","last_seen":"2026-04-10T18:39:51.727063Z","times_seen":737,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws.tildacdn.com/project3267520/custom.css?t=1775157563","fqdn":"ws.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"178.248.236.28","port":443,"asn":51115,"as":"HLL LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /project3267520/custom.css?t=1775157563 HTTP/1.1\r\nHost: ws.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: QRATOR\r\nDate: Fri, 10 Apr 2026 18:38:58 GMT\r\nContent-Type: text/css\r\nContent-Length: 423\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Wed, 06 Jul 2022 11:49:34 GMT\r\nX-Host: ws.tildacdn.com\r\ncache-control: max-age=0, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":423,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e8c88662b218059d6dca70031e7e8c2a","sha1":"286b8eb3dccb5930bb36570f238a029199b84cad","sha256":"b58f1ae5a8882860bf9f4448953c28d0312d1f703f54b9782f0edfaf747ad8a9","sha512":"ccfb6bc3716ff3b2a42ae2ec71dbd20ee8cfdd3d7cb52f5e5151c5c6d341fea354c57e200f52a211109d3d902e812de736aeeb78f6ae63081bf93656eec3183b","ssdeep":"","tlshash":"dde02bc1c7eb0985e81b056c1aa527a677b804835348c728bec0f5bd8fc8280ac2549c","first_seen":"2026-04-10T18:39:51.727774Z","last_seen":"2026-04-10T18:39:51.727774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":52,"connect":20,"send":0,"wait":183,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-zero-1.1.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-zero-1.1.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 31 Mar 2026 07:57:40 GMT\r\netag: W/\"69cb7e74-ad34\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-31T08:05:22+00:00, 2026-03-31T08:05:22+00:00\r\nx-node: m9-up-gc35, m9-up-gc98\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44340,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (44339)","md5":"7bbde502c2938e3f47ad7dd68dff6e04","sha1":"769fecc2e78fe7e1e68af6090a21e090b1ce1661","sha256":"8e45763afe4c97ceaddf2e1f3e9f68dc46d5100501a0ee5624a8a5e7c41472ef","sha512":"cf6f23ce57e2f522a36b20219ffb0450c3b4dd4b2408df2bea2c5a9ebcffd045acdfa6749e436640467c7a51966cc9a815ded02f65ac052d5500276a1473ccd1","ssdeep":"768:b5pKi2jqTzjkRFeMV0MkWG5Zg5TMuwYdrtNqpgAEbw7myr2TfObTvII6YzpHS1fe:b5/xY7XxG+hmpvB4WTEMD0VsjBlLOhLs","tlshash":"f5131978f634303b817726b7845f3706ba357195a74f4484ce29c496783c88fba63ea5","first_seen":"2026-03-31T09:06:34.991144Z","last_seen":"2026-04-10T21:51:46.249679Z","times_seen":113,"resource_available":true,"data":null}},"time_used":946,"timings":{"blocked":823,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollbooster@3/dist/scrollbooster.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /scrollbooster@3/dist/scrollbooster.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 61\r\nlocation: /scrollbooster@3.0.2/dist/scrollbooster.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9ea3df1cfcb58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13323,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":21,"connect":3,"send":0,"wait":21,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3261-3732-4131-b330-396636663637/icons8-yandex-zenora.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3261-3732-4131-b330-396636663637/icons8-yandex-zenora.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"5b23b5fd012d5ade8c97c92a5b1a44f3\"\r\nlast-modified: Mon, 31 Jul 2023 08:17:06 GMT\r\nage: 0\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9-up-gc46, m9-up-gc98\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b23b5fd012d5ade8c97c92a5b1a44f3","sha1":"0a6eced285f088473467ddf7dfcc227f74fc3b07","sha256":"80ce78bc8d662ec302f28961047d2fd0261cb9158f9450913fb66a1484f60325","sha512":"614e8fb888add9bb41600869ea25a9d722e3ee330a576d76c5098edb22788bd0df1abcb6e437f0ca3118be0be26519c32af5db7e05447ffd4385fec4e0d1e740","ssdeep":"","tlshash":"1e21356643468aacff4cc314a9b4499d72b0d4cbe4d0e4ecbb6e1822e91c4c6698c759","first_seen":"2026-04-10T18:39:51.730627Z","last_seen":"2026-04-10T18:39:51.730627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T18:38:57.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QxEzL3bUPkzvOlU6; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:57 GMT\n__ddg10_=1775846337; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:57 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:57 GMT\n__ddg1_=oVozl0QfgYyPaSD0L0RX; Domain=.loffi.ru; HttpOnly; Path=/; Expires=Sat, 10-Apr-2027 18:38:57 GMT\r\ndate: Fri, 10 Apr 2026 18:38:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Thu, 02 Apr 2026 19:19:24 GMT\r\netag: \"14dd50-64e7f140648f4-gzip\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-ws-id: 2\r\nx-host: loffi.ru\r\nx-tilda-server: 28\r\nx-tilda-imprint: ea308285-198d-4250-92b1-9f34883a7ba9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27986)","md5":"4bf73523ffaa8dc748ce11895d91a2df","sha1":"ac0d21e5f36e2e9076887f38d0d11728decb4a2c","sha256":"281616b0acd24f564fa8cd768267c69e3656087d18e833004a4d9b33bacc9981","sha512":"efcf73457081c77af11a362e61f1b9396340053cfdf69928d7e1f3605890f5047d5d9ad0d3cfaf4450ee03c11ac6004de45f08cafcd434af206d9b9fd637ef89","ssdeep":"12288:qXcLUmyjfCpxobdQV/8/iaInULyHWVaDgJ0GkPtNMdK7oGlDarCGgJzfbXftILXM:asX","tlshash":"3b2551a0b24104379403b1df13bfc924375a7b82ef0723f4fae80a6d5ada9a55da7d50","first_seen":"2026-04-10T18:39:51.731756Z","last_seen":"2026-04-10T18:39:51.731756Z","times_seen":1,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":104,"dns":2,"connect":20,"send":0,"wait":23,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-animation-2.0.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:57.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-animation-2.0.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Jul 2025 11:59:55 GMT\r\netag: W/\"687f7d3b-a77\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-01-18T12:09:08+00:00, 2026-03-11T10:02:42+00:00\r\nx-node: m9-up-gc37, m9-up-gc98\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2679), with no line terminators","md5":"a2e83a85322807a783feebfda59e0e1f","sha1":"e71e09218938b4a560acdc593b3d290632dd1576","sha256":"4367cfe21925829103cb1d8a3e599fde37dcf00e90c8303c904e5db1f5816292","sha512":"b2b17f7d18d61bbf6c860a8714355899ebadb5d22c1c46f9ae45257b159f7fa1538614b8466f56feb5ac1b830c49b91664b74206d6438b4e3ee91c82d33926b0","ssdeep":"","tlshash":"0651b7576926175002630da345cfbb644e289eb106520eceb3bc242f67c165ef27e2bf","first_seen":"2025-07-23T08:20:05.317665Z","last_seen":"2026-04-10T20:39:17.938961Z","times_seen":2081,"resource_available":false,"data":null}},"time_used":1999,"timings":{"blocked":873,"dns":643,"connect":127,"send":0,"wait":214,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3330-3962-4737-a532-663732363663/logo___33.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3330-3962-4737-a532-663732363663/logo___33.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"5ee588af71f3fb31756ccd6b67398a78\"\r\nlast-modified: Wed, 25 May 2022 14:45:09 GMT\r\nage: 0\r\nt-server: or-9\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: BYPASS, HIT\r\nx-cached-since: 2025-07-02T16:13:28+00:00, 2026-03-01T16:37:58+00:00\r\nx-node: m9-up-gc45, m9-up-gc5\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ee588af71f3fb31756ccd6b67398a78","sha1":"3b3a2a8611714ef5fe43f0321fb6189aee515077","sha256":"84ed3393a7aad2bf65b64fc3879eb75c0f1481aaf2833a918a3425c6261b4077","sha512":"407a1ca1e61cd55ab85694ac4ae084141447990a4dc5bab716911699ec86833de73f003fe8a5e3704b8ffe66b75bb1608cae33757615636201180c98799abca6","ssdeep":"","tlshash":"3a21327d53416bf5c9894b8c4359980936e021cbfb6811ecc3ffb6a58d16cfb09b1985","first_seen":"2026-04-10T18:39:51.733771Z","last_seen":"2026-04-10T18:39:51.733771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":806,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3735-3865-4138-a235-376137353066/-/resizeb/20x/0f121052c1e29ffaf476.jpg","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3735-3865-4138-a235-376137353066/-/resizeb/20x/0f121052c1e29ffaf476.jpg HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/jpeg\r\nx-tilda-origin: or-24, or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc37, m9-up-gc69\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":864,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x18, components 3","md5":"e2e3d16f5f4105eb4feb1aa8f2c3d579","sha1":"20d7a54d4861262dd401189741d37a69b859065a","sha256":"67ea04b4051d47dc6992ea363896ab18ac985bd346b50477eb644a5c49a7487c","sha512":"163344cb21848317d3a03b9ba2545bfce1e42513dc0e0bb238d10d08e1d8cab28becb612664ff7d343b541e3409427162631cebc8ca4b8d078a5e437370fbb94","ssdeep":"","tlshash":"1011205bab020a10df2380be48173377919a98813f94b6366a714265ce50cf8c84cbcc","first_seen":"2026-04-10T18:39:51.734981Z","last_seen":"2026-04-10T18:39:51.734981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3966-3462-4563-b235-333731376634/arrow_white.gif","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3966-3462-4563-b235-333731376634/arrow_white.gif HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 59983\r\netag: \"41654fdeb4c491f797f7195ee6657e05\"\r\nlast-modified: Thu, 07 Sep 2017 14:06:54 GMT\r\nage: 0\r\nt-server: or-13\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-08-20T10:17:49+00:00, 2026-02-17T10:25:47+00:00\r\nx-node: m9-up-gc35, m9-up-gc231\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59983,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 272 x 250","md5":"41654fdeb4c491f797f7195ee6657e05","sha1":"d2fd6ae71d64d15abd73bdbb72b28a2c354702fc","sha256":"e2f5c517819d3e751276853355995f85990d7dc6abf860b5423cecfc7bf8eec3","sha512":"4f4d4cbb324c7ee9059baae20c87fdeac6a90e5721416ac55ae5d89ee7c323541b49ad0dc029fb6567cfb57bb17463a8c9761e44e0830187022adcc1003d9d18","ssdeep":"768:omZWgXk2CrTUKvMz8hkEjTnyK22R/GEqo/7TS/lNT7PxGOZGvddnPZ6P5ndNwzGn:oDPtMsBUfByZOXxeE","tlshash":"b4437d5e0886ee05b468aa3880cc957e82ac0f7d7db46fab2a5c07f01f93ee174551dd","first_seen":"2023-05-02T18:57:00Z","last_seen":"2026-04-10T18:39:51.736336Z","times_seen":15,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6436-3764-4037-a135-626638616161/-/resize/20x/image_1.jpg","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6436-3764-4037-a135-626638616161/-/resize/20x/image_1.jpg HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\ncontent-type: image/jpeg\r\nx-tilda-origin: or-23, or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:39:00 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-02-06T09:09:16+00:00, 2026-02-27T18:10:02+00:00\r\nx-node: m9-up-gc34, m9-up-gc5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":935,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3","md5":"9308cbf6b3417c1674117179e6539e77","sha1":"413738b31f98b0da01815c67de0239db01123c56","sha256":"f86d7aab19a6556ab69ba68fc9c1b1d9322b016d77aacaf4cc60e534d14c4ece","sha512":"6a370d5cf4f55b22bf99c22b92feb80dcfec4151a53f67fed03e4244843e78367a5e52d0e50ffa85268313b2510d2f0caca9ccf20ca17a4b8f601868de72ca87","ssdeep":"","tlshash":"e6111227bb160700df23917e9a1623b3d185dde13e68bb362b6141a5cd90cf4c85cac8","first_seen":"2026-04-10T18:39:51.737886Z","last_seen":"2026-04-10T18:39:51.737886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.cloudcomments.ru/app/dist/bundle.ace39cefcc261dd51286.js","fqdn":"app.cloudcomments.ru","domain":"cloudcomments.ru","tld":"ru"},"ip":{"addr":"45.11.27.117","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cloudcomments.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 21:06:15 GMT","end":"Sat, 30 May 2026 21:06:14 GMT"},"fingerprint":{"sha1":"C4:20:0F:45:61:83:EF:D7:51:7A:C8:79:DE:B9:C6:81:42:C2:6A:AD","sha256":"3B:16:E9:D1:A7:9B:27:09:70:F6:6A:5C:F6:A6:E1:3C:64:91:CB:1F:95:A1:46:0D:DB:E6:0E:52:D0:12:F9:2A"}}},"request":{"raw":"GET /app/dist/bundle.ace39cefcc261dd51286.js HTTP/1.1\r\nHost: app.cloudcomments.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 929305\r\nlast-modified: Tue, 22 Apr 2025 05:09:47 GMT\r\netag: \"6807249b-e2e19\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":929305,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65450)","md5":"0112633496a0b0c6a49eba9801267c27","sha1":"a327dd7b31a826ad8f6e83f4879388934e4e7d69","sha256":"bbc4371dfcb837a74583585fb5ece27e2fd268aca6897b3ca1135c4e35737a7c","sha512":"db5cfb51b577ce8905b8b4fd1236e8d2e6da92684ce9cbc0469bfb0134c900e4ee73e2da4ef9628f92472089652518c63b6d3cf1567d249381752ddb6b7b89ae","ssdeep":"12288:hIBmadNZCxqcj8lADKiUWDgipSI2nP3eqdZreQ6Qb:KJfsxq5aKiUWDI5nP3eq/p","tlshash":"011529cd72daf46243a72275903f250af33e6a59a84d8810e659e8d2bc7495d8337f3c","first_seen":"2025-10-16T02:41:20.921585Z","last_seen":"2026-04-10T18:39:51.739312Z","times_seen":3,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-animation-sbs-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-animation-sbs-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 10:29:24 GMT\r\netag: W/\"69ce4504-ac39\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-02T10:39:08+00:00, 2026-04-02T10:39:08+00:00\r\nx-node: m9p-up-gc10, m9-up-gc80\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44089,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (44088)","md5":"226df4dbbc7a7463d883d21844825bef","sha1":"a3d40a37fb9493354a5e0dd2f673150badf30680","sha256":"7f6c4aad5954f6b2a2fc9ca14b455b8f875d24be58d018bdefefec4d169f424b","sha512":"293162846d5e71444f1802d49ef93f6c88c8ccc001f956224c4c3a351ffded2fa636cb0bdb7f2a0268d7fa0418feb385d7a734e3ed24edd64a8a05b627a6e1e2","ssdeep":"768:jViNQDBjMxpeX6TvhHM4/HzObfw78qH1pQkV0SIU2JTuvg0ZUOsidbb+1nnLI2oP:4NeXMvhs4/HzObQ8+1ptgXTJiIityYiM","tlshash":"3713b8f9a2a4353603df53f3819f31496e300888b217987cb57dd45d282c99a639bfb9","first_seen":"2026-04-02T10:57:30.124136Z","last_seen":"2026-04-10T21:51:46.210904Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1056,"timings":{"blocked":814,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@100..900\u0026subset=latin,cyrillic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:57.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@100..900\u0026subset=latin,cyrillic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 18:38:58 GMT\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e2e28dd7d3cbd095a248b905e91a86b2","sha1":"212833b1d86dfc984e38b55d9c12d3e6b19d7d89","sha256":"98f167e9b66fcc7bc89598f4f129c17ee711ded825a3a1c51eb177d208653405","sha512":"69caace3598fdbaa5b719715ea55c33458c51f2339aeb6afdf7b68a32471edcb34ecfa3a31a8cca23d8fcbc1a9ad0470ae706e3374808633203d1003345b10da","ssdeep":"","tlshash":"f941dc911517e504e6472cc923cf7e26dd0e61627494c57a7ffe2ca8adeac224321b3d","first_seen":"2025-09-05T13:05:02.232721Z","last_seen":"2026-04-10T18:39:51.741443Z","times_seen":312,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":97,"dns":1,"connect":10,"send":0,"wait":33,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-popup-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-popup-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 25 Nov 2025 14:58:34 GMT\r\netag: W/\"6925c41a-d26\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-11T12:54:25+00:00, 2026-03-12T23:24:37+00:00\r\nx-node: m9-up-gc45, m9-up-gc71\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3366,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (3365)","md5":"eb286eafe5f0b9d3ebc1022b3e1ee29d","sha1":"5f782bf6a25f09790ff426d95251157e77301d71","sha256":"22dd5ef26241412d3a0872d24e45000751ea3414fcf0b8d331413f6be6e5eb1c","sha512":"69a49a1237ddb3a3e8a71db0c68b2c189bdb4d90ca4becf72a3afd571d4eace16c8cf5643222ccbc43f3bfee7d3e122dd198f28720e3884af228e81b707e37af","ssdeep":"","tlshash":"c3615324b6b4317206df51f9e9da62cd3b3190aef6038c606468dc8865f88cac60597e","first_seen":"2025-11-25T15:11:39.238194Z","last_seen":"2026-04-10T21:48:21.118467Z","times_seen":723,"resource_available":true,"data":null}},"time_used":1055,"timings":{"blocked":817,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:00:50 GMT\r\nexpires: Sun, 04 Apr 2027 02:00:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 578289\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-10T21:56:11.105342Z","times_seen":321076,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":152,"dns":1,"connect":26,"send":0,"wait":9,"receive":4,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru/main.mp4","fqdn":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","domain":"selstorage.ru","tld":"ru"},"ip":{"addr":"92.53.68.17","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.selstorage.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Feb 2026 09:54:17 GMT","end":"Sat, 20 Mar 2027 09:54:16 GMT"},"fingerprint":{"sha1":"91:CE:72:30:AF:14:D4:91:E5:63:09:59:DB:D1:4F:93:05:FF:69:2F","sha256":"EA:15:8E:C4:91:84:B1:80:96:B0:F1:3B:83:6C:3B:6C:DC:0B:37:B5:DA:70:3A:56:77:EC:46:10:48:40:2D:C4"}}},"request":{"raw":"GET /main.mp4 HTTP/1.1\r\nHost: 814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=16449536-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\ncontent-length: 44383\r\ncontent-range: bytes 16449536-16493918/16493919\r\ncontent-type: video/mp4\r\netag: \"24bff09b032832adbf365a798cce0082\"\r\nlast-modified: Tue, 06 Aug 2024 09:39:38 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":44383,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"9d0347dac5b98525ca0aaa716f938893","sha1":"5f8f76927469a47918e201731c365cc563764f5d","sha256":"91c320d13a4a9b237bcb3131147e0179af0f4584a01b40822465bae91caa8324","sha512":"094ace5b2ff3cadf75140beb84a97cb3072128a22410361b56208d06de69a59dc2b85a3be5f9961c7a7501970df260e67f52608e3060359cc4280674dc61cea5","ssdeep":"768:YkrVjjHF85Zo/Rql4gOJYc/c5NRoLE/yOXvrM0+3aO5Z154o:XVnlswqOgOucE5Q3OXT9+3FP3","tlshash":"e01383a0b3a9091bee72973594d213207a34e5b02793c38b45a5d33edc6b3f89e574c2","first_seen":"2026-04-10T18:39:51.743263Z","last_seen":"2026-04-10T18:39:51.743263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-cards-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-cards-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Sep 2024 12:07:15 GMT\r\netag: W/\"66e03673-873\"\r\nt-server: or-7\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-01-19T08:31:36+00:00, 2026-03-11T10:22:50+00:00\r\nx-node: m9p-up-gc23, m9-up-gc41\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2162)","md5":"86e0986a26d38270cab32f67c7290e71","sha1":"89910871bb25f5abd09520338e749de495a1766e","sha256":"6fa30765fad8bfea2d395af7d421841d89be0c0723fd5893b74aedbd6eddbe3f","sha512":"e38802324b51dba72bb45e688645d94e290c37447816d789105fcbfd4beeeedc8c7ba21f58b2129b97a2f9a4d21f7edd75b7d4eb2178db2f5671509239ca2ac3","ssdeep":"","tlshash":"ff41e685f3051b768be76ebbf19fa386e2f0148166cb80604d35d4c91564fc793546cd","first_seen":"2024-09-17T19:27:51Z","last_seen":"2026-04-10T21:51:46.263999Z","times_seen":1107,"resource_available":true,"data":null}},"time_used":1065,"timings":{"blocked":821,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-menu-widgeticons-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-menu-widgeticons-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 31 Oct 2025 10:29:24 GMT\r\netag: W/\"69048f84-1d52\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-02-17T15:31:08+00:00, 2026-03-11T10:19:32+00:00\r\nx-node: m9p-up-gc10, m9-up-gc10\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7506,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7035)","md5":"3804032b042b651173e1514bb4fa53bb","sha1":"2675147fbf28f302a72abdb8477b184419a889a8","sha256":"e51f827e9fc321f9eebf9d035dc76b84cb6198276acca1141d1d638daf753b25","sha512":"9b9b0736203642c357de61da46c0a766f5fd14ef6818ff8203119469eee90847308d5b15f1e5f1ea48af07f50a117afc97cf5f1df489d398753e7012f459d007","ssdeep":"192:E2CUgSOK923NLf4neiCNBYG6mWUUZz7zr/jWOfHDCiLo:E2CcOg8Lgn7CUGd1UPzr/jrfHDJU","tlshash":"3bf1417c519e607703a61ca3d14b3345af7142fdfe068e804c29ee667c348eabde2655","first_seen":"2025-10-31T18:23:09.543007Z","last_seen":"2026-04-10T21:48:21.12745Z","times_seen":481,"resource_available":true,"data":null}},"time_used":1061,"timings":{"blocked":818,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3361-6531-4762-b033-366333346565/-/resizeb/20x/photo.