{"report_id":"1ba44841-192a-444a-93a1-1ca6af6bb13e","version":6,"status":"done","tags":[],"date":"2026-02-27T18:34:43Z","url":{"schema":"http","addr":"limonnoederevo.ru","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"limonnoederevo.ru/","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"title":"limonnoederevo.ru/","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"limonnoederevo.ru","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T18:34:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"limonnoederevo.ru","ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-02-24","domain_rank":0,"first_seen":"2026-02-27T18:34:43.465744Z","last_seen":"2026-02-27T18:34:43.465744Z","alert_count":20,"request_count":20,"received_data":874114,"sent_data":11825,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc","ip":{"addr":"104.21.17.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-27","domain_rank":0,"first_seen":"2026-02-25T00:54:55.480171Z","last_seen":"2026-02-25T00:54:55.480171Z","alert_count":0,"request_count":1,"received_data":1622,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"limonnoederevo.ru/","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"85ba05c43b1f346843cca81452c3dd6b","sha1":"7d7d74314676e14ef4fccbfd4b150a24f7e7929d","sha256":"929150efe155fb818bb88de7500597fdfe15405ec7ec8ed4696f6d944433e26a","sha512":"5a64bf0718cbd08a75528c194d2a7541c01bd5b2866c10de29bd33d240417a4792568886d72654a5678b34f631fda8b38c01109fddb19f3ebbd4ae55b22e7b92","ssdeep":"","tlshash":"3af005953ced44288377016527fb9248b43965292c0afd15f54cc4412f59eac14ff54c","size":538,"data":"","first_seen":"2026-02-27T18:34:46.849219Z","last_seen":"2026-02-27T19:05:32.59283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebdb6da2c5b8bbe3f6ba066ba975895b","sha1":"a9b8dfc03f2451b67a35e46705ef80d07d7a120c","sha256":"1c40d9038ba32e18774f2dcb68a01bfb378e89f069d53b8d43fbb579e8f45ed6","sha512":"91d744f19ac9692aedc821a19042a43fdf9a9891afb9c86b2d91a979145e41b7b1446808a7f2cb0d1e384a4ece85120c69ff812282377a1d4b4377c622ee19bb","ssdeep":"","tlshash":"58600033300c0003cc0c0c0300c00c0000c0003c000ccc303000f00c0f0000fc30c3c0","size":15,"data":"","first_seen":"2025-11-07T18:36:06.466308Z","last_seen":"2026-03-19T12:19:34.895414Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d76434440217651dbfe53beeb2be350","sha1":"fddcc91b4ad719494a039ae028a7760024d9fdbd","sha256":"b02eac6ed7442daddbe9d8358341d39a4a5042c30cc9af42b253ce4db78fedbf","sha512":"0fcfc094c4a9d99329dad04bd28d5d05806fbc95f91aefd960d02a57767bab11eddc7c8eb9a0041983beae313bf4137cf396cb1dc4701a0864b5108ff1e41e51","ssdeep":"","tlshash":"e111d4b9724474616e96a069576bd08ddabf23120cde4d1049036a948b34b2acfd5e68","size":939,"data":"","first_seen":"2026-02-25T00:54:58.632673Z","last_seen":"2026-03-19T12:19:34.896201Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/34293926731_blacksprut-darkmarket.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/34293926731_blacksprut-darkmarket.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kK1evYwDtlCMusRr; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/184583120\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":48170,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"85a1d9a9a1c735554259f455d63c6389","sha1":"c779a631431dbcaca53eb27926db3684c6059dc5","sha256":"add1e0f5579c8075a7d00b206975fcb61cf1b578a4f72f0eff50451bcd6cca8e","sha512":"86486be0e7221bc7e84964cb4b8c275a83275fffb5de626d56edf8dd96f929434632137507224459dfadb778e71128f873ea6c1cccddfc6daae6be9024090522","ssdeep":"768:SBHbykDUvztoRX8BXu7wxGZg+omdqgXFE5TUqA5j2bkitzdFc24qa0JN2:SNy9tSwe7EF+JHF8R+2Aitzk24t0f2","tlshash":"f623f1e3df18ab4aa5bc8b327d044c101705788a36463b6cf872dde97b26015edcca6d","first_seen":"2026-02-26T14:43:05.926528Z","last_seen":"2026-02-27T19:05:32.589786Z","times_seen":4,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":412,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/26399534561_zerkalo-na-kraken.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/26399534561_zerkalo-na-kraken.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=02U62bTa4OH0tPH9; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/997282369\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":46914,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"1e63dd9a31b3dfb97f5a003cadb24b6f","sha1":"b46b21d54a1eb7952c7633f569f017e51339cb48","sha256":"b61cf11010e50c724fcf10c3add1680d1d6c87014e93db7827de65d1e60204f1","sha512":"40526f16dc1ad9c84cc46f0648c0c51bb003013edfee3891b8d47e5945ff1179033313491473328693ede434cc83b1a492f7376497284a1c27d2c3390ec72282","ssdeep":"768:SmCxTF8Qq84iYq/2keQ9u2Fa11QbxKEp1Ur8s4kV3Mp2+NIe8p0Sl:SD4SXeQA11QbYs1IBMp2+hvSl","tlshash":"b923f15e52556e3c494dd7433da3167ac4ebea2038fd075eea73026863bf6e670800e6","first_seen":"2025-10-04T19:56:16.696017Z","last_seen":"2026-02-27T19:05:32.583117Z","times_seen":4,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/30163229081_kraken-24-biz-v-obhod-blokirovki.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/30163229081_kraken-24-biz-v-obhod-blokirovki.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KN9j1tKHMX5qDt5F; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/2066180099\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":38673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"7540064ef97511031b1cc40da1ccf41d","sha1":"76094e62d5b3a4c7360b42e8a693554b1e815f4b","sha256":"a194d9377257f7461346859fbe43f710f1de39ed4efccb605ddadff8204992a8","sha512":"04980eb7c677bf888e8dbc0e8e3079abaa36de478b3c0a476e09f610ac3a3a6f3e3f965026e7e5aeda416943e6b900d0a09411693fd0c2c25a93521ace156bf5","ssdeep":"768:SLsG4b/oSrHC7rWvaHzcRMtEKj975iu/dF5yb58BzG6SqFLE2iAa:Su/frCqvaTcBs7x5ybGBCZqq20","tlshash":"690302bc919643b0df5dc0ea678c1ef2159f4fc16468623dcd4763a4a758286e70e2b2","first_seen":"2025-11-04T15:52:35.644029Z","last_seen":"2026-02-27T19:05:32.591478Z","times_seen":4,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/templates/KRAKEN_CAP/fonts/Goldman-Regular.ttf","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:23.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/fonts/Goldman-Regular.ttf HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/templates/KRAKEN_CAP/styles/style.css\r\nCookie: __ddg8_=VDXLcqlU3sRm8ZiE; __ddg10_=1772217262; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4eLGRAz9fQsHEWeO; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":77276,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", name offset 0xa9000005","md5":"a46de11151df704939107617999a4d7f","sha1":"a54569b16f2f9ba2fcf23c42810860483c22c5c9","sha256":"69307446f5aaa5e84bb5c07156e4244d65dc64bffde8877a470e8ae446f3c9f0","sha512":"ff891c44e5b273fe1202380c0beae757bc56708a033546c9202e65eb8ae4702a1abed85dc08b1080ab420d3cc07f3a2d69fa1c0bc9053ee309ae1a48f605aa76","ssdeep":"1536:Q9hLvIjebpyYKZTVkX+Wlp3S4sacFlwF2RcPr3DN:2lv+ebpyYKN+X+WDS1aO6F2WPr3R","tlshash":"52832a17a710a759e5714ff47e9da38037acf4ac3805538ad01c5aa36f4f8983e4ba9c","first_seen":"2023-07-19T05:17:54Z","last_seen":"2026-03-19T12:19:34.878988Z","times_seen":102,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":172,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/27152168521_ssylki-kramp-in-krmp-cc.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/27152168521_ssylki-kramp-in-krmp-cc.