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3361-6531-4762-b033-366333346565/-/resizeb/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-27, or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc37, m9-up-gc33\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced","md5":"1a9a26658959e2116e54a537099c621b","sha1":"d19e9c2480d0fa8477bdd25616fbc8bac5504975","sha256":"5d95b3c3e521c6bb62919febb957cff28c87fc0cdb931e05f42d8d96f819eb34","sha512":"fe044f12a602a7d45c985dc8eb93347d322f93a3fb7b6973241154e7189ecd00a9679348fc4f983f5d92ccf7e8e39ddeccd8544465ffa493a57320f58e069703","ssdeep":"","tlshash":"a921eab959941ab3cef6713f6ccb57180c13685066235c8c7f54414b9c8758cad6e212","first_seen":"2026-04-10T18:39:51.746367Z","last_seen":"2026-04-10T18:39:51.746367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.cloudcomments.ru/api/limitations","fqdn":"app.cloudcomments.ru","domain":"cloudcomments.ru","tld":"ru"},"ip":{"addr":"45.11.27.117","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:00.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cloudcomments.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 21:06:15 GMT","end":"Sat, 30 May 2026 21:06:14 GMT"},"fingerprint":{"sha1":"C4:20:0F:45:61:83:EF:D7:51:7A:C8:79:DE:B9:C6:81:42:C2:6A:AD","sha256":"3B:16:E9:D1:A7:9B:27:09:70:F6:6A:5C:F6:A6:E1:3C:64:91:CB:1F:95:A1:46:0D:DB:E6:0E:52:D0:12:F9:2A"}}},"request":{"raw":"GET /api/limitations HTTP/1.1\r\nHost: app.cloudcomments.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/json\r\nx-powered-by: PHP/8.0.10\r\ncache-control: no-cache, private\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\naccess-control-allow-origin: *\r\nx-fastcgi-cache: BYPASS\r\nx-fastcgi-skip-cache: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.0.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":391,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf5291dac50a1c83862e849cd57136bf","sha1":"628d944352f9761241dd19fedcaae8e6219886b2","sha256":"d27569f1932434f06fd9c35a649c40b2ab14e437d6164b3b2e30b0f45b7084b7","sha512":"8c7e0d0069ad4130a4110f0e548d51b0e886025b84da825d14e2bf6165fbca601c354640a31773c1fd93c333ceca20577af344feaee760b7ee12d080ff80434a","ssdeep":"","tlshash":"d5e00209ac19ccba330dce255cc7e9cbe1ee55aaff92c566e600c37d805ca74630121b","first_seen":"2025-10-16T02:41:21.173474Z","last_seen":"2026-04-10T18:39:51.747675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru/main.mp4","fqdn":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","domain":"selstorage.ru","tld":"ru"},"ip":{"addr":"92.53.68.17","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.selstorage.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Feb 2026 09:54:17 GMT","end":"Sat, 20 Mar 2027 09:54:16 GMT"},"fingerprint":{"sha1":"91:CE:72:30:AF:14:D4:91:E5:63:09:59:DB:D1:4F:93:05:FF:69:2F","sha256":"EA:15:8E:C4:91:84:B1:80:96:B0:F1:3B:83:6C:3B:6C:DC:0B:37:B5:DA:70:3A:56:77:EC:46:10:48:40:2D:C4"}}},"request":{"raw":"GET /main.mp4 HTTP/1.1\r\nHost: 814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=327680-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\ncontent-type: video/mp4\r\netag: \"24bff09b032832adbf365a798cce0082\"\r\nlast-modified: Tue, 06 Aug 2024 09:39:38 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-range: bytes 327680-16493918/16493919\r\ncontent-length: 16166239\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":294912,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"727b617ce3440fb7f7337dfe8b94d29b","sha1":"f6b2ff5ad3f22d56d0b992c35ac4b796d877d907","sha256":"042ea02f7d839a15a9ff3e44415d5e60274161d86e9222b180f68f3e3e71e731","sha512":"e0d910f8233b8c576fdb022359303e278d75778ceb2616f735d99d4aeabab4c379fd858d4f81f14fafd41742fe30901cd099f7f5ef939a5cd8fb1db89cf5a2aa","ssdeep":"6144:EGbBgaD9AWtIPX250imfgZxruJR3o9WF9qlQCbuhCx23JqJkoof7yS7qSOU:n6aWWtkPxgZxrun6WFYamuhCkIJe8U","tlshash":"bd5423b96e3de387455515af4fe8e979ed3528302304e6225b684707888b18dcbf1b53","first_seen":"2026-04-10T18:39:51.748962Z","last_seen":"2026-04-10T18:39:51.748962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild6434-3630-4834-b438-353836366165/photo.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6434-3630-4834-b438-353836366165/photo.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"e7f8f4fa4665e69fb57a3699a5d438fa\"\r\nlast-modified: Mon, 30 May 2022 09:43:11 GMT\r\nage: 0\r\nx-tilda-origin: or-28\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9-up-gc46, m9-up-gc5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2273,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7f8f4fa4665e69fb57a3699a5d438fa","sha1":"98654a0d63225f3c72052ac89f9234fd4eed72da","sha256":"f3abef8fa04f1bfa0ce80089fa78190c9629b15c135d2061dc2fc2593eb671f9","sha512":"e62cbb109a5fba55d27c519b7ad7406eab072eba2637cad52b35c165563579ac5a072d2fc8c0aec3cb3c9d0129406ffa0953549c3b011e7ffb0458577b859ade","ssdeep":"","tlshash":"904165dc63f4ea8a45c40be77f25b6693e22f4930b884424c65c5f2d089981dee55783","first_seen":"2026-04-10T18:39:51.765419Z","last_seen":"2026-04-10T18:39:51.765419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6266-6436-4365-b237-323433363931/-/resize/20x/close.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6266-6436-4365-b237-323433363931/-/resize/20x/close.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-23, or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-02-06T13:03:52+00:00, 2026-02-18T05:58:29+00:00\r\nx-node: m9p-up-gc25, m9-up-gc234\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced","md5":"d8b5d876c1c2aedd925d96823c8cb66c","sha1":"9d81c9bd7811efa0799bc178c635009005b80ef4","sha256":"72cdb8688d3da9e4d724a3e0260628b887ca69c609a3590aa0e690985b4fab7a","sha512":"59f4a5669a9df77376e31bd316b8b3239692783f157da9b7b77b8e0447d690b79dab53b4f8725d9ce511e7129982e4d00f14d09be597ec59ae557ff453824844","ssdeep":"","tlshash":"73d0954b0f50af98514d6921e12847104c2b91f493435b1c43c9d4a156128f52dc656f","first_seen":"2026-04-10T18:39:51.768708Z","last_seen":"2026-04-10T18:39:51.768708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":1030,"dns":0,"connect":117,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3766-6334-4334-b838-356132346632/right.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3766-6334-4334-b838-356132346632/right.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"c0cea6e9f26b736dc94fcf7355671cf7\"\r\nlast-modified: Tue, 07 Jun 2022 10:07:28 GMT\r\nage: 0\r\nt-server: or-11\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: BYPASS, HIT\r\nx-cached-since: 2025-07-02T16:13:28+00:00, 2026-03-01T17:15:38+00:00\r\nx-node: m9-up-gc47, m9-up-gc70\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0cea6e9f26b736dc94fcf7355671cf7","sha1":"d55c07f51f92c0c7960d63891cce7398639689a4","sha256":"23f7e88e55edbf110b3df7be00f8619fcb31eee2408641e46c13b447e3674c05","sha512":"c93919fe11f7b283326d83c7fe4b7753a6135fe3170743f9275cea4cdf762579836cfd92421bcf5253d60e8669e422d35d6c35ec5290ad38e7b0be822515c3b1","ssdeep":"","tlshash":"39019ea41128d35a8f340f62db64a450576b78c793d5008cdbc27e371d754d2b9971d6","first_seen":"2026-04-10T18:39:51.771115Z","last_seen":"2026-04-10T18:39:51.771115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":791,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6338-6365-4133-b238-313263343233/-/resizeb/20x/photo.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6338-6365-4133-b238-313263343233/-/resizeb/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-27, or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc35, m9-up-gc8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 29, 8-bit/color RGBA, non-interlaced","md5":"1dcd2cd1e1e063f42e293737e8834425","sha1":"d12d0d4d786214fc52dda234d469e68e709de07e","sha256":"1a88f48d5858cae746d5709567cb073856b74c57830a031813d17d448c61d781","sha512":"b1d7a2c0bef23666245d83b5801737a603137f80c9d91b4dfb918abffd88855964419c9dde75078ee2005989bf7f1b76da10952341707925a5c9db2d2c2741b2","ssdeep":"","tlshash":"31413ceb7630089fe4293578d0ac0f00a4f57987072310c7829c4c67b461cc2eb1bf59","first_seen":"2026-04-10T18:39:51.773108Z","last_seen":"2026-04-10T18:39:51.773108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"call.chatra.io/chatra.js","fqdn":"call.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:00.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /chatra.js HTTP/1.1\r\nHost: call.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=1800, s-maxage=1800, stale-while-revalidate=300, stale-if-error=1800\r\nlast-modified: Mon, 15 Dec 2025 15:45:38 GMT\r\netag: W/\"b800-19b22b04cd0\"\r\nage: 975\r\ncf-cache-status: HIT\r\ncf-ray: 9ea3df2c3f26c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47104,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47030)","md5":"b5bd4388cbb56b042ad688726cb95e59","sha1":"432906d25059a1ef403f4da9f6d5a39bcc32adc5","sha256":"11304946da094b1c8a290b16d2729c6fa219ad6c51dcd21ea6addc8c98800b73","sha512":"37c64a372d76e72ab346800e0a7fed40b71e7a47e4289b4dbcf2f2e314aa04231efbbcf53b3a5a3a9d30f4f79d71396c4fe384b69b3512ca78d4f47c169023cf","ssdeep":"384:xj71JFC2HUg3GsFMYWgssA521q2r3T/OISVChSHBYpiTIa8STYiwZRKnjXBRzU4v:x/XFCMUg3GoWhh5679iZjXBO3o1Th37","tlshash":"5523e9beb04224bc00274fb663ff762d35355520bd2a5c7173608dba579aeca2052f2e","first_seen":"2024-08-08T17:47:10Z","last_seen":"2026-04-10T18:39:51.774933Z","times_seen":1360,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":18,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3963-6265-4662-b965-636361303264/Frame_3.png","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:01.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3963-6265-4662-b965-636361303264/Frame_3.png HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 4269\r\netag: \"380023ba4a91df643c45826138b49670\"\r\nlast-modified: Thu, 02 Jun 2022 17:27:23 GMT\r\nage: 1\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:39:01 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-01-10T12:21:06+00:00, 2026-03-12T15:59:07+00:00\r\nx-node: m9-up-gc47, m9-up-gc229\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4269,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced","md5":"380023ba4a91df643c45826138b49670","sha1":"472152b8189109e9377e7ae5c84695ba7be9289d","sha256":"c8c32948470509625ffbb8113ae82ee43cdc1b1edb9a9df933ceef918f482da2","sha512":"aa06b1f76056076b58ab872370fd723a3ee8b35979f934c154293ed6f6d9c5b8f62e4e281c885972030ed9e3307a484ca9176edd30120dff948ac90d094adde3","ssdeep":"96:7HYk2cztDtfHRHhq8etzktZwO0mpEb4D9VzmHv8CzIo:rYj8JfHRHh+ktZwOJ3D9NKbIo","tlshash":"87918ff20b32fc3486c6c581f51a9050ea27d9a142043d54b9e4c85fbddde947c9f147","first_seen":"2026-04-10T18:39:51.776213Z","last_seen":"2026-04-10T18:39:51.776213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3736-6130-4133-b734-623738336532/1.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3736-6130-4133-b734-623738336532/1.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"0565a4b74e3a52e3bb26031bf255aad3\"\r\nlast-modified: Mon, 30 May 2022 09:27:21 GMT\r\nage: 0\r\nx-tilda-origin: or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9-up-gc47, m9-up-gc69\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2221,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0565a4b74e3a52e3bb26031bf255aad3","sha1":"80e36c7ff767a2fe230a9b1a4031ec0f887f56de","sha256":"6ff91227a54a5c93be23bd0b4f9d33cda94fa2eb0aff176f7083298e9d689299","sha512":"d17c8ccc2a702e444d26027818e0e40735580aea5e54701365865a32479ee986ae6210b4cc54fc2bc71fd056a509797b1be1f62d47a097971b6d51ca41f9f3a6","ssdeep":"","tlshash":"d64163dc63f49aca05c84be77f36f6b93e12b4a30b894424c55c1f2d089981dde45383","first_seen":"2026-04-10T18:39:51.778383Z","last_seen":"2026-04-10T18:39:51.778383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optim.tildacdn.com/tild6262-3438-4734-b336-373234383137/-/cover/25x26/center/center/-/format/webp/output-onlinepngtool.png.webp","fqdn":"optim.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6262-3438-4734-b336-373234383137/-/cover/25x26/center/center/-/format/webp/output-onlinepngtool.png.webp HTTP/1.1\r\nHost: optim.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 540\r\nlast-modified: Fri, 06 Mar 2026 15:35:02 GMT\r\netag: \"69aaf426-21c\"\r\ncache-control: public, max-age=10368000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-06T21:55:50+00:00, 2026-03-09T03:59:15+00:00\r\nx-node: m9p-up-gc152, m9-up-gc230\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71fb7522e933e13cbb9d5a392de2a632","sha1":"a538b4c6ca773f6c6e1442b928efb2a4e79a5b01","sha256":"359b36974c1ee6460f19f5ab1e5ae9b926dce788223e3dfd12f1e4a7af941b25","sha512":"fad1753633ffddb346cb56b02ac4318a6c16ea661ca8f2d6fef1c301cd15c78c5803e272556ea7da3013ba345d2bf7f13c0885e7875bb1abaa0c66bf08f62ecf","ssdeep":"","tlshash":"e0f096050ff7f583a110343dcc348051c00b1e651605c82a9b60949802a85101e905cf","first_seen":"2026-04-10T18:39:51.780438Z","last_seen":"2026-04-10T18:39:51.780438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-grid-3.0.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:57.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-grid-3.0.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 21 Feb 2023 12:52:41 GMT\r\netag: W/\"63f4be99-11a2\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-12-27T17:27:29+00:00, 2026-03-04T23:24:40+00:00\r\nx-node: m9-up-gc47, m9-up-gc41\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4514,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4514), with no line terminators","md5":"ffd973cc9b002ba30ce57896976c7218","sha1":"9e330a8ea115d5b11ab8e04040546956f9923fb6","sha256":"0b5f664c528f466606c93195975f671fc46c3a9c10fee54426c2cd1cf89b1fec","sha512":"3979c8e6acfdffadc1a5534ad9b05270fdd43484340974e03d973e0c77d1b7b72492aa65fd6fd296cacf135b218bc07df0f5b5a583f0a25bbae674d58f3c6cb4","ssdeep":"96:ptBrBxFXC29lpgiikFFncB1XqRirWBQcoLlcY2e:pzVjS2BYzXwiXute","tlshash":"f89121230fad5a3ea555c45cc1d1a17e5a0fa30573eb1cc9fd12a8bba54ffc014b0a5a","first_seen":"2023-04-05T15:36:49Z","last_seen":"2026-04-10T20:39:17.844566Z","times_seen":3535,"resource_available":false,"data":null}},"time_used":1845,"timings":{"blocked":851,"dns":647,"connect":116,"send":0,"wait":110,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/index.css","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nCookie: __ddg8_=MQvB6zMWIthAnvQY; __ddg10_=1775846338; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4TOjPf2bDqdXegwn; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg10_=1775846339; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 265\r\nlocation: https://loffi.ru/\r\nx-host: loffi.ru\r\nx-tilda-server: 26\r\nx-tilda-imprint: 3c4d7563-67e4-469b-acfe-846c59b670c0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysstat.tildacdn.com/api/net/error/","fqdn":"sysstat.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"5.188.159.120","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:07.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"OPTIONS /api/net/error/ HTTP/1.1\r\nHost: sysstat.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://loffi.ru/\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nDate: Fri, 10 Apr 2026 18:39:07 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":91,"dns":11,"connect":20,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sysstat.tildacdn.com/api/net/error/","fqdn":"sysstat.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"5.188.159.120","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:07.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"POST /api/net/error/ HTTP/1.1\r\nHost: sysstat.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 533\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":533,"data":"[{\"url\":\"https://static.tildacdn.com/tild3330-3962-4737-a532-663732363663/logo___33.svg\",\"type\":\"image\",\"location\":\"https://loffi.ru/\"},{\"url\":\"https://static.tildacdn.com/tild6532-6234-4130-b863-663865353361/logo___33.svg\",\"type\":\"image\",\"location\":\"https://loffi.ru/\"},{\"url\":\"https://static.tildacdn.com/tild3032-3030-4663-a365-366634616265/photo.svg\",\"type\":\"image\",\"location\":\"https://loffi.ru/\"},{\"url\":\"https://static.tildacdn.com/tild3032-3030-4663-a365-366634616265/photo.svg\",\"type\":\"image\",\"location\":\"https://loffi.ru/\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 10 Apr 2026 18:39:07 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-10T20:56:28.440966Z","times_seen":263741,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":12,"connect":25,"send":0,"wait":23,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.chatra.io/pics/emoji/svg/d83d-de0a.svg?v=4.0","fqdn":"static.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","date":"2026-04-10T18:39:08.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /pics/emoji/svg/d83d-de0a.svg?v=4.0 HTTP/1.1\r\nHost: static.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat.chatra.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ndate: Fri, 10 Apr 2026 18:39:08 GMT\r\nlast-modified: Wed, 19 Sep 2018 15:49:34 GMT\r\ncontent-encoding: br\r\netag: W/\"81b8d68a3b91730dd174647a0e8d4934\"\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: _HGQGm2EBMi3WUW1JSmhSD_3FAh7jsL2jawDeOgSmN_81IPKebhVNw==\r\nage: 1583\r\ncache-control: max-age=31536000\r\ncf-ray: 9ea3df5bee4d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1752,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81b8d68a3b91730dd174647a0e8d4934","sha1":"580dccbfee65b0936edab5f862ea8577fc31f383","sha256":"2fca80e96bf4b068fa1a885f31e86f57ecb683ded6c0c67bee6c647f54817dac","sha512":"14298ae203c45746c78b9aef1353b7bd898d20a4ef950d6386671979da39632e645c9224c213960e221432a00fe0d7ae8df949cb0d252d904a762f1aedebe94e","ssdeep":"","tlshash":"3d31db1ae319eeb7e8aac32cd883e465319c51926bd0c345b6b88f1f1a145d31c0efb0","first_seen":"2025-11-04T11:38:29.127297Z","last_seen":"2026-04-10T18:39:51.784325Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollbooster@3.0.2/dist/scrollbooster.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /scrollbooster@3.0.2/dist/scrollbooster.