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eAQBE5LjSf5Nbnlc; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/4119671384\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":70886,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"9de93a4b91391a29f884dbacb0209751","sha1":"067b0b20c93d76930678130f60ba85339c0e6d1f","sha256":"ecea9aa2e8e100a8046f042600e96c8b164323d9d45809b7d2bba78fdf1b7656","sha512":"21c99c72a3e9009bde76ed61a48e6f31b02b91476735215c259088694f7f1e5dd9a4acd0ba3ee663d0e417f95a8fd8d1b24f930f735674eadb9b4afdd58e269e","ssdeep":"1536:SHSdBUzLr5/Rd/dGwylxAVdZSyvT/fyWGQTn8rWnLzGSc:AGBUzLr55dMweIHTfGQTnyWnXNc","tlshash":"af63027b0f37bb3606fb90eaa0454c93e945565fba6ac0dc86b0c6b68360011b719fd3","first_seen":"2026-02-27T18:34:46.807779Z","last_seen":"2026-02-27T19:05:32.580623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":467,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/17620009121_ramp-ssylka-ramp4supports-com.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/17620009121_ramp-ssylka-ramp4supports-com.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OR73GsvFAvwOXYly; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/2160598240\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":37260,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"c1f973297fab9ceac3e243c7ce511b34","sha1":"0f1b71f9db9278daf56855e3babba6ce89dcb2bd","sha256":"daff84a2b6984d3fb4c97b194d89fef1e196fe6a764989b0b62e493385323796","sha512":"032e81386ce219bc248055d95a085195ee222dcfb1ef88c17f462f9e697197ca36ad66cb19b28e72b2c016a56f975dd497d6bf01c45f7a903e76dbc0932b0894","ssdeep":"768:SOnIj0IhTg66mR8V3L1AwlPmmzAyLmZMuYum91V7DxXAZFACIqCp0TEIG:SJwMTg66gW3ZAiOmk271VpQZFACIqCpV","tlshash":"0ef2027b413a53b4895ee1b647fa5cd6223522e5b26d30a1f22007b112b8d36f8fd84b","first_seen":"2026-02-27T18:34:46.810461Z","last_seen":"2026-02-27T19:05:32.581319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/templates/KRAKEN_CAP/img/logo.webp","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/img/logo.webp HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4LAyPY2LyhB4BQju; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13996,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"RIFF (little-endian) data","md5":"5300a98bf7f37b997fe648378208b746","sha1":"9c37be9ed0f900df6d1ec76c31c55f0f5e1d0619","sha256":"afec6c7de8ee787409e548d14e06a7c4e0fb825fdc66214dd6558d6fa21e2c4e","sha512":"84e69b67f7af6fd7103669b00b52c755fb24407a2b3d62ef28ef6c191d0efcd652c2cdf5367a89250bda0f4cbf2730a898bb7e7c5eb1292c24f5d77e4cee2b4a","ssdeep":"384:9Bgw9Pw8a4XeO6Y1YX43hCej6YbErEXHxt0MeAx3K8C+xq1Q:vgwtI4XeOwX4xCelxXxG0g8nz","tlshash":"0392bf07224e9361c2fba0f9c55b1bd8d4139680b7d6ead4c508f2e15cae724f69d8e8","first_seen":"2023-07-13T18:41:18Z","last_seen":"2026-03-19T12:19:34.886135Z","times_seen":104,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":539,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/pbnlink.html?_=1772217263433","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:23.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /pbnlink.html?_=1772217263433 HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://limonnoederevo.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=02U62bTa4OH0tPH9; __ddg10_=1772217262; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ft9BUF3QWllMo7Dl; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreferer: https://limonnoederevo.ru/\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5460,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f0a4c8e89602d4d83ebf9fa07bc8e1ef","sha1":"09259a43121466d65a8a91062c540abb7a600675","sha256":"1321b6d512dd913551485ab9c20e0b648533de00ac592fe0d45d035d96f314b7","sha512":"d9c64ded14834975c56d03661bef783b9d461506ce6930c2a2af67dfeac0654997d5e9124faa5ffbafe9cf9b735d407fdaf2a74306468843346deebebffd63eb","ssdeep":"48:tTX49YEumQGEbqiUZ5KX8zotiXttPIv4WBf31lBKCmdWJk:Z/3nGiUzPoMC4WBP1jjJk","tlshash":"37b13011d64a14423132d2686fa25e4aff8a4173d70a55247bdc33ab0ff7968c6a3bcc","first_seen":"2026-02-27T18:34:46.813943Z","last_seen":"2026-02-27T18:34:46.813943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T18:34:20.