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9ea3df1d2da58deb-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KJH325QJMDZCNTPM5KH536P8-fra\r\naccess-control-allow-origin: *\r\nage: 2464428\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 10 Apr 2027 18:38:58 GMT\r\nlast-modified: Sat, 28 Feb 2026 03:00:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:NN8srawERFmf4DLqobXVIYCcuy3HbHNotmQFIXx6Z+M=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13323,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13277)","md5":"4a564546b08f3ad22e85b809b8d72497","sha1":"0c5e6e49151d8337998449f93fbdcf61adad4a7c","sha256":"34df2cadac0444599fe032eaa1b5d521809cbb2dc76c7368b66405217c7a67e3","sha512":"30b6ef487271cd1b2d1ecfd5a84a86942f26e0ccc0d2dc7554f647fd5a604d7028a529d80087e1423752c853c6ff8388a999fb27c549cf1de8204612ad47f51c","ssdeep":"192:/uHJ3QyUj04m8nutbM7i3HEFeyks3TBTA:/ueznuO7aEDkmBE","tlshash":"0a529601b290bc6602cbb365e15f5201527b2c8e5585e0cc7a3b8ee14ddaafe2157ff9","first_seen":"2023-03-07T14:57:56Z","last_seen":"2026-04-10T18:39:51.786701Z","times_seen":188,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3966-6666-4437-b131-623131663063/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3966-6666-4437-b131-623131663063/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-24, or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-13T12:36:02+00:00, 2026-04-10T03:42:28+00:00\r\nx-node: m9-up-gc46, m9-up-gc90\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 8-bit/color RGB, non-interlaced","md5":"9734250c936e77b7507b9f386b172fb5","sha1":"9c9875c94e9a53b3309dff62be28422e096b7241","sha256":"48ee1e69efaf7a14d77cd1d6dd1b39e6d79c76ecb9bb2d84a96469458167e776","sha512":"8eaacb0e8381b465e4302190ee89a3dfbe81dbd4b3d2d21345f9e1cc52d1c27ef4a99443b3a574c8b2d05a0495f234e7627c16acc28048e187521e5e7ede4f48","ssdeep":"","tlshash":"1301868e84804df5cf23d5fed466cb30d1921f944c89dc1b15190e535c9b207cd79181","first_seen":"2026-04-10T18:39:51.787699Z","last_seen":"2026-04-10T18:39:51.787699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3630-3762-4265-b035-646636346134/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3630-3762-4265-b035-646636346134/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-25, or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-13T12:36:03+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc37, m9-up-gc98\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 34, 8-bit/color RGB, non-interlaced","md5":"6f3e145992261352ac6aac7b72cc3375","sha1":"81c12bf54b6141a8d958e39ba69ac502d7230e1a","sha256":"efaababd3a5995a50ae1975624ab906b294f2ea6a3cb742eeb05c90d8cd6d048","sha512":"91d6ed684bdfed4154a48dddc1238616ef24416f0b5814034f0963f4e7816820c056365c6fb891c4675042de65a8328b39df380c19d07ffbe0edf446e21ac642","ssdeep":"","tlshash":"8831b5eba2a0bf5bc8420974d45b07208611399d4244951bb9eb5448accac09c3fe6ca","first_seen":"2026-04-10T18:39:51.790308Z","last_seen":"2026-04-10T18:39:51.790308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/sprav/widget/rating-badge/78773528824","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /sprav/widget/rating-badge/78773528824 HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"5a7f-Y3ryuKQsgdPD532JllcUComnQzs\"\r\nx-dns-prefetch-control: off\r\nx-yandex-req-id: 1775846340020570-6498184905081637567-balancer-l7leveler-kubr-yp-sas-167-BAL\r\nx-req-id: 1775846340020570-6498184905081637567-balancer-l7leveler-kubr-yp-sas-167-BAL\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nreferrer-policy: no-referrer\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-xss-protection: 0, 1; mode=block\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'nonce-gOYZDTqKTJm2E4le6wgWnQ==' 'unsafe-eval' yastatic.net maps.yastatic.net *.yandex.ru yandex.ru *.ya.ru ya.ru *.maps.yandex.net yastat.net widget-pvz.dostavka.yandex.net yango.com smartcaptcha.yandexcloud.net yandex.co.il *.yandex.co.il; style-src 'self' 'unsafe-inline' yastatic.net mc.yandex.ru yastat.net *.yandex.ru yandex.ru *.ya.ru ya.ru maps.yastatic.net priority.s3.yandex.net yandex.co.il *.yandex.co.il; font-src 'self' data: yastatic.net *.yandex.ru yandex.ru *.ya.ru ya.ru widget-pvz.dostavka.yandex.net maps.yastatic.net; img-src 'self' data: avatars.mds.yandex.net avatars.yandex.net yastatic.net maps.yastatic.net *.maps.yandex.net yapic.yandex.net *.yandex.ru yandex.ru avatars.mdst.yandex.net mc.webvisor.org mc.yandex.ru mc.yandex.by mc.yandex.kz mc.yandex.com mc.yandex.com.tr mc.yandex.com.ge mc.yandex.uz mc.yandex.eu static-maps.yandex.ru storage.mds.yandex.net eda.yandex mc.admetrica.ru mc.admetrica.by mc.admetrica.kz mc.admetrica.com mc.admetrica.com.tr mc.admetrica.com.ge mc.admetrica.uz mc.admetrica.eu files.messenger.yandex.net priority.s3.yandex.net wappalyzer-client.yandex.ru *.ya.ru ya.ru blob: files.messenger.yandex.ru favicon.yandex.net ads.adfox.ru priority.s3.yandex.net yandex.co.il *.yandex.co.il; object-src 'self' *.yandex.ru yandex.ru *.ya.ru ya.ru; frame-src 'self' api-maps.yandex.ru yandex.ru yandex.by yandex.kz yandex.com yandex.com.tr yandex.com.ge yandex.uz yandex.eu *.yandex.ru *.yandex.by *.yandex.kz *.yandex.com *.yandex.com.tr *.yandex.com.ge *.yandex.uz *.yandex.eu ya.ru *.ya.ru yango.com *.yango.com yandexmaps: priority.s3.yandex.net smartcaptcha.yandexcloud.net yastatic.net maps.yastatic.net yandex.co.il *.yandex.co.il; child-src 'self' api-maps.yandex.ru awaps.yandex.ru; connect-src 'self' mc.yandex.ru yandex.ru *.yandex.ru ya.ru *.ya.ru files.messenger.yandex.net api.passport.yandex.ru api.passport.yandex.by api.passport.yandex.kz api.passport.yandex.com api.passport.yandex.com.tr api.passport.yandex.com.ge api.passport.yandex.uz api.passport.yandex.eu yastatic.net yandex.ru yandex.by yandex.kz yandex.com yandex.com.tr yandex.com.ge yandex.uz yandex.eu *.yandex.ru *.yandex.by *.yandex.kz *.yandex.com *.yandex.com.tr *.yandex.com.ge *.yandex.uz *.yandex.eu maps.yastatic.net *.business.yango.com widget-pvz.dostavka.yandex.net api-ext.vh.yandex.net maps-geoapp-goods-imports-stable.s3.yandex.net maps-geoapp-goods-synchronizations-stable.s3.yandex.net files.messenger.yandex.ru mc.yandex.md yango.com core-renderer-tiles.maps.yandex.net photo.upload.maps.yandex.ru photo.upload.maps.yandex.by photo.upload.maps.yandex.kz photo.upload.maps.yandex.com photo.upload.maps.yandex.com.tr photo.upload.maps.yandex.com.ge photo.upload.maps.yandex.uz photo.upload.maps.yandex.eu *.maps.yango.com priority.s3.yandex.net blob: wss://mc.yandex.ru wss://push.yandex.ru yandex.co.il *.yandex.co.il static-mon.yandex.net tusd.strm.yandex.net; manifest-src 'self'; worker-src data: blob:; media-src blob:; report-uri https://csp.yandex.net/csp?from=tycoon\u0026yandex_login=undefined\u0026yandexuid=undefined;\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Sun, 09 Apr 2028 18:39:00 GMT; SameSite=None; Secure\nis_gdpr_b=CK7bRRC9/gIYAQ==; Path=/; Domain=.yandex.ru; Expires=Sun, 09 Apr 2028 18:39:00 GMT; SameSite=None; Secure\n_yasc=ZEe8hBuozmYX6W9P4jjbE4nzxsayeDt45upIGg5ufQryEuueI/sUfff4qX6k3r/fig==; domain=.yandex.ru; path=/; expires=Mon, 07 Apr 2036 18:39:00 GMT; secure\npi=V6Nns2jZytavfbzcGxiCrps4uALGFOld7deVJdH/nMZJrONMKgPMHK/BHz025bKBcZBJsn+j4BBp7HsQmdiUCG2m5bg=; Expires=Sun, 09-Apr-2028 18:39:00 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=J7RHQJTN88r/ZO2CdAvb9qt1xhM8rq3ri9TngtbmqYubaEWb9mpBB0K+0kgV3anaQNYxcqbhHWCybmSQ8o420ILa1Jo=; Expires=Sun, 09-Apr-2028 18:39:00 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=1816375671775846340; Expires=Sun, 09-Apr-2028 18:39:00 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=6435739621775846340; Path=/; Domain=.yandex.ru; Expires=Sat, 10 Apr 2027 18:39:00 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YMSH5c4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 15 May 2027 18:39:00 GMT; SameSite=None; Secure\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\nx-permitted-cross-domain-policies: none\r\nx-content-type-options: nosniff, nosniff\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-download-options: noopen\r\ncross-origin-resource-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23167,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (21807)","md5":"21d7897bbd5321bb459b1df7337bba5e","sha1":"637af2b8a42c81d3c3e77d899657140a89a7433b","sha256":"d782db09d896e6a252cc0ab76a98b1314c3232cc2f69125b701121129e4a3e3d","sha512":"0e37edfff6e122735f3ab0c0eba004f4c742c0dd26cabeb19092a353ff75420eba1c5800acec8f0db7d7faf090d76851b2afe19d5a9f35c7bb8b49d1df17ae07","ssdeep":"384:wR30oLZox0SGEXHmvnVEjhrQjbvaSK+TDmSPC7nVjtC5FbcNLTSzJzkbUe1s2ayx:DoLZox0SG+GvnVEjmjbvab+TDmSPC7n7","tlshash":"41a2c1ad5d611dc6f03ac82b862ab138c0372aaffd354d997b9e32047faa44015f457e","first_seen":"2026-04-10T18:39:51.792414Z","last_seen":"2026-04-10T18:39:51.792414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":143,"dns":3,"connect":48,"send":0,"wait":128,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.chatra.io/sockjs/info?t=1775846341038","fqdn":"chat.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","date":"2026-04-10T18:39:01.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /sockjs/info?t=1775846341038 HTTP/1.1\r\nHost: chat.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat.chatra.io/?isModern=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 18:39:01 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, no-transform, must-revalidate, max-age=0\r\nlast-modified: Fri, 10 Apr 2026 18:39:01 GMT\r\ncf-ray: 9ea3df2f9fcd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"909e29e008284f7b481b70171b03c8f2","sha1":"c85b1984ceecce0b56b080562246274e81c2d447","sha256":"87699be5bc39636bfb2889021b4b69cbb09dacfee893cd6876c7b74e3ac6dfa2","sha512":"cc12728d47597b72cd5622098d50d796049bf38a12cc6689435de91b977e185bdf3f28c28d851d2b3d8e085b0e7133aea00f99c0215f0ac1d80a3521c9829ad8","ssdeep":"","tlshash":"9ca0120d842d215d18081b1011001c0645280cf7014060e86214951811e20121020287","first_seen":"2026-04-10T18:39:51.794618Z","last_seen":"2026-04-10T18:39:51.794618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/ws/project3267520/tilda-blocks-page27921274.min.css?t=1775157563","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:57.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /ws/project3267520/tilda-blocks-page27921274.min.css?t=1775157563 HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 19:19:24 GMT\r\nx-host: ws.tildacdn.com\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nx-cached-since: 2026-04-10T11:38:54+00:00\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, MISS\r\nx-node: m9-up-gc47, m9-up-gc70\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61844), with no line terminators","md5":"64771f0195d826c28709820ba54ecc59","sha1":"b744b4c86b2f58e99627cfb30693c8017891b273","sha256":"142209fe93c0051685300f45e0fb7cf6f6475282450420f831ecb77fb2f69ee5","sha512":"bca447e8bd2f9bc3f158f487c036a2b4db2664a3984a5bab2e705394ea6b599950c43368597b47c8599a3a770b61e09de348ad6683ac74c6aae0f868e8963314","ssdeep":"768:XVzprb2TOA8IATwZmkigJRxchMiB8b/ZoxShcbws4qQqRA6nIJCMcz:p+apmSxz","tlshash":"c053c7236b70326cf12b862dd6d7a968232cc5039a534deef700693cc7877c7176669a","first_seen":"2026-04-10T18:39:51.796583Z","last_seen":"2026-04-10T18:39:51.796583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1987,"timings":{"blocked":857,"dns":646,"connect":123,"send":0,"wait":237,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3931-3362-4835-b232-316433393035/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3931-3362-4835-b232-316433393035/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-27, or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9p-up-gc23, m9-up-gc88\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced","md5":"5c112b0a82b1dd50ec0e78dea2b0ca06","sha1":"d6d6a3edfd2d279ad7d394180388092be35a416e","sha256":"72d9eb815ad1e14def86ca488a0eded3642d80023c4d01ac385f4084b978d216","sha512":"2fa1f3163b57be9c8f77b25c6c03c210c495f5f314c5ee763f61c6af41bcc97e592f05fb349dbfe75c317329e21ae259e2f9f5fbdc463c46a658aa63dd048bb4","ssdeep":"","tlshash":"0021d8d9812407a3c23b8035c5a60755fec2fa004371d51a1b65516a3ec8af8af95459","first_seen":"2026-04-10T18:39:51.799108Z","last_seen":"2026-04-10T18:39:51.799108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-menu-widgeticons-1.0.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-menu-widgeticons-1.0.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 15:16:59 GMT\r\netag: W/\"68fb986b-e61\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-10-27T08:02:56+00:00, 2026-02-24T08:42:07+00:00\r\nx-node: m9-up-gc37, m9-up-gc90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3681,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3681), with no line terminators","md5":"92e84fb075f40b2ebd7276f7c04b1d99","sha1":"f49f73096ed21d9776f695c641146a507821a34d","sha256":"cd9dd605775142671ad91879c918d4144214edce4ad8e51f4bf565c637b18b1b","sha512":"8459605b6a2f136025a420f4ebb9068dfe7019553f36454ab22ccba01832f7b7fdf801a7ea342af095cddc6879fa7a86a6922d73ef6d0202e39f4e4e09e2db12","ssdeep":"","tlshash":"6571493a4183e13aeb135c01c54224e73b1865dedf5acde4dc40ff26ee7a2c266b2648","first_seen":"2025-10-27T20:42:46.587511Z","last_seen":"2026-04-10T21:48:21.107235Z","times_seen":484,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":-1,"dns":641,"connect":116,"send":0,"wait":235,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-zero-scale-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-zero-scale-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 04 Dec 2025 10:22:08 GMT\r\netag: W/\"693160d0-1ec3\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-12-04T10:41:02+00:00, 2026-03-05T23:32:22+00:00\r\nx-node: m9-up-gc66, m9-up-gc28\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7875,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (7874)","md5":"9982e00e9829cc7af014d4c9c2f6ef87","sha1":"8968b8b5d1377529bb76850cdca79517420f74de","sha256":"0d07db15951afcf2cd7c0b4807799b71e788ef6e870289b2faf7f5245b05705d","sha512":"6c393bce79f096087d4ccf3e77d7cafdad33871cfea53187582b15ac8f8c3c73932d3435457544435cc15b7e77a745e5d8a7828e85aa3da4d5b810ae24ec4af9","ssdeep":"192:PKMuA/JKWuilDREGJPCinMNV42y5gcJzJhJPJwJItJJtJdJmJGJVJP1rtgxgtvTM:nuA/JB1lDREGJPCinmGScJzJhJPJwJqM","tlshash":"53f163957a3e702a8bae15b7011f230f7e7992d5530f8b44c8358466382dd1bfa87ee1","first_seen":"2025-12-04T12:20:08.930341Z","last_seen":"2026-04-10T21:51:46.10862Z","times_seen":863,"resource_available":true,"data":null}},"time_used":1048,"timings":{"blocked":811,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.cloudcomments.ru/app/dist/bundle.ace39cefcc261dd51286.css","fqdn":"app.cloudcomments.ru","domain":"cloudcomments.ru","tld":"ru"},"ip":{"addr":"45.11.27.117","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.cloudcomments.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 21:06:15 GMT","end":"Sat, 30 May 2026 21:06:14 GMT"},"fingerprint":{"sha1":"C4:20:0F:45:61:83:EF:D7:51:7A:C8:79:DE:B9:C6:81:42:C2:6A:AD","sha256":"3B:16:E9:D1:A7:9B:27:09:70:F6:6A:5C:F6:A6:E1:3C:64:91:CB:1F:95:A1:46:0D:DB:E6:0E:52:D0:12:F9:2A"}}},"request":{"raw":"GET /app/dist/bundle.ace39cefcc261dd51286.css HTTP/1.1\r\nHost: app.cloudcomments.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 16201\r\nlast-modified: Mon, 22 Dec 2025 01:43:28 GMT\r\netag: \"6948a240-3f49\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16201,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2995)","md5":"9fcb71005ea6fada91d2945cb9c6f2f6","sha1":"4286e10c4e2ec1057cec3ce5f11f8d2a2d247dd9","sha256":"7dd78eb87217e6e0254864bc759ab3e1e9679a6623a44c58dcbf732fd049354a","sha512":"3270204982803a726140b35b75a51859b96f6bcd344a2a8aabb75d0e8a671274004c6d767874252a4417491e3ad6b90d2692c784c4bc780c36cd9e1c949d41bf","ssdeep":"192:C18UAUPJvDvw0t1dmvu42uwRjbvS8dIZ8Fom/:4BPN4SgwFzcuym/","tlshash":"287284759134813cf46be969aec4c6cda625f4218a3355eed6026c3ac9c79fb0732b1c","first_seen":"2026-04-10T18:39:51.803513Z","last_seen":"2026-04-10T18:39:51.803513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3264-3464-4438-b231-393463313130/-/resizeb/20x/__.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3264-3464-4438-b231-393463313130/-/resizeb/20x/__.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-24, or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:30+00:00\r\nx-node: m9-up-gc47, m9-up-gc82\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 8-bit/color RGB, non-interlaced","md5":"efe14d944f0380308878c70bc3cde716","sha1":"9e3c3353d5ba7c61339e000be6c18ff21cafb505","sha256":"25767b4c404874c778ca72738aae64658347f4a1618b104839ecc7656aa753c6","sha512":"fe3121cd9ed99cfeaf92d0da3b9ca82cd6296ab09b5d50bed2b843fe9581cb52141a055377672199cb5fac3873b18f134878ba78f283d17a9e37ed1d8f3e6ef5","ssdeep":"","tlshash":"4a11ccf74a248827c1b332744b672be05497915de301703d73d544159c56c0b739d3e7","first_seen":"2026-04-10T18:39:51.805367Z","last_seen":"2026-04-10T18:39:51.805367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3963-3336-4466-b239-303031623134/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3963-3336-4466-b239-303031623134/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-26, or-26\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-13T07:24:02+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9p-up-gc25, m9-up-gc7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 14, 8-bit/color RGB, non-interlaced","md5":"dcd7d743c5560c48d8a544229c3f70d7","sha1":"9f9cf9f8054b95a126c7642ca95c9572c0f978be","sha256":"2ea7da587fe3cb4c67c1d96338ce025598a98c4a81c3db6ccc86f5698aab7b35","sha512":"13baebbcd818c96a122288b3a6e7a67d354186fab9c827967bbd9cd52bc47d8a9e6be4d32c8d9536f202b407dddab432d96b2463b642765e88ed8d2395bdf59b","ssdeep":"","tlshash":"871158d6e340ef61d01222b85ede6355d461ee9c57a4c005675b21136d53ccddb6ce0d","first_seen":"2026-04-10T18:39:51.807025Z","last_seen":"2026-04-10T18:39:51.807025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-stat-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-stat-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 05 May 2025 10:35:47 GMT\r\netag: W/\"68189483-25da\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-01T10:44:08+00:00, 2026-03-16T23:33:21+00:00\r\nx-node: m9-up-gc47, m9-up-gc230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9690,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (9689)","md5":"be35049cb22a1f9a118c4742dc739195","sha1":"fff4bb02119b777cc0f265efa51ab1e0aa87330c","sha256":"30299b6ef1aff24831fb728ee4edaf4fc02c8c7dd0806bfa90f3e3ea7fe2bb80","sha512":"628a8be11e89820691e629ad562a23a7921b2227bf6029f80b6da09b5e361069585f8aae61ef2de36a4daaa5c8cc7544351f4df513201e10b88064ac39eba690","ssdeep":"192:2gQsCK6tC4XHHD4V7Rqy6n1sQpvbvQnJ9RSRQMjieIJBIgd5ZNOCRnZ:2DsCK6Q4klssQpvLQnJ9RSVjxIJBI+dj","tlshash":"6e12c6ad2969213106f612ab63bfb78530339121b8039480215ed5543eb8fa79f1ffcb","first_seen":"2025-05-06T10:57:23.743997Z","last_seen":"2026-04-10T20:39:17.835004Z","times_seen":3062,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static3.tildacdn.com/tild6532-6234-4130-b863-663865353361/logo___33.svg","fqdn":"static3.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"159.69.130.130","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:03.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6532-6234-4130-b863-663865353361/logo___33.svg HTTP/1.1\r\nHost: static3.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1303\r\nx-amz-id-2: kEsH++rfklheaZEkPQ9UpAEmnyIAtvloPhMPQ0EqBy2g8NJb5E4zBxdHDIClQnMxVqrYHtBinqs=\r\nx-amz-request-id: RBN55RJZZDS13JX6\r\nlast-modified: Wed, 25 May 2022 15:04:52 GMT\r\netag: \"5ee588af71f3fb31756ccd6b67398a78\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-tilda-origin: or-32\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ee588af71f3fb31756ccd6b67398a78","sha1":"3b3a2a8611714ef5fe43f0321fb6189aee515077","sha256":"84ed3393a7aad2bf65b64fc3879eb75c0f1481aaf2833a918a3425c6261b4077","sha512":"407a1ca1e61cd55ab85694ac4ae084141447990a4dc5bab716911699ec86833de73f003fe8a5e3704b8ffe66b75bb1608cae33757615636201180c98799abca6","ssdeep":"","tlshash":"3a21327d53416bf5c9894b8c4359980936e021cbfb6811ecc3ffb6a58d16cfb09b1985","first_seen":"2026-04-10T18:39:51.733771Z","last_seen":"2026-04-10T18:39:51.733771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":98,"dns":10,"connect":41,"send":0,"wait":63,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ucarecdn.com/c9a31adb-3513-4f3a-b171-e4f7f40ac7ec/-/crop/283x283/1,0/-/preview/-/resize/200x200/","fqdn":"ucarecdn.com","domain":"ucarecdn.com","tld":"com"},"ip":{"addr":"151.101.129.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","date":"2026-04-10T18:39:03.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ucarecdn.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Mon, 30 Mar 2026 14:16:52 GMT","end":"Wed, 29 Apr 2026 14:16:51 GMT"},"fingerprint":{"sha1":"BF:7E:53:34:3D:07:B3:69:59:F4:BE:28:72:48:D4:A0:A0:41:BC:BD","sha256":"6B:12:20:77:4E:E9:47:FD:33:32:7F:CC:5D:85:A8:9D:BF:5C:02:6B:B6:91:EC:4A:8C:65:DD:E9:31:BF:34:65"}}},"request":{"raw":"GET /c9a31adb-3513-4f3a-b171-e4f7f40ac7ec/-/crop/283x283/1,0/-/preview/-/resize/200x200/ HTTP/1.1\r\nHost: ucarecdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat.chatra.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\nserver: Uploadcare\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nx-image-width: 200\r\nx-image-height: 200\r\ncontent-disposition: inline\r\ncache-control: public, max-age=31556926, immutable\r\netag: W/\"91ae707bfea77a042e8d4394a9cbbb46\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-expose-headers: HEAD, GET, OPTIONS\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\nx-cache: HIT-CLUSTER\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4179\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4179,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c108a80555918c7a86f5a3b5a77dbd0","sha1":"92b699807bfb5e5dc87a60b2b5c29ee9975e35b7","sha256":"09f3738d623a5ab8b143155468b357c8fddc2d6daaeb7bd40cf757ee991a4463","sha512":"7df2256e27930c2871d4bb4385adadcae6d92b399ea47f39eead19ca14394a2f0c479a502b4cc6db442d5a0907f3da8fc4400a06f53a3f7bb49ded1117bffdf4","ssdeep":"96:rGnisjNeQ/E6lKgPddioXieIgHhMhP2ZowLjs+/0kxYCR:rGiYlaoAcZo4//p","tlshash":"25819f35be20911fca5d033004f5b655257ccf14f0069be7eb9e228afa2e595c2f3a58","first_seen":"2026-04-10T18:39:51.809342Z","last_seen":"2026-04-10T18:39:51.809342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":64,"dns":1,"connect":26,"send":0,"wait":211,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-N8PMLDN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-N8PMLDN HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\nexpires: Fri, 10 Apr 2026 18:38:59 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 10 Apr 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 112865\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322679,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4450)","md5":"7df0b5fe3e1e1653926f0f8e14fd49d0","sha1":"7552972c5a226f31c75b53c8903f9d2d4a883db5","sha256":"7b0ed84e44dfb0a0398956366388b1c655c5a9102ed5f3f7a82f73c65716fb38","sha512":"8d3b7bffd88598a541878eda81bc76b38dab0c8c0c32a63a3d73cddd616c802774466f61196cd7b12e6ae5d63c2be619e26bb8a3efbeae986236128660641caa","ssdeep":"6144:4ESj7w7Ww0O5OI4wrj8V5GVl5Wc0CVu2YZz:8w7WoJp8cS","tlshash":"f76407cdb7dab45243a3a478903f114ba23a79d2f84cc894f086d9d42e746694277f7c","first_seen":"2026-04-10T18:39:51.811103Z","last_seen":"2026-04-10T18:39:51.811103Z","times_seen":1,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":28,"receive":33,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6134-3735-4031-b834-376562373635/-/resizeb/20x/photo.