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HbWfgbtciAobkitL; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:21 GMT\n__ddg10_=1772217261; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:21 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:21 GMT\n__ddg1_=to4zurmMve1XYSxDOi3R; Domain=.limonnoederevo.ru; HttpOnly; Path=/; Expires=Sat, 27-Feb-2027 18:34:21 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreferer: \r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30405,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15788), with CRLF, LF line terminators","md5":"4a963c21571b902cf5792924b2b6a08d","sha1":"9027701003b562b2d6c6dd850785712b2d6cd988","sha256":"03eec5ce392ce6e39cbb1bbb51f002e36427449fbc6f0406c9f56e6db8677458","sha512":"d9aff594c93308af59e3137490794056712a70cecc452ac7c29d046489cc0e3076c11cc4ba656f94a6d4630a3c8bdf72a432fdd63a49e0d1080a3b7e98e17498","ssdeep":"768:hgtHw1Xmv4+5e6Gohn/8ANb5Zej+Y80nC:hgtHw1Xmv4+5Xx8cK+doC","tlshash":"64d27d22f5870c3b1273a1689b21b748dd45416fea4b5851768c37e72ff9ea0cae7348","first_seen":"2026-02-27T18:34:46.82051Z","last_seen":"2026-02-27T18:34:46.82051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1594,"timings":{"blocked":71,"dns":24,"connect":18,"send":0,"wait":1451,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/29215705981_hydra-2022.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/29215705981_hydra-2022.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=z72cf2Mti45qLv6q; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/3378190033\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16823,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"1a1f26be1909c26831e41facfeef4c2d","sha1":"a371947d0500703aacb44a69265cb600cd088bf3","sha256":"59136453b4364dd0c3490397df4ee40b4234d2f036510601284542d3f4a61f0c","sha512":"3d1efc3a41e35b2557005f381fe7b914c92e7db308f1f75169f8b2ea8de95490b230a361860033906fc1e7f5117ac6c999a4ddfc497d1d3323e6361cec9a5b11","ssdeep":"384:STBCywyA4bB6UJ/+X47TMWqtlyZABfZ5r+zOvvGVQhutFA:SVTBbEUFH5qtgZMrFGVfE","tlshash":"4a72c07bde81ca50990edc4460159dafb6730b96658169033a43f4fa9f27ad43239cce","first_seen":"2025-11-02T09:54:55.678835Z","last_seen":"2026-02-27T19:05:32.59205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":515,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc/get.php?site=limonnoederevo.ru","fqdn":"secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc","domain":"avocadodevelopers.cc","tld":"cc"},"ip":{"addr":"104.21.17.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:23.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avocadodevelopers.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 14:34:35 GMT","end":"Mon, 25 May 2026 15:32:17 GMT"},"fingerprint":{"sha1":"EC:58:74:51:6D:59:3D:84:2A:2B:E1:D5:5E:61:C8:44:0E:FA:BB:37","sha256":"0B:3A:9B:A8:58:A7:12:4B:98:3F:8D:8D:2C:64:03:59:82:12:E2:B0:F1:F9:41:B8:62:AE:52:CA:1A:D7:10:70"}}},"request":{"raw":"GET /get.php?site=limonnoederevo.ru HTTP/1.1\r\nHost: secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://limonnoederevo.ru/\r\nOrigin: https://limonnoederevo.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=vut64ic98b4rrqhb2a4om7gs14; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6s4J1YpEXYyiBZPorFZYUISEpTnfAjXcQV51dZ0nDA38U0NCllJgLVz%2FlxzerE8kP7rCasCook6jQz7UlirtePy5J1298BjLRQ2R4kP561XvFKTPWYZO%2FFFch9fFvuQXsn1Wuxw%2Bkg%2FkhZWHM3ileaD2QHXZA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49c6a74a62b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"23da7727e012d8aab694ff8b4992c70a","sha1":"8f78982419a9babace7744c6755be4c808698ec8","sha256":"3ece94685c3d1b1c2e3d6b0faeabafa81c81f4d58a1cc1451621f0a038b6f689","sha512":"bc85a8e8296debd6562da78e1bd6407d02e19ef46d53dab9cd7c5f86a7796a7560254f9cabd6049d9da6cd931e4feae0104dc93295e5fa3614fde59d75fb8de9","ssdeep":"","tlshash":"7001247ae50a34fe4200a690cc0539586cd304be3de77a1646f15e6f68e17b4ce0a799","first_seen":"2026-02-27T18:34:46.827078Z","last_seen":"2026-02-27T19:05:32.578399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":67,"dns":34,"connect":8,"send":0,"wait":122,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/templates/KRAKEN_CAP/fonts/Montserrat-Regular.ttf","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:23.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/fonts/Montserrat-Regular.ttf HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/templates/KRAKEN_CAP/styles/style.css\r\nCookie: __ddg8_=VDXLcqlU3sRm8ZiE; __ddg10_=1772217262; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2Z9S5HqoZd0vddrk; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg10_=1772217263; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:23 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":197976,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", name offset 0x5200016d","md5":"5f72a800c0699be01bf0359713a8b2da","sha1":"fbbda4cd9c07481c558ae9683c927b455892afc9","sha256":"630f8ae712b7b6328e6ddeeddfc6e024a813091840f2021c40b4792fe0595fd4","sha512":"3b8e9fc37a60d784824bf142dd5b8d861a971e2e44292a600ffe52311fbf46d5f1ab6eeea084d3e5cd11a487c03439eff5e27ccde53b929ad0c0a433348cb6e0","ssdeep":"3072:X1lVLYf3EdzoWpiJ0ffmqPHmcmKjtsHhC+of6MuFLBLY7S5dvQFMxzpSKEELaAf:X1lVLYUrc0ffmqdSzvdVpSK1","tlshash":"5f242917fa17075ed5c68ff89ef80790a35cbe9c79148bc9c42e5160d78b9aa314ca8c","first_seen":"2023-07-19T05:17:54Z","last_seen":"2026-05-14T11:41:34.848759Z","times_seen":140,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/templates/KRAKEN_CAP/img/favicon.ico","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:24.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/img/favicon.ico HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=2Z9S5HqoZd0vddrk; __ddg10_=1772217263; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Or8QJaeLCo0cnR3v; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:24 GMT\n__ddg10_=1772217264; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:24 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:24 GMT\r\ncontent-type: image/x-icon\r\netag: W/15151618\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"8b49caf1ff0717a2b01e3da803e2ef2a","sha1":"90b0e92c2251150d6b5d1038842208f9ceeb407f","sha256":"2c195444f7cb1c9023cf1ca7c0d52cb6d116d22b4c96453b12ca356daf77cb65","sha512":"0c9066de2f26a1e9b35a117ab625f00a832d075d4b9683706566a9798633fa9de6f1c33763db4df550597d194af1b9dd0e6bfff798514e39faf97862d758743a","ssdeep":"","tlshash":"b32197cdbb20dc1de54ad0728086c2a2123a7859862a100ff0cd793b3b550585fa2e49","first_seen":"2023-07-10T11:55:36Z","last_seen":"2026-03-19T12:19:34.893621Z","times_seen":107,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/pbn_save.php","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:24.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"POST /pbn_save.php HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://limonnoederevo.ru/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1623\r\nOrigin: https://limonnoederevo.