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6134-3735-4031-b834-376562373635/-/resizeb/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-28, or-28\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc46, m9-up-gc11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 8-bit/color RGB, non-interlaced","md5":"1fa793d05a0464d0f5061a7603153bd5","sha1":"e4001cd886e6bceca82989b1c07b343aeb5ec35c","sha256":"d1cd3ee936177601cf6a7f7ee5e7cad5ae478283a270b95fd53c0980a587b85a","sha512":"4ed7b7e57ccad2584339a86d8dedbb59de58b0830f26ebc38bb2df4fc170d408c5efdffde035ead30e14a534e7ff7e498079b67581cbc4d461a132c77cabe0e3","ssdeep":"","tlshash":"9601b5bc0b50ee33c03b33b44029277a007bae483d45144b4224a44a3ca2494eeef0f0","first_seen":"2026-04-10T18:39:51.812695Z","last_seen":"2026-04-10T18:39:51.812695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-menu-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-menu-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nlast-modified: Thu, 04 Dec 2025 10:22:08 GMT\r\netag: W/\"693160d0-2c96\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\ncontent-encoding: gzip\r\nx-tilda-origin: or-22\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T11:16:05+00:00, 2026-04-03T11:16:14+00:00\r\nx-node: m9-up-gc66, m9-up-gc80\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11414,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (11413)","md5":"d7d97ec4bd9572356bb590a9dc253335","sha1":"aa56fe491603dc246f31334787e5f3e195b9296c","sha256":"ec950b2112e31f39f0be799da2b0ed68dc816fa78c24bbeccc3b858111743fb3","sha512":"6c90bf5f4880f5cd97cb170d6431ad360ea429ed6961a617c39007a94c7c4901350cacff4b3a219b6a1fc622383a8a9cfaf165a45e22592ed88bd1eceb6ac1ff","ssdeep":"192:FiFYrFy3BLGQB5x5q69271JFn8QmYZTRobaxlLKA5UuL94uX+8/lyCgBfjnCh5Rk:yYrGLJBH39g1JF8qZTRob0lLKa2uX++U","tlshash":"c532c9f97101313749cf28faa0cfaa867674915da90b88404578d8d16dbcccb36e7af9","first_seen":"2025-12-04T12:20:08.939619Z","last_seen":"2026-04-10T21:51:46.227585Z","times_seen":599,"resource_available":true,"data":null}},"time_used":1057,"timings":{"blocked":818,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Va0F4RIp6i3TG8iy; __ddg10_=1775846338; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=27PSv5uEHUJOlSnF; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg10_=1775846338; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Thu, 02 Apr 2026 19:19:23 GMT\r\netag: \"14dd50-64e7f14051613-gzip\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-host: loffi.ru\r\nx-tilda-server: 29\r\nx-tilda-imprint: b02947d3-05f1-4be5-a8e1-53d1f614f37c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27986)","md5":"4bf73523ffaa8dc748ce11895d91a2df","sha1":"ac0d21e5f36e2e9076887f38d0d11728decb4a2c","sha256":"281616b0acd24f564fa8cd768267c69e3656087d18e833004a4d9b33bacc9981","sha512":"efcf73457081c77af11a362e61f1b9396340053cfdf69928d7e1f3605890f5047d5d9ad0d3cfaf4450ee03c11ac6004de45f08cafcd434af206d9b9fd637ef89","ssdeep":"12288:qXcLUmyjfCpxobdQV/8/iaInULyHWVaDgJ0GkPtNMdK7oGlDarCGgJzfbXftILXM:asX","tlshash":"3b2551a0b24104379403b1df13bfc924375a7b82ef0723f4fae80a6d5ada9a55da7d50","first_seen":"2026-04-10T18:39:51.731756Z","last_seen":"2026-04-10T18:39:51.731756Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 18:55:53 GMT\r\nexpires: Sat, 03 Apr 2027 18:55:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 603786\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-04-10T21:18:35.404184Z","times_seen":5837,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":9,"receive":6,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3564-6265-4532-b332-333436346630/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3564-6265-4532-b332-333436346630/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-25, or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-13T12:36:02+00:00, 2026-04-10T03:42:30+00:00\r\nx-node: m9-up-gc35, m9-up-gc82\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 8-bit/color RGB, non-interlaced","md5":"537b4bd39aeab9ce6d97e09d8f4d90a3","sha1":"f6435b26b7529851b7ee0ed6b6609748d445bf6d","sha256":"add9a35171a4203a7a024e32408a6b926591efa3d7625541fdcf11c97758951f","sha512":"362713ae57a4127e1b96cd5bdb835201e619f64ba97dedbed5cec3d9892b692baf57deb2230372985355fe2f69982252bffc5e104edffc578f92d6c9c8e61269","ssdeep":"","tlshash":"6101709b1a500f2ac02b747c8d5eab02ee7bec9c7b7ad47e271240821c43e40ad8c5c9","first_seen":"2026-04-10T18:39:51.815785Z","last_seen":"2026-04-10T18:39:51.815785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3134-3562-4134-b035-316534626166/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3134-3562-4134-b035-316534626166/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-24, or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:39+00:00\r\nx-node: m9-up-gc46, m9-up-gc91\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 8-bit/color RGB, non-interlaced","md5":"4c372f8d2d36c743e1c1242b456ed88f","sha1":"6f6fec1979ce2c745329ea046ca176b6550ef096","sha256":"5aa0cb09b7b0a70bf7f4ad9bb636961050a3129310bfc4b34b3c4e9a22e549e2","sha512":"0d6cecc318c6d46b086ac3795606900c371f24fce3613107d298671585220a60c608b968f29648b8fe8f8a00b901115a749d1e8b30a6b778962a752c262569bf","ssdeep":"","tlshash":"150165aeaf10056eeaeb0ebce57f67633d95eea0532d080206d46c949cd6800ec5d2d5","first_seen":"2026-04-10T18:39:51.817179Z","last_seen":"2026-04-10T18:39:51.817179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","fqdn":"chat.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:00.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /?isModern=true HTTP/1.1\r\nHost: chat.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://static.chatra.io; child-src 'none'; img-src https://static.chatra.io 'self' data: blob: https://ucarecdn.com https://uc.chatra.io https://uc.chatra-usercontent.com; connect-src 'self' data: https://upload.uploadcare.com https://upload.uc.chatra.io ws://chat.chatra.io/ wss://chat.chatra.io/; style-src 'self' 'unsafe-inline' https://static.chatra.io; media-src data:; form-action 'none'; block-all-mixed-content; frame-src 'none'\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=300, s-maxage=300, stale-while-revalidate=300, stale-if-error=1800\r\netag: W/\"appV0.0.1765813557\"\r\nvary: Accept-Encoding\r\nage: 240\r\ncf-ray: 9ea3df2c8f848deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Meteor","description":"","website":"https://www.meteor.com","common_platform_enumeration":"","icon":"Meteor.png","categories":["JavaScript frameworks","Web frameworks"]},{"name":"MongoDB","description":"MongoDB is a document-oriented NoSQL database used for high volume data storage.","website":"https://www.mongodb.org","common_platform_enumeration":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","icon":"MongoDB.png","categories":["Databases"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1017,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"cfe5ed4ad001e023345e418401b4f9de","sha1":"45771e32ba2badbb6f604b7a16e360e8a3321136","sha256":"2bfcdcaec86d7a86d6c471468c48f4eb82eae655203cdf91cb3e8628297cdbf5","sha512":"0ffa52d278fe815a1294ac7387dd01d5bc40e9a8e4c3c3a4f0c3161ce4eb63afe3cba4ea48441a221d85f03bc8b7a2d4febc465157c927b5da3fb0d59b528250","ssdeep":"","tlshash":"7711e1936c56d829822046a6f8f1f514d897ed6ec28a88a1f4c9547e2fd0fc4cc5395c","first_seen":"2025-12-16T12:36:34.127395Z","last_seen":"2026-04-10T18:39:51.818699Z","times_seen":307,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.chatra.io/meteor_runtime_config.js?hash=da8143f5382a64fa191927792406ca34490ef4b2","fqdn":"chat.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","date":"2026-04-10T18:39:00.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /meteor_runtime_config.js?hash=da8143f5382a64fa191927792406ca34490ef4b2 HTTP/1.1\r\nHost: chat.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat.chatra.io/?isModern=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\netag: W/\"68904f0636b601b6b043dd82029153845e6ec8d3\"\r\nage: 99\r\ncf-ray: 9ea3df2cef888deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (772), with no line terminators","md5":"84855286d492f34963bbbfd99456f93f","sha1":"71597d44d6ee3406f31dea8b90877356781a0a3f","sha256":"b33a881fb88be0e685e0d43897ebbc21717875173eb9161ca390354fe62de15c","sha512":"4d9e5aafa7c53d54d9788835cbc8841650169aa1a90d1a0e1abf7cef31c89769f929e65e54a164e2e9b4af61b40210cab62e1aa5fbd27a03e94dfa2d07f7abc5","ssdeep":"","tlshash":"2f0125e3e7d497370e118759f0293d44667d882b19da6431a448bc6d0c3cbe2530192f","first_seen":"2025-12-16T12:36:34.241378Z","last_seen":"2026-04-10T18:39:51.819458Z","times_seen":343,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/index.css","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nCookie: __ddg8_=QxEzL3bUPkzvOlU6; __ddg10_=1775846337; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7OOpfRX7NxT9cMRU; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg10_=1775846338; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 225\r\nlocation: https://loffi.ru/\r\nx-host: loffi.ru\r\nx-tilda-server: 29\r\nx-tilda-imprint: f96a3d58-dd8c-42b7-b1ca-11aa2a146374\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3863-3739-4631-b063-373765663830/right.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3863-3739-4631-b063-373765663830/right.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"c0cea6e9f26b736dc94fcf7355671cf7\"\r\nlast-modified: Tue, 07 Jun 2022 10:20:29 GMT\r\nage: 0\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-08T22:15:36+00:00, 2026-03-12T04:52:36+00:00\r\nx-node: m9-up-gc45, m9-up-gc70\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0cea6e9f26b736dc94fcf7355671cf7","sha1":"d55c07f51f92c0c7960d63891cce7398639689a4","sha256":"23f7e88e55edbf110b3df7be00f8619fcb31eee2408641e46c13b447e3674c05","sha512":"c93919fe11f7b283326d83c7fe4b7753a6135fe3170743f9275cea4cdf762579836cfd92421bcf5253d60e8669e422d35d6c35ec5290ad38e7b0be822515c3b1","ssdeep":"","tlshash":"39019ea41128d35a8f340f62db64a450576b78c793d5008cdbc27e371d754d2b9971d6","first_seen":"2026-04-10T18:39:51.771115Z","last_seen":"2026-04-10T18:39:51.771115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":788,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neo.tildacdn.com/js/tilda-fallback-advanced-1.0.min.js","fqdn":"neo.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"194.48.203.181","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:00.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-fallback-advanced-1.0.min.js HTTP/1.1\r\nHost: neo.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:39:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Apr 2025 10:43:25 GMT\r\netag: W/\"6811fecd-6b8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Apr 2026 18:39:01 GMT\r\ncache-control: max-age=604800\r\nx-tilda-server: 22\r\nx-tilda-imprint: cd3cef8f-225e-4585-acd6-226bc2fd5905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1720,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1719)","md5":"bdf25a895336595169043557b3dbf429","sha1":"fbabc8ef1441f05508d8cf93ebc2687f7032e700","sha256":"80f8b5b63a7173de2bc8aaee336d8aa0ea34810e2e93533cf062d6e0d38020a0","sha512":"df949bb0320db06c672d9b44188d6ff999e33e8e7b87bc215b1099b09ac13fa55b4cc06ef6453b42567e036217e89436f003bf1c8f74a29874469abac75bbc8d","ssdeep":"","tlshash":"9a3140502524e539099706ce71ffa203b582c01ebc4ac081975fdcb8b8a5e874e0af9b","first_seen":"2024-10-05T17:34:40Z","last_seen":"2026-04-10T21:48:21.171254Z","times_seen":1018,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":61,"dns":1,"connect":30,"send":0,"wait":24,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-phone-mask-1.1.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:01.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-phone-mask-1.1.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:01 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 01 Apr 2026 15:23:27 GMT\r\netag: W/\"69cd386f-97f8\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:01 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-02T07:15:47+00:00, 2026-04-02T07:23:24+00:00\r\nx-node: m9-up-gc34, m9-up-gc99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38904,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38399)","md5":"71744625654361277624d01d96c83363","sha1":"7fdd072709528876b3dbf05a98a5dd9427f05145","sha256":"3d4249cb3d33c9bdd1350b4840be141c89862254727428017261b4322b9859e4","sha512":"6add75a1e07b0d77efe4412a1a37661496ace478bdc5a7a7c80d5c348145d022edbc51469a4413d77b5b29efb52a828359031b65cb2170a6f48aff2d19cc0aa5","ssdeep":"768:TeJvHRzbRTQaj+NCQONsloYW66FtsVqyG4TVp97bgFByX7onD3N93SLyo637E5xw:fNusl/G4lCWyhY7gCUF9FB","tlshash":"220370509a2f012dd4668f6c40a57349c23db6ecbfd181cb8acdedea0055eb2e725e71","first_seen":"2026-04-02T12:44:04.49659Z","last_seen":"2026-04-10T21:51:46.230439Z","times_seen":55,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-77ELWRJTYG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=G-77ELWRJTYG HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\nexpires: Fri, 10 Apr 2026 18:39:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156308\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471441,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"9ef11e61f1890b036747f8c6ade0e761","sha1":"ff95f1f2701ec67abc999ad0867669f986043a3f","sha256":"78ca3821d625202dc51258c8ad1f05fd9a3845b9c8a9565b96cda09470d7fb56","sha512":"91f4e8581cc93b95b759cd0e2a42d3f3f140fee3bf5381ba241a29c5d64ab0c2ce53de22a5bf0936291927942f4f8dbaaf8ddf66796ad8ecd1c8084c054080e7","ssdeep":"6144:jgESjtww7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:qww7WiJKzV8Fuw","tlshash":"2aa4f9ceb3d674225396f478903f018ba57b28e2b44cc8a9f189cce42d7469a5167f7c","first_seen":"2026-04-10T18:39:51.821649Z","last_seen":"2026-04-10T18:39:51.821649Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-KXHV4K5S3C\u0026gtm=45je6481v9136843635za20g\u0026_p=1775846339121\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=EAAIAGA\u0026_ng=1\u0026cid=1912760000.1775846342\u0026frm=0\u0026ir=1\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115938466~115938469~118289195\u0026sid=1775846341\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Floffi.ru%2F\u0026dt=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=4342","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-KXHV4K5S3C\u0026gtm=45je6481v9136843635za20g\u0026_p=1775846339121\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=EAAIAGA\u0026_ng=1\u0026cid=1912760000.1775846342\u0026frm=0\u0026ir=1\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115938466~115938469~118289195\u0026sid=1775846341\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Floffi.ru%2F\u0026dt=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=4342 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://loffi.ru\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:195:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:195:0\r\nreport-to: {\"group\":\"ascnsrsggc:195:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:195:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":46,"dns":0,"connect":8,"send":0,"wait":24,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-cards-1.0.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-cards-1.0.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 19 Jun 2025 08:26:08 GMT\r\netag: W/\"6853c9a0-34e\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-12-16T08:34:07+00:00, 2026-03-14T23:24:45+00:00\r\nx-node: m9p-up-gc10, m9-up-gc89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":846,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846), with no line terminators","md5":"e551fed66b4d560df364360e683e5598","sha1":"063d4d9176327fbac67e2ab863aff7549249d3f6","sha256":"f3587e733ac2337e7d4bd06fe546fc550fab397cba32110ff324ebd97358b734","sha512":"91dc38ab606e215ffc08fc4699351cba7dcc75948463d0eb93c54bc13ac64cd7d25aa8a73dd844a3e67de4d9bb1ecf8cdc1690c0dcdb1a54261f43e3d9e5b73b","ssdeep":"","tlshash":"1901e912ab5f3635c399cb0c93a07230e9148392b3d65e36bb51c7945accfd7aa8544d","first_seen":"2025-06-19T08:32:40.447926Z","last_seen":"2026-04-10T21:51:46.258757Z","times_seen":1026,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":642,"connect":131,"send":0,"wait":204,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3261-3935-4133-a362-386231626565/-/resizeb/20x/2.jpg","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3261-3935-4133-a362-386231626565/-/resizeb/20x/2.jpg HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/jpeg\r\nx-tilda-origin: or-22, or-22\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc45, m9-up-gc11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":866,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x17, components 3","md5":"f857a06b0aa39670eda3b8ebc75797e6","sha1":"59884e56247781e82b3c77b7ceae3a9909ea4b32","sha256":"689a7f55b5ef1796e4b01a1de48cf74499ab235bf69afc318905d187d8185f7e","sha512":"f898634433de927319d36e8faa75e2b079e577f7786ab2fa94aa0b8fa94c328739e7c16a8e05319e03764e0378c10859128ebfe41d5843334cc2f6f2ec6f3195","ssdeep":"","tlshash":"d611205b6b121600cf2381bd4d2633a7a28688c13e4477363a618255cd50cf4cd5dac8","first_seen":"2026-04-10T18:39:51.823805Z","last_seen":"2026-04-10T18:39:51.823805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026_ng=1\u0026tid=G-KXHV4K5S3C\u0026cid=1912760000.1775846342\u0026gtm=45je6481v9136843635za20g\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938469~118289195\u0026z=1250486631","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:41:21 GMT","end":"Mon, 15 Jun 2026 08:41:20 GMT"},"fingerprint":{"sha1":"4F:C1:3B:49:C1:2D:F9:6E:7F:DF:FC:FB:F1:E6:4C:B4:28:12:78:7A","sha256":"8A:F7:A0:0E:C0:B2:9F:EA:EA:61:B4:45:5B:D5:0B:97:EB:26:AE:C6:53:94:D9:51:25:AC:0E:E5:9B:6F:3B:94"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026_ng=1\u0026tid=G-KXHV4K5S3C\u0026cid=1912760000.1775846342\u0026gtm=45je6481v9136843635za20g\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938466~115938469~118289195\u0026z=1250486631 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-10T21:56:14.085091Z","times_seen":786040,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":85,"dns":4,"connect":21,"send":0,"wait":35,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-errors-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:04.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-errors-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 07 Apr 2022 15:21:59 GMT\r\netag: W/\"624f0197-bf9\"\r\ntserver: 9\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:04 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-11-20T08:33:17+00:00, 2026-03-05T23:24:40+00:00\r\nx-node: m9p-up-gc10, m9-up-gc73\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3065,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3064)","md5":"afae85e9209913000d4e81934f55f2c3","sha1":"d1f019d9740cef62dec134025926c7a2c669d3db","sha256":"6e5e9ef93d1cfbafb362c941abb36418c483c0f8edf5a0f98b59a3bb1e0b91de","sha512":"020a91dbf23254b19182a66381823a49905352d5cea0a5a2342065f83c055a0ee9c75320d7b36a85311e6e86fb7a5ffa6daf22a0c45f7f9ee8a8838e292dc2b3","ssdeep":"","tlshash":"e751ac970e40d4730db61e928be7370638615d6e14bbd4412123a4ae7c8af9bec58fda","first_seen":"2023-03-07T14:57:56Z","last_seen":"2026-04-10T21:48:21.17618Z","times_seen":871,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-zero-forms-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-zero-forms-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 31 Mar 2026 07:57:43 GMT\r\netag: W/\"69cb7e77-10ec8\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-31T08:05:22+00:00, 2026-03-31T08:05:22+00:00\r\nx-node: m9p-up-gc152, m9-up-gc72\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69320,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b47a5c018cc370136c280b4bde46254c","sha1":"80cccad780ff5d0ac72d83c2c151e2858372a17a","sha256":"f25dc94e01db431f31981ba2a97c9ffc448642c56d32b2973a9c944499569c12","sha512":"eca642d67fd7575857a0095a9b275d8ab020617155de36c179af89d017c33a28f7418921eeab0349c2382c9834353ff0436e0de01c1dabaace5c599ecc7a3deb","ssdeep":"1536:RyJ5DuQ6hM5w3VJoqcZ9PsKuvaAqbdPbIfQbQ15yYcZJIVSP5Z:YJGhllRc/sKulqbdPrJI8n","tlshash":"306394b47137253602974fbe24ff7785776ca1219562c810cc68c84d2abd887d73bbaa","first_seen":"2026-03-31T14:21:04.642715Z","last_seen":"2026-04-10T20:39:17.892868Z","times_seen":41,"resource_available":true,"data":null}},"time_used":1052,"timings":{"blocked":815,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3236-6564-4461-b330-373332613965/-/resizeb/20x/5pzMTna9tZ.jpg","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3236-6564-4461-b330-373332613965/-/resizeb/20x/5pzMTna9tZ.jpg HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/jpeg\r\nx-tilda-origin: or-23, or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9p-up-gc10, m9-up-gc58\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x25, components 3","md5":"4b95ea83c9c0e6f9056c1902a8f4951b","sha1":"22b6bd94ba471232bd23a54b30f907d28b48a74b","sha256":"e0c125c6bb42dffc7ad36c72a8faae863e7db8de604f743928288c7b7988524e","sha512":"7803acdd70bca468093702fa149dcebc5f23b34d22eb71772d92ccdef20f2358761fdad9fcf3d7d0667668c4c39d4be5271a3c31eb7623746e811958d85ba6a2","ssdeep":"","tlshash":"cd114d5aab121b12cf2381bd98233367928688c23a4877323b604251cd60cf8c848aae","first_seen":"2026-04-10T18:39:51.827492Z","last_seen":"2026-04-10T18:39:51.827492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6630-3266-4265-b534-623839613161/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6630-3266-4265-b534-623839613161/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-23, or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc66, m9-up-gc234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 8-bit/color RGB, non-interlaced","md5":"c4148cf963bfbfc6d973d67e7b3828a8","sha1":"688a5103e868275254430985a81faf3207e92532","sha256":"9423d56264bf0dfe1502c472662915ea6aacabf0ae6f5fcc393afaf420799c73","sha512":"41b3935b5a5a882f0cd57e81494ef757a178f558b1829fbf5180b5bb0713942188be54d6cd8cae42cfbf0c46ab3b4245248627a7a1d7ff47c9b6385409cb2d5d","ssdeep":"","tlshash":"8a01418e9a214a3ac1eaad78d52b1b1ca0e66d4d0324d07a021ca10c6c85e49debd7de","first_seen":"2026-04-10T18:39:51.828999Z","last_seen":"2026-04-10T18:39:51.828999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.chatra.io/jscss/7d8b6a8987294abbe8eee9ac227340f24b378090.js?meteor_js_resource=true","fqdn":"static.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","date":"2026-04-10T18:39:00.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /jscss/7d8b6a8987294abbe8eee9ac227340f24b378090.js?meteor_js_resource=true HTTP/1.1\r\nHost: static.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat.chatra.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\nlast-modified: Mon, 15 Dec 2025 15:46:00 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\netag: W/\"1bb57cc7dd811817264666199daf5907\"\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: zvebH_WWsdQpMQXPps-8uHDCysdHWzx5_CPiig5POjbMPm3yuCd-EQ==\r\nage: 55325\r\ncf-ray: 9ea3df2cff8b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":906389,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35071)","md5":"1bb57cc7dd811817264666199daf5907","sha1":"4efcaa70f1f229b7b6be5fe799682e8d891d95f5","sha256":"08d204551f7a6c1055b145eab91cd7b75fbc763bfdb850ac49a8549172523684","sha512":"3520fd6a17e04c654de669dfb80a966d6595e0687da2797acc65328aa387fde065d42b16522560fc19e5d0327f43a04f85bc74e74e1922c6b16eebaf0c9ce01a","ssdeep":"12288:NF3+ERvDTY7hgX2s1zbJPBy1FlZzEeHCgD2eHzIGuSwqOU+:N4G7Tms1zbJBy1FDzEeHFxzIGuSwqr+","tlshash":"fd1519b8b1a1f9a503a7226d587b6002bf392957340e8450f12cc9ea7f7858d6277f3d","first_seen":"2025-12-16T12:36:34.259981Z","last_seen":"2026-04-10T18:39:51.830487Z","times_seen":332,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-zero-video-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-zero-video-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 30 Mar 2026 07:32:00 GMT\r\netag: W/\"69ca26f0-39e0\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-30T07:40:47+00:00, 2026-03-30T07:40:47+00:00\r\nx-node: m9p-up-gc25, m9-up-gc5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14816,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14815)","md5":"b6718c855ccdea434860b4e6fce03577","sha1":"7d145b71738ccf0f45de318cafe52bae604bde9a","sha256":"d1558847ac756d7522d81e7aefce9d07cb44728ed35d29107e0ddcc0c0c7d6fd","sha512":"178f3404bcc97ab8461ec2bafb49f0393b72aee20ebcb5452baebe93f41d448cbae73ef6e5638cc2b977deb2a20679774c54c66d7bcffad483d7875cb10bc3fc","ssdeep":"384:YL0+5bsqvCGPP7ue7hyL5yeqdsH0bMWUH6JV:YL0WwqvCGPP7ue7h6geoi0bMNaJV","tlshash":"b362a6cab1e9f03941ab24b36ddf1101b7b412a5b50c8290e477d4ed6e6c95cb237be8","first_seen":"2026-03-30T23:57:57.828648Z","last_seen":"2026-04-10T21:51:46.26219Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1053,"timings":{"blocked":810,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"chat.chatra.io/sockjs/342/e0g4cqlu/websocket","fqdn":"chat.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","date":"2026-04-10T18:39:01.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /sockjs/342/e0g4cqlu/websocket HTTP/1.1\r\nHost: chat.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://chat.chatra.io\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Vv5gmKE1jAHh5jVO6jq7Zw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 10 Apr 2026 18:39:01 GMT\r\nConnection: upgrade\r\nSet-Cookie: AWSALB=lb7KfUBPMPQBArhTM0TXxVIkh9+Fr/LsqpWo9WkAERbtYzdjRdhFdRxFGSIm8OKsKkO7hiTSD+STpmJ3HN6X/ZUTz57/VMI3SVH/9VcNnNACvYqYFSxuWcQb1L8E; Expires=Fri, 17 Apr 2026 18:39:01 GMT; Path=/\nAWSALBCORS=lb7KfUBPMPQBArhTM0TXxVIkh9+Fr/LsqpWo9WkAERbtYzdjRdhFdRxFGSIm8OKsKkO7hiTSD+STpmJ3HN6X/ZUTz57/VMI3SVH/9VcNnNACvYqYFSxuWcQb1L8E; Expires=Fri, 17 Apr 2026 18:39:01 GMT; Path=/; SameSite=None\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 3dQtmdJq8PMRwunuvLUYg54iiIA=\r\nSec-WebSocket-Extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 9ea3df30aa155697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":40,"connect":40,"send":0,"wait":57,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3565-6162-4361-b063-353239613031/icons8-yandex-zen.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3565-6162-4361-b063-353239613031/icons8-yandex-zen.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"59edb5ecbd2f374781139189860224d2\"\r\nlast-modified: Mon, 31 Jul 2023 08:17:30 GMT\r\nage: 0\r\nx-tilda-origin: or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9-up-gc45, m9-up-gc81\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1060,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59edb5ecbd2f374781139189860224d2","sha1":"fed10e5d18bdf827f795befb6f45dfe1af698b43","sha256":"7baeb1354464e22228974565760427652ba703a9483e795f23bba4737b8a6e47","sha512":"a41931f819b192eb859fff8fb2f547eed42288bfbae428f913d6d032a2c2fb3710f216e0e271d0e10dedb6be01b745dd44fa014def889c9affc7e3ce98f26b3c","ssdeep":"","tlshash":"bd1120d9d070a2acc94cc7ed6b75f99b264670ea08a1e4e5c6aa6f0cc40ed4cfe40905","first_seen":"2026-04-10T18:39:51.831974Z","last_seen":"2026-04-10T18:39:51.831974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optim.tildacdn.com/tild3966-6666-4437-b131-623131663063/-/cover/432x384/center/center/-/format/webp/_.png.webp","fqdn":"optim.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3966-6666-4437-b131-623131663063/-/cover/432x384/center/center/-/format/webp/_.png.webp HTTP/1.1\r\nHost: optim.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36166\r\nlast-modified: Tue, 31 Mar 2026 03:03:39 GMT\r\netag: \"69cb398b-8d46\"\r\ncache-control: public, max-age=10368000\r\naccess-control-allow-origin: *\r\ncache: MISS, HIT\r\nx-cached-since: 2026-04-05T03:43:19+00:00\r\nx-node: m9-up-gc47, m9-up-gc41\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x384, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d654278123b2818a59d643a40501f909","sha1":"38199acc33b6efba8e0316f2dbad4d18811549d0","sha256":"5067e5a88f38c20ed2735428d0d4494c7f89f41cc5255947a20076bf063b6720","sha512":"ca9437d3fa8c74b86f432fc821db5a94f74e8d52a3fce4ef346ad399a7ef2c70451da2d2201301729b7367ba50dca7efed6a1d0b1b9f6405ce3796ba19788490","ssdeep":"384:t1YsIz6mgNLYfXfMwhjIF2H+UPGfH0T6pEemT+0f7pjRfedg4MyeqYxNT7ABRCza:t1YsBmKQe2JPGfHLr0laXXQNEIOPkq/","tlshash":"5bf2e0a466f64d26ee14956efefc62c2a06c01eabda1cf5caf04bd03c14a374df05961","first_seen":"2026-04-10T18:39:51.833472Z","last_seen":"2026-04-10T18:39:51.833472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":132,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-forms-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-forms-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 11 Feb 2026 09:33:14 GMT\r\netag: W/\"698c4cda-18885\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-02-11T09:33:54+00:00, 2026-02-11T09:41:02+00:00\r\nx-node: m9p-up-gc23, m9-up-gc10\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100485,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32666)","md5":"309b9fe33d2272074564f27326013501","sha1":"3b68b5c9c5908c5919c2de380702848932f19c65","sha256":"05d35efb43e25de655d2f565a41e2e6c608ea80bfa97de519087566e4631df96","sha512":"217b1959500d33b916524db3fe8233c01523bad57e46195a308d8adc6662c0c54ee76f7ec17346e509add160a4c5ab9cd3e728edf8615a2a5caac98ca88f6186","ssdeep":"1536:gtHtx2bbV453a+IGcnzN0RZqPvdw9ocKjVLnK:Otz53a+e6RZqaHKjVLK","tlshash":"a6a318a9b1393071169747b991ef174a77312128b906c440d968d8d63facccbee23fe9","first_seen":"2026-02-11T17:08:11.816515Z","last_seen":"2026-04-10T21:51:46.217852Z","times_seen":382,"resource_available":true,"data":null}},"time_used":1058,"timings":{"blocked":816,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/normalize.css","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET /normalize.css HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nCookie: __ddg8_=MQvB6zMWIthAnvQY; __ddg10_=1775846338; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DvUPUgKOzWvDzke3; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg10_=1775846339; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 225\r\nlocation: https://loffi.ru/\r\nx-host: loffi.ru\r\nx-tilda-server: 26\r\nx-tilda-imprint: 8473aad6-8612-4a6b-93c4-8a0dc2a935e0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollbooster@3/dist/scrollbooster.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /scrollbooster@3/dist/scrollbooster.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 61\r\nlocation: /scrollbooster@3.0.2/dist/scrollbooster.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ea3df27d9025688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13323,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollbooster@3.0.2/dist/scrollbooster.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:00.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /scrollbooster@3.0.2/dist/scrollbooster.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9ea3df2c0d835688-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 2464431\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 10 Apr 2027 18:39:00 GMT\r\nlast-modified: Sat, 28 Feb 2026 03:00:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:NN8srawERFmf4DLqobXVIYCcuy3HbHNotmQFIXx6Z+M=:\r\nfly-request-id: 01KJH325QJMDZCNTPM5KH536P8-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":13323,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13277)","md5":"4a564546b08f3ad22e85b809b8d72497","sha1":"0c5e6e49151d8337998449f93fbdcf61adad4a7c","sha256":"34df2cadac0444599fe032eaa1b5d521809cbb2dc76c7368b66405217c7a67e3","sha512":"30b6ef487271cd1b2d1ecfd5a84a86942f26e0ccc0d2dc7554f647fd5a604d7028a529d80087e1423752c853c6ff8388a999fb27c549cf1de8204612ad47f51c","ssdeep":"192:/uHJ3QyUj04m8nutbM7i3HEFeyks3TBTA:/ueznuO7aEDkmBE","tlshash":"0a529601b290bc6602cbb365e15f5201527b2c8e5585e0cc7a3b8ee14ddaafe2157ff9","first_seen":"2023-03-07T14:57:56Z","last_seen":"2026-04-10T18:39:51.786701Z","times_seen":188,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3139-3130-4536-b163-303833623138/photo.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3139-3130-4536-b163-303833623138/photo.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"4c403d3a2fdead4fcefcecd05f3b772f\"\r\nlast-modified: Mon, 30 May 2022 09:43:02 GMT\r\nage: 0\r\nx-tilda-origin: or-26\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9p-up-gc25, m9-up-gc72\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5312,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c403d3a2fdead4fcefcecd05f3b772f","sha1":"6077f0ab332225c0ffd8960b4e8f3fc96a7c2116","sha256":"0f42037a8b4b26bdc57f0584de3201bcb9dfaa791c0084df317f7feb0a97029e","sha512":"e228d3684f84978056c997448cb13d273f691bdcd971c97c406465bd6523be9c092c34fb1a86e6d0038b0ef6ef02f27daa77acbe0513c7a41bd08357c1f0313c","ssdeep":"96:BS56RXCMss9y3en45TbU4Wy8FLopVl+jp3FNtAVz79NhNuQAV9C+CgBq6bHrqvQp:BKXMss9yy4pbULkcTNtAV5mCVLIOvq","tlshash":"aeb173cd2fb199f49a89c7d7bf1250cc2d13957abe948e2cc08c5f68249983cea585c3","first_seen":"2026-04-10T18:39:51.835717Z","last_seen":"2026-04-10T18:39:51.835717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.tildacdn.com/tild6266-6436-4365-b237-323433363931/-/resize/400x/-/format/webp/close.png","fqdn":"thumb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6266-6436-4365-b237-323433363931/-/resize/400x/-/format/webp/close.png HTTP/1.1\r\nHost: thumb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 3508\r\nlast-modified: Fri, 19 Dec 2025 17:45:57 GMT\r\netag: \"69458f55-db4\"\r\ncache-control: public, max-age=10368000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-12-23T17:38:42+00:00, 2026-02-17T22:00:03+00:00\r\nx-node: m9-up-gc45, m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28d4acccbde0be7c6f96af6266c61438","sha1":"c1a9baa2827d66ae0de584c39298c2bee182def8","sha256":"6dc79a64c666ef9e052d10d3f7826af2223dbef23a39a5625b51cff9393d341a","sha512":"efadad98e462ecd91740c250b8a465a4fbd4930e4cefe0740ad2e3b5de7309df0d7e78c8c48627a7dc1053e744a4d2763b3bb3c2beaaeaf0b9239e792e603d44","ssdeep":"","tlshash":"61715c2d6fc69c80ac82283482ce7c90c6cf837c5de399e5d5f91261452cb85ef2ca8c","first_seen":"2026-04-10T18:39:51.837135Z","last_seen":"2026-04-10T18:39:51.837135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":1024,"dns":0,"connect":135,"send":0,"wait":130,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3665-3162-4639-a265-613836653564/Left.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3665-3162-4639-a265-613836653564/Left.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"2dd0c857f6d5b318f41b24e7488066c5\"\r\nlast-modified: Tue, 07 Jun 2022 10:07:13 GMT\r\nage: 0\r\nt-server: or-7\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: BYPASS, HIT\r\nx-cached-since: 2025-07-01T15:39:41+00:00, 2026-03-01T17:15:38+00:00\r\nx-node: m9p-up-gc23, m9-up-gc73\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":703,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2dd0c857f6d5b318f41b24e7488066c5","sha1":"71915b3a00af6983a546dc2dfd070a3211d34e4c","sha256":"5d9bfc253527af24e62754397a2475598c9344107f2297a234c51768b4fe9a5f","sha512":"b33cf646fd5b78c82bfa9c7d83b797cd1f3006c160436525df56c3424d1c81273e467666dbf79048d2ca897b17360c9d0fcef9273b2b937c66727771f49e155b","ssdeep":"","tlshash":"1e01fed27298ebdcce854326cbaaa550e26332c085d60014d6c6e3192c3e0cd8afa2c5","first_seen":"2026-04-10T18:39:51.718456Z","last_seen":"2026-04-10T18:39:51.718456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":792,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optim.tildacdn.com/tild3165-3562-4733-b330-306633663931/-/cover/26x26/center/center/-/format/webp/location_1.png.webp","fqdn":"optim.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3165-3562-4733-b330-306633663931/-/cover/26x26/center/center/-/format/webp/location_1.png.webp HTTP/1.1\r\nHost: optim.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 484\r\nlast-modified: Fri, 06 Mar 2026 15:35:02 GMT\r\netag: \"69aaf426-1e4\"\r\ncache-control: public, max-age=10368000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-06T21:55:50+00:00, 2026-03-09T03:59:15+00:00\r\nx-node: m9-up-gc46, m9-up-gc69\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56644f8734da05b60908e17f70b4110a","sha1":"062ce1ddc561b27642278f840f35e0948c651950","sha256":"16151dfb31a125376c105fc49f7377bd48e4881716933e19fab7e3f16c7ec7f5","sha512":"b222e1f2c7214a7145126809c7c6eba3c71f77eba5354cc4a7790e0517cd368991662978650f900d78b04b60dcdd05990d30817d976cc2b305f10729f110dcf3","ssdeep":"","tlshash":"63f05c834250b228c08dbc26b318781fb88d1020db9883aa0c102fb2322d0222033ee6","first_seen":"2026-04-10T18:39:51.838449Z","last_seen":"2026-04-10T18:39:51.838449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3238-6261-4563-a530-363033313964/_MAX.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3238-6261-4563-a530-363033313964/_MAX.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"faea8f319845c14e94e4673ab6e8f4f4\"\r\nlast-modified: Thu, 02 Apr 2026 18:09:51 GMT\r\nage: 0\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9p-up-gc10, m9-up-gc80\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"faea8f319845c14e94e4673ab6e8f4f4","sha1":"40ac00db330b3a7537e292f6e7fc8f8e08206b88","sha256":"1f30be68fac48d8587ef5e24fb10a694009ddeb4ab0c6f1a6280fbc894b9f071","sha512":"ce5602ff456f372f5a4b15d4e0da63007c1b32f854dc4f04c3323c10f0858a61a2ef2f7ab1f891deef7629b7f525f5eb92f9215496c7723957b79245cbeec3d2","ssdeep":"","tlshash":"2311236653962539dd124e5cc37490c072a7f15fd75c14cccee21b2b4f018f168806be","first_seen":"2026-04-10T18:39:51.839736Z","last_seen":"2026-04-10T18:39:51.839736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static3.tildacdn.com/tild3032-3030-4663-a365-366634616265/photo.svg","fqdn":"static3.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"159.69.130.130","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:03.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3032-3030-4663-a365-366634616265/photo.svg HTTP/1.1\r\nHost: static3.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1071\r\nx-amz-id-2: BIKGkyFYLUTFxQlLansnQxp0WJgF8ER/ecpho4q7A9ZtDHNOUlYUE4uW8r6Prs2ZGl3FHIoCarY=\r\nx-amz-request-id: W3AGZMNGJQQWYVCB\r\nlast-modified: Thu, 19 May 2022 15:10:36 GMT\r\netag: \"937d9c6634a4a253ff0b2371ac8811b4\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-tilda-origin: or-31\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1071,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"937d9c6634a4a253ff0b2371ac8811b4","sha1":"2113cb9e0b4ac47a3de6cae6d6c7a9b0f5b333f8","sha256":"b8da91aa0cc5ad6b720668f2c9378b83236c6c097952b12a94075932b7ad167f","sha512":"f63b7d693b51b6e587b641cf3fc3ca4f5a578e2305d53d8ba7965d9d642cdec67a2f19d52f49e3aa27f3aced6c975d593dc9d3ed996c3b7e4141bdfa7f86bc66","ssdeep":"","tlshash":"bd11f08a07c2c26858498264efa8cac24329b8dbc2f02bd4cdd70d31e976090d39d6e9","first_seen":"2026-04-10T18:39:51.841528Z","last_seen":"2026-04-10T18:39:51.841528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":91,"dns":9,"connect":38,"send":0,"wait":64,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /ajax/libs/jquery/2.0.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29440\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 21:37:30 GMT\r\nexpires: Sat, 03 Apr 2027 21:37:30 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 594088\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83606,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32023)","md5":"ccd0edd113b78697e04fb5c1b519a5cd","sha1":"a6eedf84389e1bc9f757bc2d19538f8c8d1cae9d","sha256":"a57b5242b9a9adc4c1ef846c365147b89c472b9cd770face331efcb965346b25","sha512":"7a9cc9f66b3ed0fabecc532b1b595754dbe311782d7cac7d8ae116ab3de199b694da6fc3a75a5c9a9633b927432ea5fa3cc223ccc3b2185c0c73e4a480584c16","ssdeep":"1536:mnWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhMr:GUL5uxNL/4Cr3lOr","tlshash":"8083f9dd73c2b06257bb20b9006f640ff2364d6a280d8564f125d8e9bcb5a4d827bf6d","first_seen":"2023-03-07T01:16:40Z","last_seen":"2026-04-10T21:41:18.315147Z","times_seen":5837,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":11,"receive":10,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-events-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-events-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 10 Jul 2025 12:35:04 GMT\r\netag: W/\"686fb378-347f\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-07T12:43:06+00:00, 2026-03-11T10:16:40+00:00\r\nx-node: m9-up-gc66, m9-up-gc229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13439,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13438)","md5":"fe0741f3cca980618b067b8ce3bb9377","sha1":"b013bd95a88f242bda0288423aac5e5be7261cea","sha256":"5ef75137fa784d916c1731eb5c3700fdadaf7babc8c55a933cb52910249ce576","sha512":"b99997ac68d6cd3b517a8c76ffe9247a41d77be1b2031fd9d4f87ba6c51473fe56ea576d9dae5b1eec639e32ba0a75492778149959205f898a7f65e271367b8b","ssdeep":"384:ZjAm742zrc9BZvBTB/CQsxq8s70g91sSqMRC2tx8eVhJKsXug+q1:F574crc9BZvBTB/hsxq8A1sSqMRC2txV","tlshash":"2852f793a8307d7465f824ac6e6a37c534b822adf5c501812d48fdae33159438a2bf9d","first_seen":"2025-07-10T16:23:26.55297Z","last_seen":"2026-04-10T20:39:17.888438Z","times_seen":2980,"resource_available":true,"data":null}},"time_used":1050,"timings":{"blocked":808,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?v=3\u0026t=l\u0026pid=245904421\u0026rv=6481\u0026tag_exp=0~115938466~115938469~118289195\u0026u=AAAAAAAAAAAAAIAAAAAAAAE\u0026ut=Ag\u0026h=Ag\u0026gtm=45je6481v9136843635za20g\u0026cl=3.5.1\u0026ccid=136843635\u0026cid=G-KXHV4K5S3C\u0026l=L1572.S81.B64.E1164.I2381.TC23.HTC0.F5054.C5~gtm.init_consent.S1.V1.E848~gtm.init.S1.V1.E969.TS5ogtgasend.TI10.TE2.TS5ogtreferralexclusion.TI12.TE1.TS5ogtsessiontimeout.TI13.TE1.TS5ogt1pdatav2.TI14.TE1.TS5setproductsettings.TI31.TE1.TS5ccdgaregscope.TI29.TE3.TS5ccdconversionmarking.TI28.TE1.TS5ogteventcreate.TI27.TE1.TS5ogteventcreate.TI26.TE1.TS5ogteventcreate.TI25.TE1.TS5ogteventcreate.TI22.TE1.TS5ogteventcreate.TI21.TE1.TS5ogteventcreate.TI19.TE1.TS5ogteventcreate.TI18.TE1.TS5ccdautoredact.TI17.TE1.TS5ccdgaadslink.TI16.TE1.TS5ccdgafirst.TI32.TE838.TS5ogtgooglesignals.TI30.TE837.TS5ogteventcreate.TI24.TE830.TS5ogteventcreate.TI23.TE830.TS5ogteventcreate.TI20.TE829.TS5ccdgalast.TI15.TE825~gtm.js.S1.V1.E945.TS5gct.TI7.TE1~gtm.dom.S2.V2.E822~gtm.load.E3~GA2772","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:03.