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Ft9BUF3QWllMo7Dl; __ddg10_=1772217263; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1623,"data":"key=hu8qr0gh8nicevewr\u0026html=%3Ca%20href%3D%22https%3A%2F%2F03magadan.ru%22%3Ekraken%20%D1%81%D1%81%D1%8B%D0%BB%D0%BA%D0%B0%20%D0%B0%D0%BA%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fforum.zane-rp.ru%22%3E%D0%BA%D1%80%D0%B0%D0%BA%D0%B5%D0%BD%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fkraken-sale.ru%2Fkraken-zerkalo-internet-magazin-kraba.html%22%20class%3D%22btn-manual%22%3E%D0%9A%D1%80%D0%B0%D0%BA%D0%B5%D0%BD%20%D0%B7%D0%B5%D1%80%D0%BA%D0%B0%D0%BB%D0%BE%20%D0%B8%D0%BD%D1%82%D0%B5%D1%80%D0%BD%D0%B5%D1%82%20%D0%BC%D0%B0%D0%B3%D0%B0%D0%B7%D0%B8%D0%BD%20%D0%BA%D1%80%D0%B0%D0%B1%D0%B0%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fpolice-club.ru%22%3E%D0%B4%D0%B0%D1%80%D0%BA%D0%BD%D0%B5%D1%82%20%D0%B7%D0%B5%D1%80%D0%BA%D0%B0%D0%BB%D0%BE%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fuaz-design.ru%22%3Ekraken%20%D1%81%D0%B0%D0%B9%D1%82%20kraken%20torion%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fyour-perfection.ru%2Findex.php%3F%2Ftopic%2F73-%D0%BA%D1%80%D0%B0%D0%BA%D0%B5%D0%BD-%D0%B7%D0%B5%D1%80%D0%BA%D0%B0%D0%BB%D0%BE-%D1%83%D0%B6%D0%B0%D1%81-%D1%81%D0%B5%D0%B2%D0%B5%D1%80%D0%B0-%D0%BA%D0%B0%D0%BA-%D0%BA%D1%80%D0%B0%D0%BA%D0%B5%D0%BD-%D0%BF%D1%80%D0%BE%D1%88%D1%91%D0%BB-%D0%BF%D1%83%D1%82%D1%8C-%D0%BE%D1%82-%D0%BC%D0%B0%D1%82%D1%80%D0%BE%D1%81%D1%81%D0%BA%D0%BE%D0%B9-%D0%B1%D0%B0%D0%B9%D0%BA%D0%B8-%D0%B4%D0%BE-%D0%BD%D0%B0%D1%83%D1%87%D0%BD%D0%BE%D0%B3%D0%BE-%D1%84%D0%B0%D0%BA%D1%82%D0%B0%2F%22%3E%D0%BA%D1%80%D0%B0%D0%BA%D0%B5%D0%BD%20%D1%81%D1%82%D0%BE%D1%80%3C%2Fa%3E"}},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wsvVzfGkRCT5e5i7; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:24 GMT\n__ddg10_=1772217264; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:24 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:24 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:24 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-27T08:03:35.386324Z","times_seen":544070,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/templates/KRAKEN_CAP/styles/style.css","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/styles/style.css HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SBryFUtK2Bcm4d1h; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\netag: W/2510372947\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"e64a2c9536d74438497f49d7546dd238","sha1":"72f60e5616ce747a758e77056b1e9f35d5caf1fb","sha256":"b5f2f5b8acc41af5d1e493354718795990ecd36bfa05e02471546976c4c71b7e","sha512":"6fbb19853c1eea122f4ed7bffa1fbb138179897b343006a20c328f18cad24803381d10d62103218977a67154fb4f8bd0c133718729230d7ff54e7d41f31d95b4","ssdeep":"192:hVvIgYSG+I1dzTMsD7eLJu5f7wJCs52obc1pfutK:v+fP","tlshash":"2ee1bc49a6052005a2b3a97cbbb20b14eb6544635b8b91f979ec9348cff907942a1fdc","first_seen":"2023-07-05T20:50:20Z","last_seen":"2026-03-19T12:19:34.881959Z","times_seen":746,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/40871226671_kraken-ssylka-darknet-kramp-cc.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/40871226671_kraken-ssylka-darknet-kramp-cc.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7tIfIIR7RuaVL8TC; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/457423058\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":43772,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"a0ae7996e262cb09c5e0541022a7d130","sha1":"34f38b87b9a6f6a07a1fd62bb37776a758fa1e7c","sha256":"76f72cff0118abc26a1fbdf5841a14d39603cb3db87f8db1817945db2c5ad5e5","sha512":"fe8264dc03ad086a0480f683253f084af603fe97e10931a96f6c1c24595824aa0366638617f62de5a6fe077a568e48e9873448732417ef9f857b1cf6e7ad7b68","ssdeep":"768:SOjLHH66USIvOSOAAx/ZKysCjdCW/h/XPur3C2An52kgMaGPlugcqnSJX:SOjLHH66yOAOJhCW/h+r3C2sg3eluz","tlshash":"0d13c17f08108343ea4e1ad65c6b7b8eaf60c7dbb0c7da12045e4d6fbb553147a1e489","first_seen":"2026-02-27T18:34:46.833631Z","last_seen":"2026-02-27T19:05:32.589186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/26097284671_nastojaschij-adres-megi.