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /a?v=3\u0026t=l\u0026pid=245904421\u0026rv=6481\u0026tag_exp=0~115938466~115938469~118289195\u0026u=AAAAAAAAAAAAAIAAAAAAAAE\u0026ut=Ag\u0026h=Ag\u0026gtm=45je6481v9136843635za20g\u0026cl=3.5.1\u0026ccid=136843635\u0026cid=G-KXHV4K5S3C\u0026l=L1572.S81.B64.E1164.I2381.TC23.HTC0.F5054.C5~gtm.init_consent.S1.V1.E848~gtm.init.S1.V1.E969.TS5ogtgasend.TI10.TE2.TS5ogtreferralexclusion.TI12.TE1.TS5ogtsessiontimeout.TI13.TE1.TS5ogt1pdatav2.TI14.TE1.TS5setproductsettings.TI31.TE1.TS5ccdgaregscope.TI29.TE3.TS5ccdconversionmarking.TI28.TE1.TS5ogteventcreate.TI27.TE1.TS5ogteventcreate.TI26.TE1.TS5ogteventcreate.TI25.TE1.TS5ogteventcreate.TI22.TE1.TS5ogteventcreate.TI21.TE1.TS5ogteventcreate.TI19.TE1.TS5ogteventcreate.TI18.TE1.TS5ccdautoredact.TI17.TE1.TS5ccdgaadslink.TI16.TE1.TS5ccdgafirst.TI32.TE838.TS5ogtgooglesignals.TI30.TE837.TS5ogteventcreate.TI24.TE830.TS5ogteventcreate.TI23.TE830.TS5ogteventcreate.TI20.TE829.TS5ccdgalast.TI15.TE825~gtm.js.S1.V1.E945.TS5gct.TI7.TE1~gtm.dom.S2.V2.E822~gtm.load.E3~GA2772 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stat.tildaapi.com/event/","fqdn":"stat.tildaapi.com","domain":"tildaapi.com","tld":"com"},"ip":{"addr":"185.129.100.115","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:03.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildaapi.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 14 Oct 2025 15:17:58 GMT","end":"Sun, 15 Nov 2026 15:17:57 GMT"},"fingerprint":{"sha1":"E6:E3:B9:47:BC:2E:88:78:DB:C3:35:12:F1:15:CE:0B:81:3C:34:CA","sha256":"65:E4:00:BE:EF:8B:B8:AE:05:1E:FC:3B:9A:FC:81:6D:1C:61:D1:ED:45:9D:EA:AA:D6:6B:AA:11:DD:70:7C:A9"}}},"request":{"raw":"POST /event/ HTTP/1.1\r\nHost: stat.tildaapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 749\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":749,"data":"page=loffi.ru%2F\u0026referrer=\u0026userid=1775846342870.748810\u0026sessionid=1775846342870.178825\u0026user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_language=en-US\u0026projectid=3267520\u0026pageid=27921274\u0026pagealias=\u0026formskey=cf122a14b0f75cb5008c7f06e7d89112\u0026ismobile=false\u0026tildastatcode=876daf40be932dc7c85a0bd636ceeb40\u0026fingerprint=63547c646d7c686334387c6c656e2d55532c656e7c7057696e33327c767c614d6f7a696c6c617c6e4e657473636170657c706c696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d766965776572696e7465726e616c2d7064662d7669657765727c7072317c773132383068313032347c634432347c744f307c6d54307c\u0026tildautm="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9bu8zFLd364dyHe1; Domain=.tildaapi.com; Path=/; Expires=Fri, 10-Apr-2026 18:59:03 GMT\n__ddg10_=1775846343; Domain=.tildaapi.com; Path=/; Expires=Fri, 10-Apr-2026 18:59:03 GMT\n__ddg9_=91.90.42.154; Domain=.tildaapi.com; Path=/; Expires=Fri, 10-Apr-2026 18:59:03 GMT\n__ddg1_=BCZlZNOGYDf0LKd5eBrg; Domain=.tildaapi.com; HttpOnly; Path=/; Expires=Sat, 10-Apr-2027 18:39:03 GMT\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\ncontent-type: application/json;charset=utf-8\r\naccess-control-allow-origin: https://loffi.ru\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ba518e7bb13f1b9d72a0569a52fc2832","sha1":"331078cb830b731e900eca7c6fcbe0a7b885305a","sha256":"fb1bf528d8237aac3e9ead389ab246ba0068f61fe281610110937ef2b8adefce","sha512":"778a950dc96b5bc54714b3f7b94a9debb250d075ce004168fcd5e747d2f41324cc35ae410bdb822d5f534acaec509595a162109cec1a642c1cbca4e92f6a832c","ssdeep":"","tlshash":"bf60000000033c0c030300033300f003030000c000c33003030fc00c0300c0000c3300","first_seen":"2023-04-06T17:21:16Z","last_seen":"2026-04-10T21:51:46.210146Z","times_seen":11056,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":72,"dns":11,"connect":21,"send":0,"wait":36,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3831-3133-4566-a266-393337333234/-/resize/20x/search-interface-sym.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3831-3133-4566-a266-393337333234/-/resize/20x/search-interface-sym.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-26, or-26\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-02-06T13:03:52+00:00, 2026-02-18T05:58:29+00:00\r\nx-node: m9-up-gc45, m9-up-gc71\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"4ccbe35c5ad6455f473a8d9173c6c971","sha1":"d89e8a4b79c5ef2c2e31e567e386e3e0ec3ecca4","sha256":"3e924cb0ecadf9876adbebf47e2747c4cb5161a5c2325c94aff1570ea11d9f1e","sha512":"f2eaac99402861b48e7f39c58b1e8bcb72cdf1adaedb07cc5305f785817b9a849c9acb974d5e2e0df3e1339d4c44b5e4493c0a0e48d15aa45e6374b8ac5b77d0","ssdeep":"","tlshash":"d9f07571a361c5bc43c9cf2783020712ce6c10f84b6b181c068f5a3b80b56240f70755","first_seen":"2026-04-10T18:39:51.844738Z","last_seen":"2026-04-10T18:39:51.844738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1162,"timings":{"blocked":1031,"dns":0,"connect":113,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3032-3030-4663-a365-366634616265/photo.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3032-3030-4663-a365-366634616265/photo.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"937d9c6634a4a253ff0b2371ac8811b4\"\r\nlast-modified: Thu, 19 May 2022 14:13:28 GMT\r\nage: 0\r\nt-server: or-8\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: BYPASS, HIT\r\nx-cached-since: 2025-07-02T16:13:28+00:00, 2026-03-01T17:15:37+00:00\r\nx-node: m9-up-gc45, m9-up-gc73\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1071,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"937d9c6634a4a253ff0b2371ac8811b4","sha1":"2113cb9e0b4ac47a3de6cae6d6c7a9b0f5b333f8","sha256":"b8da91aa0cc5ad6b720668f2c9378b83236c6c097952b12a94075932b7ad167f","sha512":"f63b7d693b51b6e587b641cf3fc3ca4f5a578e2305d53d8ba7965d9d642cdec67a2f19d52f49e3aa27f3aced6c975d593dc9d3ed996c3b7e4141bdfa7f86bc66","ssdeep":"","tlshash":"bd11f08a07c2c26858498264efa8cac24329b8dbc2f02bd4cdd70d31e976090d39d6e9","first_seen":"2026-04-10T18:39:51.841528Z","last_seen":"2026-04-10T18:39:51.841528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":794,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-popup-1.1.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-popup-1.1.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 19 Sep 2025 12:27:35 GMT\r\netag: W/\"68cd4c37-6bc\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-22\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-01-17T12:35:05+00:00, 2026-03-11T10:22:33+00:00\r\nx-node: m9p-up-gc152, m9-up-gc89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1724), with no line terminators","md5":"aecf2d7c1b9df4ccfd01693a24685d99","sha1":"28806487778424a2fb837b0fe3d4a6da35700f98","sha256":"6f284e1ae65f2f2b636e361febafaa49d1aa0a3322c713be9238725b39948101","sha512":"acfcd21b37ac2af7523e5688761fd0f17ec241abe27334120fcd5e99b2e5931addd3f330fa7b4a0c521a337ec5e178e953becddb77cf9a1c72795991d9f86ceb","ssdeep":"","tlshash":"8831bc504ab13109a076c625dfe187ac133ec15bb7624daf72099c2987c62ddd17f62f","first_seen":"2025-09-19T20:40:05.562289Z","last_seen":"2026-04-10T20:39:17.939547Z","times_seen":1581,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3435-3265-4263-a164-633034636336/-/resizeb/20x/noroot.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3435-3265-4263-a164-633034636336/-/resizeb/20x/noroot.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-21, or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc34, m9-up-gc230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 19, 8-bit/color RGBA, non-interlaced","md5":"530a293157deb379f8160e7daf0a2121","sha1":"4e50bd6481bfc6cfc41ad5ba1de6e84c580d6315","sha256":"37f50f98a8e6cce7238f0f0924016e089eaf7708497f9cd0cc16bd6e2e57e2ef","sha512":"147875ed3efbd592d206fd1dce453a98b01bc880e01d816ecfc1d18463fca78d7f7b149406303a0ee995b30507afb772c6c03dc208855875498ed006f4da5a54","ssdeep":"","tlshash":"1221f8efa3224e79c027b0ba805a1b610257f9054c12340adc9b8cc51dc38184ebedc7","first_seen":"2026-04-10T18:39:51.847198Z","last_seen":"2026-04-10T18:39:51.847198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-78062351-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:00.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=UA-78062351-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\nexpires: Fri, 10 Apr 2026 18:39:00 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 10 Apr 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 124308\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358069,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"a63fd70a0e9467fa6150af1dc58b5a72","sha1":"ccb6f03b6750f68d0123f6093773f53c93118540","sha256":"e5a09c08929b5c99ebee7d87d3c4b0d38b564d935b98cf32f43c2733c8fc87b0","sha512":"9060fdca2e36af07bc8ce6952b083e610c0d6fb704f08cb166821507d4666ce0ab96b86628e16dcd208739d37fb1919f0de449cc2215e73b972a79ce31af6a6c","ssdeep":"6144:EESj7w7Ww0e5OI4wrj8V5GOl5Wc0CV/2el3WgJXK:Qw7W4Jp8UyPa","tlshash":"c47409cdb3da742253a3a478903f008ba17a79d2f84cc899f185d9d42e7469a4277f7c","first_seen":"2026-04-10T18:39:51.848456Z","last_seen":"2026-04-10T18:39:51.848456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KXHV4K5S3C\u0026cx=c\u0026gtm=4e6481\u0026bs=ctrl2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:00.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=G-KXHV4K5S3C\u0026cx=c\u0026gtm=4e6481\u0026bs=ctrl2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\nexpires: Fri, 10 Apr 2026 18:39:00 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163425\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":507403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10940)","md5":"1019446a92cfbb1d10683d6770b85fbc","sha1":"e887ebbf38121e130f437b9b1afae3f42659881c","sha256":"baa9cce3cb2cbd2eba05cac028acee762411698f3af96f87a7c7ef125b86a31a","sha512":"5893eb38866df6d821886a8e73da455924a3e8e87b480bb34d39569e19b7ebad8f19930cce59605523b0c1901648b0387ed48eb6de06b18ed15259d3e8bd6daa","ssdeep":"6144:1bESjtww7Iw2e5OI4wlz+j8V5iXVl5Wc0CVb2+pE5zV85RJoDLXx:xww7IiJ7zM8VPzVrh","tlshash":"37b409ceb3d574225296f478d03f01cba97b29e2b49cc8aaf099cce02d7455a5127f78","first_seen":"2026-04-10T18:39:51.849632Z","last_seen":"2026-04-10T18:39:51.849632Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":34,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru/main.mp4","fqdn":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","domain":"selstorage.ru","tld":"ru"},"ip":{"addr":"92.53.68.17","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.selstorage.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Feb 2026 09:54:17 GMT","end":"Sat, 20 Mar 2027 09:54:16 GMT"},"fingerprint":{"sha1":"91:CE:72:30:AF:14:D4:91:E5:63:09:59:DB:D1:4F:93:05:FF:69:2F","sha256":"EA:15:8E:C4:91:84:B1:80:96:B0:F1:3B:83:6C:3B:6C:DC:0B:37:B5:DA:70:3A:56:77:EC:46:10:48:40:2D:C4"}}},"request":{"raw":"GET /main.mp4 HTTP/1.1\r\nHost: 814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\ncontent-length: 16493919\r\ncontent-range: bytes 0-16493918/16493919\r\ncontent-type: video/mp4\r\netag: \"24bff09b032832adbf365a798cce0082\"\r\nlast-modified: Tue, 06 Aug 2024 09:39:38 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":940905,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"bfdb038af6f8fdf18530d30a3c69df5f","sha1":"3820a09d065c7ff6f5b653106519d2ffaa60682a","sha256":"8c73923e42abcd7307cf44ba8c14078fb45124f9b044b9a8340d41607836903d","sha512":"1dea92c9b8851d37c27e47b24b7360334a072d4f2a9e152aae4092d865be5e3b39aa6ece284abdfcbff54e8a2b80d4b73988af4cc6c33aa7cce920ef9dd77daf","ssdeep":"24576:T7PcoWGr4F8/A4FxgPK6WYuwcXBERtdHQDj:Trnr4QA4FmKVYqxabHEj","tlshash":"381533e986f0d207f774a93a1bcea528df41ba744304d38b1ed405124c5b3abb6f58a7","first_seen":"2026-04-10T18:39:51.850742Z","last_seen":"2026-04-10T18:39:51.850742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":152,"dns":14,"connect":23,"send":0,"wait":205,"receive":14,"ssl":108},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-77ELWRJTYG\u0026cx=c\u0026gtm=4e6481\u0026bs=ctrl2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=G-77ELWRJTYG\u0026cx=c\u0026gtm=4e6481\u0026bs=ctrl2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\nexpires: Fri, 10 Apr 2026 18:39:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156260\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471452,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0cdf965edf1a5f0ac6b1ba3994da6b07","sha1":"26d639287dc8ef7205a6e1dbd09d3d9a85b703b7","sha256":"557839b5b9f21fca18d4ad9914d9614dca8b76a5220c869b2016842ff1310821","sha512":"09353bbd181b623bbba3ce3aeef875adbad6c8b3d6423e8ae6919e343fb481bd085b8f173fcdb3db26e28eabf1a83931af940dc4d39a132635002d48a37790e0","ssdeep":"6144:jhESjtww7Ww2e5OI4wgzVj8V5hVl5Wc0CVs2h/O5RJltFXA:Zww7WiJKzV8Fuw","tlshash":"eda4f9ceb3d674225396f478903f018ba57b28e2b44cc8a9f189cce42d7469a5167f7c","first_seen":"2026-04-10T18:39:51.85225Z","last_seen":"2026-04-10T18:39:51.85225Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-submenublocks-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-submenublocks-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nlast-modified: Mon, 23 Mar 2026 11:59:27 GMT\r\netag: W/\"69c12b1f-58bb\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\ncontent-encoding: gzip\r\nx-tilda-origin: or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-23T12:00:03+00:00, 2026-03-23T12:08:02+00:00\r\nx-node: m9-up-gc46, m9-up-gc230\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22715,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (22714)","md5":"10b881fd19f1f448d807d52926c4cd5a","sha1":"4cf748669617946e0bb0da234e6a3b62c341fa30","sha256":"9202151a8ade92e6e0274b10ace0945cdbcbf6cd41a4253b149951187402f7f0","sha512":"2c985a9645eff4a3c4e642402dd50893bd996c557d8b9c84febc2c36fcc898ff0a0408d36ae2b0b511326ca1c3422744c5ee7b5abdbe89aa62b13e9d0b00ba28","ssdeep":"384:lLaOejtS8seELez5fyrmysufsa8H9Gk0IjYEX5kJbQ/kvngy3C7siKPmNS4ucAzz:HejtS5eELelqgV50qX5ebVuKPmNS4ucI","tlshash":"a2a26274993028b4c1d696b25b7f6187e27018494d0a4d51d42be4fcec2c8eb57c2bfb","first_seen":"2026-03-23T19:03:42.963875Z","last_seen":"2026-04-10T20:39:17.901049Z","times_seen":66,"resource_available":true,"data":null}},"time_used":1061,"timings":{"blocked":817,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/normalize.css","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET /normalize.css HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nCookie: __ddg8_=QxEzL3bUPkzvOlU6; __ddg10_=1775846337; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Va0F4RIp6i3TG8iy; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg10_=1775846338; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 225\r\nlocation: https://loffi.ru/\r\nx-host: loffi.ru\r\nx-tilda-server: 29\r\nx-tilda-imprint: 7c365409-0eed-4b95-bf7a-ec27176785fa\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Va0F4RIp6i3TG8iy; __ddg10_=1775846338; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MQvB6zMWIthAnvQY; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg10_=1775846338; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:58 GMT\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Thu, 02 Apr 2026 19:19:23 GMT\r\netag: \"14dd50-64e7f14051613-gzip\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-host: loffi.ru\r\nx-tilda-server: 29\r\nx-tilda-imprint: 25f616e9-05d4-47aa-9c11-30c402c8e5e5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27986)","md5":"4bf73523ffaa8dc748ce11895d91a2df","sha1":"ac0d21e5f36e2e9076887f38d0d11728decb4a2c","sha256":"281616b0acd24f564fa8cd768267c69e3656087d18e833004a4d9b33bacc9981","sha512":"efcf73457081c77af11a362e61f1b9396340053cfdf69928d7e1f3605890f5047d5d9ad0d3cfaf4450ee03c11ac6004de45f08cafcd434af206d9b9fd637ef89","ssdeep":"12288:qXcLUmyjfCpxobdQV/8/iaInULyHWVaDgJ0GkPtNMdK7oGlDarCGgJzfbXftILXM:asX","tlshash":"3b2551a0b24104379403b1df13bfc924375a7b82ef0723f4fae80a6d5ada9a55da7d50","first_seen":"2026-04-10T18:39:51.731756Z","last_seen":"2026-04-10T18:39:51.731756Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-zero-form-errorbox.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:01.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-zero-form-errorbox.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:01 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Apr 2025 10:49:26 GMT\r\netag: W/\"6810aeb6-6be\"\r\nx-tilda-front: fr-2\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:01 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-02-23T10:57:18+00:00, 2026-03-14T23:24:43+00:00\r\nx-node: m9-up-gc37, m9-up-gc8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1726), with no line terminators","md5":"7e7145b5a8bbfbe938fd97a980196ee9","sha1":"c765e10e5b691ad59999ec6141387bd55624584e","sha256":"ea4d85bf21925568c05e4178eb746bed0cbb116a8bf79f64ee8dcfacc00b3c55","sha512":"a9c74ace21eaffade962103f637461d60f073ba56b05397f8390b3aece3e375fee9eb3cbbe4ba83496667de7a0863cfd82f46cb54963ac455f577708ef652920","ssdeep":"","tlshash":"1431f1215814378d747ee10db699855c95a49923bbf30aefb3c4f8748bc64e68d17a10","first_seen":"2025-05-10T01:53:54.434552Z","last_seen":"2026-04-10T20:39:17.92028Z","times_seen":807,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru/mebeltseh.mp4","fqdn":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","domain":"selstorage.ru","tld":"ru"},"ip":{"addr":"92.53.68.17","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:01.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.selstorage.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Feb 2026 09:54:17 GMT","end":"Sat, 20 Mar 2027 09:54:16 GMT"},"fingerprint":{"sha1":"91:CE:72:30:AF:14:D4:91:E5:63:09:59:DB:D1:4F:93:05:FF:69:2F","sha256":"EA:15:8E:C4:91:84:B1:80:96:B0:F1:3B:83:6C:3B:6C:DC:0B:37:B5:DA:70:3A:56:77:EC:46:10:48:40:2D:C4"}}},"request":{"raw":"GET /mebeltseh.mp4 HTTP/1.1\r\nHost: 814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\ncontent-length: 7522399\r\ncontent-type: video/mp4\r\netag: \"69e1873c44f431d17ac99a552739d0ce\"\r\nlast-modified: Tue, 06 Aug 2024 09:57:17 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\ndate: Fri, 10 Apr 2026 17:46:00 GMT\r\nage: 3182\r\ncontent-range: bytes 0-7522398/7522399\r\naccess-control-expose-headers: Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":260930,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3591f022ab050ef881062f119dd118d8","sha1":"61818e62d93cb92e26aacf8cb1705cea24605a75","sha256":"53a44ceed4b05a35dfc3920c19d42ff15655f89695a32b4491523176cf1076d9","sha512":"024d42b4f96b544c79fc04d18a350915810b7bfc2eb24683a9718deeebfb499d31553d074187157a2709c94e7a680aa67edd8628433f01018a7fcc0145555496","ssdeep":"6144:6hPSdDJ6C9zEAyVBYRjm8qqiMNowCbzeot:6ZSdd6KyVBYFXYMFCveot","tlshash":"ae4412b2a7244457d6951235fed77b6c3fa8d9a03501a7c3d288e2392d231eace178d2","first_seen":"2026-04-10T18:39:51.854912Z","last_seen":"2026-04-10T18:39:51.854912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":208,"dns":80,"connect":18,"send":0,"wait":30,"receive":66,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-forms-1.0.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-forms-1.0.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 06 Apr 2026 08:50:42 GMT\r\netag: W/\"69d373e2-ab7d\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-06T09:01:03+00:00, 2026-04-06T09:06:30+00:00\r\nx-node: m9p-up-gc25, m9-up-gc90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43901,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13954)","md5":"abd5957b5eaeb960abf9006d52454729","sha1":"83e02e4227b39661248cc8fca909f1bce1ea030d","sha256":"d501f8cefa70eca2af74c3f089f8caf4af72daf71e19363df032e3392721e4f4","sha512":"f9b99815f4baba56492320fe10130268e37fa51b36a19572e1c40d61a8505822f4c6829dcd26951c37c96fb4f621b9527203422456fdb4669e28742fad00b03c","ssdeep":"384:3rr8bs0QLtyCXDaOoJ/8+WXWHdfPgAaQJL7K6NEjuBXR6Fhrx/2x/98Kp:P8bs0QLttDaZWXadfPgAaQFG6zb","tlshash":"39132232a874365cb8168e7c5ac5d209452cc4218f9349cfe2847838678e597d7ffbae","first_seen":"2026-04-06T13:41:42.734432Z","last_seen":"2026-04-10T21:51:46.228196Z","times_seen":46,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":836,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-cover-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-cover-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 08 Apr 2026 07:21:06 GMT\r\netag: W/\"69d601e2-4019\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-08T07:49:24+00:00, 2026-04-08T07:49:24+00:00\r\nx-node: m9-up-gc47, m9-up-gc99\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16409,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (16408)","md5":"1ab145eb917714b1f05079f14a113c5c","sha1":"e1da1d0e1458f891c995520a5ea544f88384c9bd","sha256":"1478b4d14b5a972dd7241b9f87be10e6c7df36eda115bede48e95282f6eb4da1","sha512":"2f8e05d7fe8ac1d76a04c1e1be7b9d436cb4e64e185a4c9ff0d492d52e0aa15bf5e111d70b35400401554b22b794daaa2436aa01845e2ba703324ff938fd910d","ssdeep":"384:qoSYIVGKgEWq6IlqNY5t/fvkVqzSDwDHRXpOQFtwwlcfUc:qoSYIVNHWq6IlqNYt/fvkVqzSDwDHRXq","tlshash":"e2727438b229783f4a9b257b6caeb34177702110f60244107e19d4986bf8e8ff653de9","first_seen":"2026-04-08T08:59:52.235474Z","last_seen":"2026-04-10T18:39:51.856974Z","times_seen":20,"resource_available":true,"data":null}},"time_used":1053,"timings":{"blocked":822,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3062-6139-4163-a539-643336343933/-/resizeb/20x/3AarMoiAkC.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3062-6139-4163-a539-643336343933/-/resizeb/20x/3AarMoiAkC.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-28, or-28\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:37+00:00\r\nx-node: m9p-up-gc152, m9-up-gc11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"cd87afac041d760973d535f86d0f5a26","sha1":"d032c30a874ecebae96e62c73b5e030373c00659","sha256":"5a896fb39e12a9adb8ea4d15542d1c52c0c459d97f767ed3b1d19884540309e5","sha512":"36fb7c93f86528f1836056e6fd5780b34a9728b5780dae73f25ca6cc42637fb5b6e9169ec3bc9250cbc4553443afc9a33e6b2fabbaf9f4b348b4f99a3bcbe08c","ssdeep":"","tlshash":"e931b9c61c219e26c8666afe544e97363c056d5d0286515e470926290a23c58b4fcc53","first_seen":"2026-04-10T18:39:51.8576Z","last_seen":"2026-04-10T18:39:51.8576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6366-3232-4462-a232-346233656236/-/resizeb/20x/3.jpg","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6366-3232-4462-a232-346233656236/-/resizeb/20x/3.jpg HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/jpeg\r\nx-tilda-origin: or-24, or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:37+00:00\r\nx-node: m9-up-gc45, m9-up-gc33\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 20x20, components 3","md5":"9cbe17e4e5c29f80389bf13cf6d31132","sha1":"153103f6c55c2f7ae65eaf72414d955cf4fa4090","sha256":"37c36cbb99f6658a8e53590718ffe4b3b5683213ad188c35e30c3059833e9e69","sha512":"87734878d4cae373cee3e79541eb5bc3ff2e7090609a5092fe269f0c2a46f0389edfa6e514e957c5efe6561c785b4a6689cf1d6e25cb3bbaab05d21ef17b52cc","ssdeep":"","tlshash":"4f31701aea521501cf22e8b5a8e32327959a8a80bdc4b0367ad985178d60cf58c1daca","first_seen":"2026-04-10T18:39:51.858976Z","last_seen":"2026-04-10T18:39:51.858976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3339-3133-4861-b637-656130326435/favicon_4.ico","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:01.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3339-3133-4861-b637-656130326435/favicon_4.ico HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:01 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 32988\r\netag: \"603480744b8ce70d90cde6ff247d1d21\"\r\nlast-modified: Thu, 02 Jun 2022 17:26:36 GMT\r\nage: 0\r\nt-server: or-7\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:39:01 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-07-29T13:00:51+00:00, 2026-03-26T21:17:31+00:00\r\nx-node: m9p-up-gc25, m9-up-gc89\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32988,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"603480744b8ce70d90cde6ff247d1d21","sha1":"ad9197b827015c1614aeaea10219ee3915e68966","sha256":"6279a1a9add3a418114fb786a41129cf17efba243878c150aa63e53d7ffe6763","sha512":"30071b3c52c8b69eabce8b1084b2014e3f69d992840bfb836ae5bfb761f434b252d4a7979231e12e2e83dee573eb584a8233471c3b4b579301f8017e368fdaf0","ssdeep":"48:PD4CCNR79e3oM0j7kNLMUmfn4dpiEZzvBnPq7aRvCNh31CvhMsZJp1VYdxUbaFBO:GZWZ9ub1CJpJ9YsWr5N2MwKNHi","tlshash":"e5e26c759d49144eeae198360b7feb2ef22ad097104c750979f3ba8f50a04923d5fb43","first_seen":"2026-04-10T18:39:51.86028Z","last_seen":"2026-04-10T18:39:51.86028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=DvUPUgKOzWvDzke3; __ddg10_=1775846339; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=G05vresliWhSksVa; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg10_=1775846339; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Thu, 02 Apr 2026 19:19:23 GMT\r\netag: \"14dd50-64e7f14051613-gzip\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-host: loffi.ru\r\nx-tilda-server: 31\r\nx-tilda-imprint: a6dbf558-1a57-4b09-9bbe-5e6e2bc03463\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27986)","md5":"4bf73523ffaa8dc748ce11895d91a2df","sha1":"ac0d21e5f36e2e9076887f38d0d11728decb4a2c","sha256":"281616b0acd24f564fa8cd768267c69e3656087d18e833004a4d9b33bacc9981","sha512":"efcf73457081c77af11a362e61f1b9396340053cfdf69928d7e1f3605890f5047d5d9ad0d3cfaf4450ee03c11ac6004de45f08cafcd434af206d9b9fd637ef89","ssdeep":"12288:qXcLUmyjfCpxobdQV/8/iaInULyHWVaDgJ0GkPtNMdK7oGlDarCGgJzfbXftILXM:asX","tlshash":"3b2551a0b24104379403b1df13bfc924375a7b82ef0723f4fae80a6d5ada9a55da7d50","first_seen":"2026-04-10T18:39:51.731756Z","last_seen":"2026-04-10T18:39:51.731756Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-lazyload-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-lazyload-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 11:34:12 GMT\r\netag: W/\"69ce5434-4f86\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-02T11:42:13+00:00, 2026-04-02T11:49:50+00:00\r\nx-node: m9p-up-gc25, m9-up-gc99\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20358,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (20357)","md5":"3ad0915384153521ebbf22746e562d2f","sha1":"157477ab06b8798a8fcaeddd51d41b84b6864ad8","sha256":"025e9d638edd640333695841bb52f2385835de630d869719389244fc83c1303f","sha512":"64ac69f2cdf4997952254a1931941d5ed56ac9b69b5fe5599e6e43c937da65277ef3ec73386818b13e382e2b9100da3b6ad4db1291849a21da300ebea4858733","ssdeep":"384:KN48L56BZVBicX7UwlLlArKTgSffCeUrhwjVLdUf41j6Eqy+dvZCHHTa+92Gc3Mu:KN48L56BZ7icX7UmLiOTUTrijVLdUQ1Q","tlshash":"31923b6c3a81f536b6b251b123ff06437234265af9024051fc29e0dc6af8c47b757b9a","first_seen":"2026-04-02T11:36:30.123145Z","last_seen":"2026-04-10T21:51:46.149748Z","times_seen":111,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":829,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6564-6433-4961-a531-653732333365/-/resizeb/20x/photo.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6564-6433-4961-a531-653732333365/-/resizeb/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-27, or-27\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-13T12:36:03+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc34, m9-up-gc82\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced","md5":"f80c048d150cf71d2fef9d8a3ef26b18","sha1":"8b1573f9a45f4b3be58e61c6c1111981457037ee","sha256":"0decb2ac22c4e6207aa3e44dd6093afa4c371c4ea3926f455881a055dfde8e81","sha512":"06476467e2f0d3f017f6094963a766b5c21e61e66826235dd2b22e7cf0a20a12ab0c9fb0d373d51f98d87611146a2b4098e100f51605e07ef7c0ba4f0852f944","ssdeep":"","tlshash":"4d21ba5de2d4547fe4db7570c44b4fdde674a7e01904cd52a31d44402da34c433abb85","first_seen":"2026-04-10T18:39:51.862299Z","last_seen":"2026-04-10T18:39:51.862299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-KXHV4K5S3C\u0026gtm=45je6481v9136843635za20g\u0026_p=1775846339121\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=EAAIAGQ\u0026_ng=1\u0026cid=1912760000.1775846342\u0026frm=0\u0026ir=1\u0026ni=1\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=0~115938466~115938469~118289195\u0026sid=1775846341\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Floffi.ru%2F\u0026dt=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026en=Bot%20scenario%20shown\u0026_ee=1\u0026ep.event_category=Chatra\u0026tfd=15655","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:13.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-KXHV4K5S3C\u0026gtm=45je6481v9136843635za20g\u0026_p=1775846339121\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=EAAIAGQ\u0026_ng=1\u0026cid=1912760000.1775846342\u0026frm=0\u0026ir=1\u0026ni=1\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=2\u0026tag_exp=0~115938466~115938469~118289195\u0026sid=1775846341\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Floffi.ru%2F\u0026dt=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026en=Bot%20scenario%20shown\u0026_ee=1\u0026ep.event_category=Chatra\u0026tfd=15655 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nOrigin: https://loffi.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://loffi.ru\r\ndate: Fri, 10 Apr 2026 18:39:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:195:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:195:0\r\nreport-to: {\"group\":\"ascnsrsggc:195:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:195:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T21:55:55.590885Z","times_seen":13595044,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/jquery-1.10.2.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/jquery-1.10.2.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Mar 2021 12:08:37 GMT\r\netag: W/\"605342c5-16b88\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-28\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2025-12-10T19:55:19+00:00, 2026-03-04T23:34:12+00:00\r\nx-node: m9p-up-gc10, m9-up-gc28\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93064,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"bdce12c949e78d570c8d44e9c2b23508","sha1":"9afdc4fec954646bd6270caf82f107fdef605bc5","sha256":"c73b004ebf31b395cf237c3d2b13c1e576f385e04660ceb5f7be163ff3c201dc","sha512":"b96588d93fb86228ecc8f501bee6db5f199b20b086fc88c683bbe1feb6c343dec3f99467e1d3140b7f4731d07adf2f918f0ca88bb257d10b5ab8879ff9ce8ed3","ssdeep":"1536:34mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:3GsKXlI2p0WPSbDrstfam","tlshash":"f193f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T12:27:49Z","last_seen":"2026-04-10T20:39:17.862886Z","times_seen":4204,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":833,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/css/tilda-menusub-1.0.min.css","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /css/tilda-menusub-1.0.min.css HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 16 Mar 2026 11:48:40 GMT\r\netag: W/\"69b7ee18-1398\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-16T12:02:21+00:00, 2026-03-16T12:10:02+00:00\r\nx-node: m9-up-gc37, m9-up-gc70\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5016), with no line terminators","md5":"606fdab53e6922b7ed9d0e820260b9bd","sha1":"c6614c6929772c822ed1ccf219c64b1f4b79cd89","sha256":"b59499893893f4417363b001637b0bec163a9210fd0d57991eec5f935a71474d","sha512":"0f32746331585f1c7a54cd7c22282532abb1fedb8e701496f7e4266e74d84cb8de7a65b79ce43f2ed63c0e973e86557345a4e2d7bcc1853a1c801da20885ac5a","ssdeep":"96:m0Dks61nRsFu1/klqZBLph1pGux1PA+Ti2pRen7sf:32N68KlqZBLph1pdnTi2pRen7sf","tlshash":"f8a1ddb1b4c0170d8d37c63012d0deae5338c23c6f27be8e5565eb35ae8668db5e6146","first_seen":"2026-03-18T22:37:15.366022Z","last_seen":"2026-04-10T20:39:17.963333Z","times_seen":48,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6132-3139-4664-a164-366537633834/-/resizeb/20x/IMG_4225-29-03-19-07.JPG","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6132-3139-4664-a164-366537633834/-/resizeb/20x/IMG_4225-29-03-19-07.JPG HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/jpeg\r\nx-tilda-origin: or-23, or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:28+00:00\r\nx-node: m9p-up-gc152, m9-up-gc233\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 20x13, components 3","md5":"3a33c45763caed105dab46fbfd8314bd","sha1":"0308f594dab95c0ea2b7a0dd2d7d18fc85b12446","sha256":"51fa8136b76d30247845f2065defea38ff2dc8f84d060c08ffe875a7f98148c6","sha512":"c0a072900fa06df5af76eff18a9372d6e6d18892e2672854805b33ed15d00e4ff4c967cc1fdd24dedd8487c24806a3836220b125dfc3ddd0d5817759c83adb41","ssdeep":"","tlshash":"3381097aaf679352ef32d67c68e22be1b2d27625f7207671253487254540cf09e8d0cd","first_seen":"2026-04-10T18:39:51.864685Z","last_seen":"2026-04-10T18:39:51.864685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3866-3635-4938-b035-346135386465/-/resizeb/20x/_.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3866-3635-4938-b035-346135386465/-/resizeb/20x/_.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-28, or-28\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9p-up-gc10, m9-up-gc41\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced","md5":"6dadc8a7751360672b4e677799dcdd3d","sha1":"ecc222f2b4978487096d27f3d658e63e4c745db4","sha256":"a78d43559fd0dfc18bb7c7eae0dbb3cd72d5a20dd0601df7f588dc5c18833d19","sha512":"1dc24ac4ab1b4dfdb6791bbbbd0c5e3f62a882601747fc16614d6e31b76e9381a5f09f5a86d771f3459a7a1e5018b94190699d60904eda489cb958a17bf2b793","ssdeep":"","tlshash":"a021e7d73f152eb2c27d70bb040a2bace149465014018c0fe37888794d83c6e18edafb","first_seen":"2026-04-10T18:39:51.866005Z","last_seen":"2026-04-10T18:39:51.866005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.chatra.io/jscss/d32b58a3b67f08aa98ba1c09d3f99ee31ebcc455.css?meteor_css_resource=true","fqdn":"static.chatra.io","domain":"chatra.io","tld":"io"},"ip":{"addr":"104.20.38.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat.chatra.io/?isModern=true#hostId=o2LmJC48Nep9XcMbL\u0026mode=widget\u0026clientId=ussHkNBXMDDCdJU3JBpSTFxiHcmPWPovoMbw5ULP\u0026lang=en\u0026currentPage=https%3A%2F%2Floffi.ru%2F\u0026currentPageTitle=%D0%9A%D0%BE%D1%80%D0%BF%D1%83%D1%81%D0%BD%D0%B0%D1%8F%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D1%8C%20%D0%B8%20%D0%BF%D0%B5%D1%80%D0%B5%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%BA%D0%B8%20%D0%BB%D0%BE%D1%84%D1%82%20%D0%BE%D1%82%20LOFFI%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%BC%D0%B5%D0%B1%D0%B5%D0%BB%D0%B8\u0026prevPage=\u0026referrer=","date":"2026-04-10T18:39:00.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 08:59:49 GMT","end":"Sat, 23 May 2026 09:59:32 GMT"},"fingerprint":{"sha1":"A8:B8:16:7A:65:32:2F:A3:EC:CD:15:F0:BF:45:9C:BB:0D:03:8F:7A","sha256":"CD:5F:68:C8:86:1D:77:52:E4:5B:49:F7:C0:AA:48:2D:AB:D3:4A:27:7B:25:FC:13:15:A7:F4:2D:D7:20:54:06"}}},"request":{"raw":"GET /jscss/d32b58a3b67f08aa98ba1c09d3f99ee31ebcc455.css?meteor_css_resource=true HTTP/1.1\r\nHost: static.chatra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat.chatra.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=UTF-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ndate: Fri, 10 Apr 2026 18:39:00 GMT\r\nlast-modified: Wed, 04 Jun 2025 09:40:53 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\netag: W/\"d867c40261fe20ff42639d8ca5bfb8a1\"\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: KznxQtaRFrOhZuhlI-f07OV9qGpe8cCWi8z6mwTk4l53Pe2SMmptyA==\r\nage: 219100\r\ncf-ray: 9ea3df2cff8a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":83093,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d867c40261fe20ff42639d8ca5bfb8a1","sha1":"34467314134437d8f0206bc4c8ad53dbdce40595","sha256":"cea60a8ca9cb21a34761c3278ff97d77d9939689122a0e15245977259f24c128","sha512":"50f3e76c6a743fb253dbecd7aacab0f65de20e6492d779beda710ef0d7c7406fe7e6e27f3d04b9b6859eec043a553d63dc5757bb9d58dc407161a809ce01bd53","ssdeep":"1536:dhs8+jhTkeW/J+XrvUPxPib/nq0GeZF6ody:dhs8+jhVQ","tlshash":"1e839473c24026587027cf2a66c4a654573dc663a5331bffb711792acb8369e2267f0b","first_seen":"2025-06-04T12:16:14.025838Z","last_seen":"2026-04-10T18:39:51.867314Z","times_seen":994,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3365-3361-4133-a138-663931396365/__1.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3365-3361-4133-a138-663931396365/__1.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"e7f4885ff50183c815dd41f469a9c91f\"\r\nlast-modified: Thu, 02 Apr 2026 18:11:07 GMT\r\nage: 0\r\nx-tilda-origin: or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9-up-gc47, m9-up-gc28\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7f4885ff50183c815dd41f469a9c91f","sha1":"11edd194b325eb92dcff7ff6f98884eddbe6632b","sha256":"95acec106959fcbd0f59d56f6117e2aacff4965822d02f03b10a32bc504467fa","sha512":"b1e7d610930be450fe5ee142cf094555393530d83cdc16c2c8eb83c008c390f33e94e8edd57660fe320b0acbe4eb31dbec0ad1c987f6e78ebe5a2a785895f606","ssdeep":"","tlshash":"df110059539b243ada064e9cc370c08171f7f01fc75a20cc8ae72b174f198f2985067d","first_seen":"2026-04-10T18:39:51.867954Z","last_seen":"2026-04-10T18:39:51.867954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optim.tildacdn.com/tild6132-3139-4664-a164-366537633834/-/cover/432x384/center/center/-/format/webp/IMG_4225-29-03-19-07.JPG.webp","fqdn":"optim.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6132-3139-4664-a164-366537633834/-/cover/432x384/center/center/-/format/webp/IMG_4225-29-03-19-07.JPG.webp HTTP/1.1\r\nHost: optim.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30066\r\nlast-modified: Tue, 31 Mar 2026 03:03:39 GMT\r\netag: \"69cb398b-7572\"\r\ncache-control: public, max-age=10368000\r\naccess-control-allow-origin: *\r\ncache: MISS, HIT\r\nx-cached-since: 2026-04-05T03:43:19+00:00\r\nx-node: m9-up-gc35, m9-up-gc88\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"580693c7ee2cd618f91d1352951691f6","sha1":"098aaf10c3da608104c7244bbafea86292ddef90","sha256":"1f7ee1849dd0a4f06791d56a65c20352dfde7fcebdd4f50e5d52adaec1ed86e4","sha512":"9c39b53df7489b21b4a2010bd985e280ae0b6f0d0e11ad95872b5da50c9b33c6561246b4158d4b1201c77b275248938df894b39fe2ee9ca2d596626068b2a1d4","ssdeep":"384:4YNg7Ly1F+QlrPhD2SjoQ5D3DaM4PhG0Dq5T4EaNb6hTSl9ShYmhrgTKBG04Hkx8:4YyqFNF9DexPyl4EK6h8+hrgTKBGLkvU","tlshash":"d8d2e13c42c7576dde79e2fc30967bf66093b3ae83acca511259f81921d9ec2251f128","first_seen":"2026-04-10T18:39:51.869156Z","last_seen":"2026-04-10T18:39:51.869156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3966-3462-4563-b235-333731376634/-/resize/20x/arrow_white.gif","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3966-3462-4563-b235-333731376634/-/resize/20x/arrow_white.gif HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/gif\r\nx-tilda-origin: or-24, or-24\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-02-06T09:14:18+00:00, 2026-02-07T07:03:40+00:00\r\nx-node: m9-up-gc66, m9-up-gc228\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 20 x 18","md5":"98dd601ffd2a13dc047774ff3004fd2b","sha1":"bca2f0bf8d286f61a409de6a57c8e6bd1046cf57","sha256":"dd7613227bf3c2935e02ebf3f9ed115ded7a62e4a876c57c5ee360372c853fdd","sha512":"3df0b848d9db77fc91137e23a3c98826ebfb56454af26c857a52c061da441955b661b71bfb4e409943edb96a233c384219ed9a7a143a568214122ee8839d1720","ssdeep":"","tlshash":"dab01257f084140fe8d103b9ca0fac8da20032708b17080f341c500c164913f4545302","first_seen":"2025-06-19T20:33:56.843197Z","last_seen":"2026-04-10T18:39:51.870915Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":1022,"dns":0,"connect":109,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3430-3739-4233-b635-303063633766/Group_58.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3430-3739-4233-b635-303063633766/Group_58.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"2255b6a8939d4dd75bf75bc1d7e416a9\"\r\nlast-modified: Wed, 10 Mar 2021 20:14:47 GMT\r\nage: 0\r\nt-server: or-9\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: BYPASS, HIT\r\nx-cached-since: 2025-07-01T15:39:41+00:00, 2026-03-01T17:15:37+00:00\r\nx-node: m9p-up-gc23, m9-up-gc97\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14093,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2255b6a8939d4dd75bf75bc1d7e416a9","sha1":"91608f41b0bcec582aa19595c79032e8fb10284b","sha256":"3fcee3ac8fdc5e784941dddf3a67645a04073155c80d59cbb4948ef3455c2737","sha512":"2ffa80ec393151129a4d32a612fa6781d1f63b18392245f8924c3f6cbb1ee61c5661370f4a48836341e727b535a32ba8a7899b451e8d9cb8dd61af3a4739a4ac","ssdeep":"192:VjXfLcxNUl6MfSrxJyUo5LOGL5wot32lwqUXMmudTjq2U0l/P+CY9HWskw42TemL:VjTQCMJHa6PUuRqtCYWaFeU","tlshash":"e552c7fd2b6496e9ec89e3ebfb160055790ad0fbab848568c7181f4a304249d5e54ec3","first_seen":"2026-04-10T18:39:51.871606Z","last_seen":"2026-04-10T18:39:51.871606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":795,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild3866-3263-4333-b235-386161336337/-/resizeb/20x/photo.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3866-3263-4333-b235-386161336337/-/resizeb/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-23, or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:38+00:00\r\nx-node: m9-up-gc47, m9-up-gc234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 15, 8-bit/color RGB, non-interlaced","md5":"b9a26a360b593c38ccd555d99b5d3c9b","sha1":"880646515f857231c66887f96112eb3c01f5b9d5","sha256":"5b37d251d569d37176f8a108b3b22bb54febfbc0ab1bdf10064deba0f39d1e19","sha512":"6ae0f6893267481b6bee1cf9d8315ea2b48e258a3eeef23e7bf3860d0a2032ed01b31544133c6cd6442927d3b86f62eea3824d0aa78b2f929e45cac91ba95984","ssdeep":"","tlshash":"682166cbe3464930ded2153a4755638552d3e138150060db43dc55241c9ed8ab7dc9c3","first_seen":"2026-04-10T18:39:51.872974Z","last_seen":"2026-04-10T18:39:51.872974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thb.tildacdn.com/tild6361-6632-4337-a662-363665313033/-/resizeb/20x/photo.png","fqdn":"thb.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6361-6632-4337-a662-363665313033/-/resizeb/20x/photo.png HTTP/1.1\r\nHost: thb.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/png\r\nx-tilda-origin: or-23, or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Sun, 10 May 2026 18:38:59 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-09T15:48:10+00:00, 2026-04-10T03:42:39+00:00\r\nx-node: m9p-up-gc152, m9-up-gc72\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGB, non-interlaced","md5":"5f0f4f5eeb739ac31ec9ec6f26d5ef20","sha1":"d2569acf4c4e9459bf5197737022e14a6ee08283","sha256":"c1480501db379155e28b3f644b992b88803936bfeb72e0005787b4d98f48d5a7","sha512":"eb99ee0abccc25686b0ff14174240fccecdbe509d9f69adee709acd8c6bd4a7a0d4d0cb843b31f15311138446e9fbf0834f216a3249c28a6816e5ac743eb68ef","ssdeep":"","tlshash":"4621c8f685c57e7ac00a753c4d5ff74dec761b85b28405610347586a7c46819fe8bce1","first_seen":"2026-04-10T18:39:51.874257Z","last_seen":"2026-04-10T18:39:51.874257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild6261-3631-4138-a365-343237633730/1.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6261-3631-4138-a365-343237633730/1.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"42f8512588367fa39c11270746098708\"\r\nlast-modified: Mon, 30 May 2022 09:27:13 GMT\r\nage: 0\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9p-up-gc152, m9-up-gc90\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42f8512588367fa39c11270746098708","sha1":"e0a282161ccb73fea14613513953229ebab5a8a2","sha256":"56b6c347cf0eff90cfd3369b6279b49d90f2d091ba52f792b916c0e571f13228","sha512":"88c31201345f0d8ec07d3b80ddfea7da4efeb420799963fdfe8137c8b49641dc7456a7df92cc8f614e7d8e50411347ca2c44f2f5e0dcc37e7df525a267e025c0","ssdeep":"","tlshash":"6f6175dc3b755ec84accdbce3f1145fd1e538176c9c4899ae04d8f8a9482a5c7986e13","first_seen":"2026-04-10T18:39:51.875564Z","last_seen":"2026-04-10T18:39:51.875564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static3.tildacdn.com/tild3330-3962-4737-a532-663732363663/logo___33.svg","fqdn":"static3.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"159.69.130.130","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:03.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3330-3962-4737-a532-663732363663/logo___33.svg HTTP/1.1\r\nHost: static3.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:03 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1303\r\nx-amz-id-2: Ypb55mKeo54PWUUuN3sSMK1+igIFL9ddtJZS/aykAqXm3AuPmk2HvMrwk+wu057Hu7SWqJUvTQE=\r\nx-amz-request-id: RBN3Z9YWR4KCXSMB\r\nlast-modified: Wed, 25 May 2022 15:00:57 GMT\r\netag: \"5ee588af71f3fb31756ccd6b67398a78\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-tilda-origin: or-32\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ee588af71f3fb31756ccd6b67398a78","sha1":"3b3a2a8611714ef5fe43f0321fb6189aee515077","sha256":"84ed3393a7aad2bf65b64fc3879eb75c0f1481aaf2833a918a3425c6261b4077","sha512":"407a1ca1e61cd55ab85694ac4ae084141447990a4dc5bab716911699ec86833de73f003fe8a5e3704b8ffe66b75bb1608cae33757615636201180c98799abca6","ssdeep":"","tlshash":"3a21327d53416bf5c9894b8c4359980936e021cbfb6811ecc3ffb6a58d16cfb09b1985","first_seen":"2026-04-10T18:39:51.733771Z","last_seen":"2026-04-10T18:39:51.733771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":98,"dns":11,"connect":41,"send":0,"wait":64,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-scripts-3.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-scripts-3.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 30 Mar 2026 13:56:55 GMT\r\netag: W/\"69ca8127-5934\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\nx-tilda-origin: or-21\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-31T09:07:21+00:00, 2026-03-31T09:07:21+00:00\r\nx-node: m9-up-gc66, m9-up-gc8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22836,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22814)","md5":"bc9aeb2337044ad6af8c59a6c025ff59","sha1":"b603ac94bc70707060e4b5fa10a38582a7dedb96","sha256":"0567d6ceba709b26ba60648561dad1121b451a0ccd6809a1bd9da6793fc8b945","sha512":"9270d73399e2fa3f5f2eb4deeae3956d8838085c17335d6294f82442d6374a1688f05d2ac6e7a9b7c5b061d1f7319605629695ce79309a5813b71187c5b6f53e","ssdeep":"384:4N+t+WCz/Ip+uJkU2p6o8VYk5qSzJp2T7uj8n+zav0oezfllh/RMokdDiUy/p9Kq:xthCz/Iouwp6o8Ck5qSzJM3uj8n+Ov0L","tlshash":"c1a2c8387744383701ab1aabb7bab38835306619ab038440f11ddda4b99cec76917fd9","first_seen":"2026-03-31T09:06:35.109711Z","last_seen":"2026-04-10T21:51:46.120071Z","times_seen":145,"resource_available":true,"data":null}},"time_used":945,"timings":{"blocked":832,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/ws/project3267520/tilda-blocks-page27921274.min.js?t=1775157563","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /ws/project3267520/tilda-blocks-page27921274.min.js?t=1775157563 HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 19:19:24 GMT\r\nx-host: ws.tildacdn.com\r\nx-tilda-origin: or-25\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nx-cached-since: 2026-04-10T11:38:59+00:00\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:58 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, MISS\r\nx-node: m9-up-gc47, m9-up-gc72\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50744,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2435)","md5":"2decbc547ff43c696e64a33356abf470","sha1":"99d1a42bdabf586cd97819b42f95a818fe251bbf","sha256":"ad971ab2ff72a55872568c94db4ae263770cfc7584df6ac92ce7ceb07646e3ba","sha512":"0d70af09a25d193210e61c8d8f226315e6897d5467934eff9d09d66515fde28d1d874616db75454cdf6049ffdce827313c077140cfcbaf0a1febd5e94e4ad62f","ssdeep":"1536:djJOyNQnzkJQlzcplEIE0xirfUXVRK97PF9:5YyNQn4Mz4PtPK97P/","tlshash":"1533c9f939102072c4ef5677d15f2bc5b6311292bc064ca0945acdfc9db49c25fe2aae","first_seen":"2026-04-10T18:39:51.877473Z","last_seen":"2026-04-10T18:39:51.877473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":969,"timings":{"blocked":830,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/js/tilda-menusub-1.0.min.js","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-menusub-1.0.min.js HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nlast-modified: Mon, 30 Mar 2026 13:56:55 GMT\r\netag: W/\"69ca8127-9e8e\"\r\nx-tilda-front: fr-1\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Accept,X-Requested-With,X-File-Name,X-Mime-Type,Content-Type,Cache-Control,Origin\r\ncontent-encoding: gzip\r\nx-tilda-origin: or-23\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-31T09:07:21+00:00, 2026-03-31T09:07:21+00:00\r\nx-node: m9p-up-gc23, m9-up-gc8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40590,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (40589)","md5":"0b4adc18c70ebdd5d472cbda4500519a","sha1":"a5f008fc94d4d03ff35b437b6d915aeeb6fa87dd","sha256":"41e216740d395d4e207e384ee4e1379897e22846f7ced58f80581b336f4d76b0","sha512":"c1c5cb62ba99c7261b2ec6d0f7d65a0d1681ce3252ea23c8bbf1a521d01032009ce49112c7fc882ce05299254d1b0c1187c231101025f391f0303f3a0d9e4699","ssdeep":"768:tagp0hWDBkkGmDu2zASyrr01gk7wIRiyMDTfo3zRqDp2hxL6RHVXNLr1YlX9Zjq0:tayLyEpxx3SVXNLpKjjku","tlshash":"b20363d87944663245e35e79a1dfec8b5330d17d8c09e8001879cbe92df888f72d6a9a","first_seen":"2026-03-31T15:40:14.446215Z","last_seen":"2026-04-10T18:39:51.878603Z","times_seen":23,"resource_available":true,"data":null}},"time_used":1051,"timings":{"blocked":819,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild6532-6234-4130-b863-663865353361/logo___33.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:58.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild6532-6234-4130-b863-663865353361/logo___33.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"5ee588af71f3fb31756ccd6b67398a78\"\r\nlast-modified: Wed, 25 May 2022 14:03:37 GMT\r\nage: 0\r\nx-tilda-origin: or-22\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:38:59 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-03-31T20:04:35+00:00, 2026-04-01T20:17:19+00:00\r\nx-node: m9-up-gc45, m9-up-gc230\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ee588af71f3fb31756ccd6b67398a78","sha1":"3b3a2a8611714ef5fe43f0321fb6189aee515077","sha256":"84ed3393a7aad2bf65b64fc3879eb75c0f1481aaf2833a918a3425c6261b4077","sha512":"407a1ca1e61cd55ab85694ac4ae084141447990a4dc5bab716911699ec86833de73f003fe8a5e3704b8ffe66b75bb1608cae33757615636201180c98799abca6","ssdeep":"","tlshash":"3a21327d53416bf5c9894b8c4359980936e021cbfb6811ecc3ffb6a58d16cfb09b1985","first_seen":"2026-04-10T18:39:51.733771Z","last_seen":"2026-04-10T18:39:51.733771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":804,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loffi.ru/","fqdn":"loffi.ru","domain":"loffi.ru","tld":"ru"},"ip":{"addr":"185.215.4.51","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:59.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loffi.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 01:13:14 GMT","end":"Wed, 17 Jun 2026 01:13:13 GMT"},"fingerprint":{"sha1":"93:95:95:52:C4:6C:BF:EF:D7:9A:2B:11:D2:33:8C:A7:06:C2:D6:F1","sha256":"CD:F6:A5:67:9C:63:A9:53:94:84:C2:87:1D:12:A2:36:D9:DD:15:D4:15:4C:4E:64:41:84:09:DD:AA:83:FD:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loffi.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loffi.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=DvUPUgKOzWvDzke3; __ddg10_=1775846339; __ddg9_=91.90.42.154; __ddg1_=oVozl0QfgYyPaSD0L0RX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=a07L1vz64yZzuqcR; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg10_=1775846339; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\n__ddg9_=91.90.42.154; Domain=.loffi.ru; Path=/; Expires=Fri, 10-Apr-2026 18:58:59 GMT\r\ndate: Fri, 10 Apr 2026 18:38:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlast-modified: Thu, 02 Apr 2026 19:19:23 GMT\r\netag: \"14dd50-64e7f14051613-gzip\"\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-host: loffi.ru\r\nx-tilda-server: 31\r\nx-tilda-imprint: 54f0f940-2d1e-4a16-8c6f-e37a58d6c67f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tilda","description":"Tilda is a web design tool.","website":"https://tilda.cc","common_platform_enumeration":"","icon":"Tilda.svg","categories":["CMS"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":1367376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27986)","md5":"4bf73523ffaa8dc748ce11895d91a2df","sha1":"ac0d21e5f36e2e9076887f38d0d11728decb4a2c","sha256":"281616b0acd24f564fa8cd768267c69e3656087d18e833004a4d9b33bacc9981","sha512":"efcf73457081c77af11a362e61f1b9396340053cfdf69928d7e1f3605890f5047d5d9ad0d3cfaf4450ee03c11ac6004de45f08cafcd434af206d9b9fd637ef89","ssdeep":"12288:qXcLUmyjfCpxobdQV/8/iaInULyHWVaDgJ0GkPtNMdK7oGlDarCGgJzfbXftILXM:asX","tlshash":"3b2551a0b24104379403b1df13bfc924375a7b82ef0723f4fae80a6d5ada9a55da7d50","first_seen":"2026-04-10T18:39:51.731756Z","last_seen":"2026-04-10T18:39:51.731756Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru/Loffi/%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D1%8B/rogov","fqdn":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","domain":"selstorage.ru","tld":"ru"},"ip":{"addr":"92.53.68.17","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:01.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.selstorage.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Feb 2026 09:54:17 GMT","end":"Sat, 20 Mar 2027 09:54:16 GMT"},"fingerprint":{"sha1":"91:CE:72:30:AF:14:D4:91:E5:63:09:59:DB:D1:4F:93:05:FF:69:2F","sha256":"EA:15:8E:C4:91:84:B1:80:96:B0:F1:3B:83:6C:3B:6C:DC:0B:37:B5:DA:70:3A:56:77:EC:46:10:48:40:2D:C4"}}},"request":{"raw":"GET /Loffi/%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D1%8B/rogov HTTP/1.1\r\nHost: 814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\ncontent-length: 25448421\r\ncontent-type: video/mp4\r\netag: \"63de93973c3514e11a0dc82c60bf2db1\"\r\nlast-modified: Wed, 07 Aug 2024 08:51:20 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\ndate: Fri, 10 Apr 2026 17:46:00 GMT\r\nage: 3182\r\ncontent-range: bytes 0-25448420/25448421\r\naccess-control-expose-headers: Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":408181,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"95ac36f3239679e4dc6a75238a1418f6","sha1":"6c5e4b1a22563d8b3950828d1ec425c5a83dfca8","sha256":"8d72b44fc0381d881c1341671765cbe8222ce748b7a6e7fe5e694322afe7001a","sha512":"e9093596bd00deadc06a79c877e6f7a13b6abe8c9b0504e1c96c037e61c874d6420124fa5c5c99b6a4d336c787c0fb60ed0882e9bb6c982e709f19f868527d7e","ssdeep":"6144:opLKWpaOpiRb/414JbL3fbsmMIJ54UZ9AXG981M6neOUoL93cR1TFuCR:vbbg14Jb/sA4e9AG81egp3KTU4","tlshash":"ec9423da3b9d91f7ce1162f2215a3e28195070dbf8936e019771482d29bf4025dec7ee","first_seen":"2026-04-10T18:39:51.879277Z","last_seen":"2026-04-10T18:39:51.879277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":220,"dns":79,"connect":23,"send":0,"wait":76,"receive":38,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neo.tildacdn.com/js/tilda-fallback-1.0.min.js","fqdn":"neo.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"194.48.203.181","port":443,"asn":0,"as":"","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loffi.ru/","date":"2026-04-10T18:38:57.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /js/tilda-fallback-1.0.min.js HTTP/1.1\r\nHost: neo.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 18:38:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Apr 2025 10:43:25 GMT\r\netag: W/\"6811fecd-77e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Apr 2026 18:38:58 GMT\r\ncache-control: max-age=604800\r\nx-tilda-server: 5\r\nx-tilda-imprint: 11f37905-179f-458e-9875-151b5bbdbd30\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1918,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1918), with no line terminators","md5":"8e582042c3e2c49a8f2c1aaf96c70da0","sha1":"d72ccdcc11d24594480a4ca8b699c029a8e0765c","sha256":"cdf65e26b905a653bce60df182886b032b606940391badb1e3a655f434ca446c","sha512":"b289159bb4cd83316ce8a9a9e0e53a845065454ac847e54fcddecbdb201ee84c0a4623c5288680e472e5c47bb4ef5852b399df43786a1e745f4165d99a6b0644","ssdeep":"","tlshash":"c741cc70a51fdc324e2393ab94bbf71734b901066d0bd1c22aa9dfdc9c62c8a5355b4e","first_seen":"2023-03-07T18:27:23Z","last_seen":"2026-04-10T20:39:17.972653Z","times_seen":3929,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":243,"dns":28,"connect":51,"send":0,"wait":51,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru/Loffi/%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D1%8B/rogov","fqdn":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","domain":"selstorage.ru","tld":"ru"},"ip":{"addr":"92.53.68.17","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.selstorage.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Feb 2026 09:54:17 GMT","end":"Sat, 20 Mar 2027 09:54:16 GMT"},"fingerprint":{"sha1":"91:CE:72:30:AF:14:D4:91:E5:63:09:59:DB:D1:4F:93:05:FF:69:2F","sha256":"EA:15:8E:C4:91:84:B1:80:96:B0:F1:3B:83:6C:3B:6C:DC:0B:37:B5:DA:70:3A:56:77:EC:46:10:48:40:2D:C4"}}},"request":{"raw":"GET /Loffi/%D0%9F%D1%80%D0%BE%D0%B5%D0%BA%D1%82%D1%8B/rogov HTTP/1.1\r\nHost: 814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=25165824-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\ncontent-length: 282597\r\ncontent-type: video/mp4\r\netag: \"63de93973c3514e11a0dc82c60bf2db1\"\r\nlast-modified: Wed, 07 Aug 2024 08:51:20 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-container-storage-policy-index: 0\r\nx-container-storage-policy-name: Policy-0\r\ndate: Fri, 10 Apr 2026 17:46:00 GMT\r\nage: 3182\r\ncontent-range: bytes 25165824-25448420/25448421\r\naccess-control-expose-headers: Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":282597,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"667a43d013e6ed0f568454b6b39342c5","sha1":"8df2d8e40e84b9605e76daae9ffce8abc040bfc7","sha256":"8c03649d6a82bf6a40dbb436f683da2a78554516a0c425f7e5d88b7e8e52659e","sha512":"d3e6ec9d474205916f602d30819b1c80d604dcf89faacaf1f0f53f2296f32c20a81e3027a1b9622ab86b7370aeedcc79004be6e1e9f2b739a856322c0aa9d748","ssdeep":"6144:lGIOGbTE/3M1MjSceH17nv5JqiEY78c8Ywnzd:k1GWM6eceV7RMTc8Y2","tlshash":"b45480a4f335111be5a3273c99c3072036b4e5982347834b93b0f73aac653ed9e865e6","first_seen":"2026-04-10T18:39:51.881375Z","last_seen":"2026-04-10T18:39:51.881375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"814a662a-3f3e-489e-8c6f-00f8a6ed1818.selstorage.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.tildacdn.com/tild3735-3666-4331-a561-333661306465/Vector.svg","fqdn":"static.tildacdn.com","domain":"tildacdn.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loffi.ru/","date":"2026-04-10T18:39:02.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tildacdn.com","organization":""},"issuer":{"commonName":"GlobeSSL DV CA","organization":"CentralNic Luxembourg Sàrl"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Sat, 20 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:6F:B5:96:E2:36:65:FE:13:E9:4D:8B:A3:FA:0B:53:A6:95:4D:EA","sha256":"07:14:4E:62:F1:DF:1C:54:FC:C2:84:2A:7F:F4:9C:8C:93:51:8B:FD:44:C4:9E:E6:85:88:30:AD:E7:42:2C:55"}}},"request":{"raw":"GET /tild3735-3666-4331-a561-333661306465/Vector.svg HTTP/1.1\r\nHost: static.tildacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loffi.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 18:39:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"a3222f8aa31412a57b55d1026fd3f428\"\r\nlast-modified: Fri, 27 May 2022 08:39:56 GMT\r\nage: 0\r\nx-tilda-origin: or-28\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\ncontent-encoding: br\r\nexpires: Tue, 09 Jun 2026 18:39:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\ncache: HIT, HIT\r\nx-cached-since: 2026-04-03T16:10:11+00:00, 2026-04-05T12:09:46+00:00\r\nx-node: m9-up-gc45, m9-up-gc10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3222f8aa31412a57b55d1026fd3f428","sha1":"3a057c878f9b41f9e3a6a6ca1884e8e54e58d441","sha256":"1870da6371ac601ef2f95bde5b4e95b0cd7be9a10ef373ba1ddcea07d37b0ef8","sha512":"55e3d706c002f9e3969c7155909edf79ae0006b590a982748bb526820486877719334f4afe0e51e3bb95f05b2d33cf08979418acd092e66bb79a92b32265d910","ssdeep":"","tlshash":"c0d02248800cad98c68887348ffee53077b690dda0c008c8ead15e51f1008caae6daec","first_seen":"2026-04-10T18:39:51.882731Z","last_seen":"2026-04-10T18:39:51.882731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}