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/26097284671_nastojaschij-adres-megi.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JWsjr4g07ztpegtb; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/748274846\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":37348,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"6620eec9e4419be757f8a13f7fc60cc4","sha1":"a8682e6c35b9b6c517bcf3ca90f3d3ec3afe31fc","sha256":"9b6c978b62a9be585a77a594195563d240c7c9a747b61a5b4df649c58a84696f","sha512":"ce76f113ea27f7b6ba9e3fcf62819d7463b6ed8a2f250a1a6390d14adfd47f54df4c3ff45697c0d2fddf9cabc9ea7e4eb06e1bcf549d6e879ab4cb113c1f97af","ssdeep":"768:SgZQa/fgt6TEjThL72pPQgC0zJWwmgMyu+IdHWEMoule:SRaQETEj9uWsJ8Hz+IVKle","tlshash":"2ef29e0be94a8a57f44d93fcfe521ee96a4d570af853b6fb05200eca7f940161c83879","first_seen":"2026-02-27T18:34:46.836541Z","last_seen":"2026-02-27T19:05:32.58376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/30270643671_tor-ssylki-na-sajty.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/30270643671_tor-ssylki-na-sajty.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VDXLcqlU3sRm8ZiE; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/3211679277\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":63013,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"3ef1d64987366401919abc9fccbf2bab","sha1":"b03ae9c2902e67866530d23552403fcd1a28d3ec","sha256":"420e860fd9cf55726f41c6febdd682a946fa549430f12c52545746b2db444e56","sha512":"50c39fac8c21a442a89c6a2313d5ce06e118344b8dd11646aa4108e6c04a4c6f94fae70bfb7056fe89ee44143faa08f1641dbf91990c5f9dfb05d5b1479a3b1f","ssdeep":"1536:S05BbGWEBmKKcSZrkcPOHfLLAXtEZqcmBXF:lbJEB/KR5POHfLLA9uW","tlshash":"6c53e19bca758b46b41cc4b1ec5f8805bb64272fa4b96deac1502ddfbeb06471d2806c","first_seen":"2026-02-27T18:34:46.838761Z","last_seen":"2026-02-27T19:05:32.57989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/53865228861_legalrc-onion.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/53865228861_legalrc-onion.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dXHVtRjExxzPgyhL; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/3908282703\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":54135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"21ad684db1d267e3e2a5364ff1f16569","sha1":"089a13df94aa457727f5fc651988514c36f16b5c","sha256":"f264dd5d8af9e1e33fd1b639b426e79c881e545f065defaba553c928dfec216c","sha512":"4f2801671eb5233bd5c01aa68a6ba06252fa6b0e2acdb1350914f8ecdd74b5664166e1f134903c2992c6a952a2af3c56b95b7c66ff08cedbe0e6d07bbdb90157","ssdeep":"1536:Sb4w1uFsPx0mFPNae5vASXfEc9OtSwY3lchOD/KIPn:I4JQv3EcwcNchOD/V","tlshash":"c63302a375512abecaced76dc00915d8f7c08e2da4ec2b36c3ace5b0c6a7559e52c344","first_seen":"2026-02-27T18:34:46.840999Z","last_seen":"2026-02-27T19:05:32.584474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/14422386781_hydra-novaja-ssylka-pravilnaja.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/14422386781_hydra-novaja-ssylka-pravilnaja.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JavHOKIoeLVvwu7j; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/3641659549\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34471,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"0e2f3f54987c34706bc9d33828c25526","sha1":"5dcac88810a699e9db382a5d01e1d4fed224254b","sha256":"97aec516a7af2ca7b9d42a72d53371c520b6aff16e429ce7a4067bb5290d7b5b","sha512":"c9272f3a4aeddeaa55e985567c531109f00e9c6a2971f66bf2520739c715cb3e49dac0fd4c2c5f9f3aa6b757ac501beef672a95a543e2b53245bc3c815277569","ssdeep":"768:S7ZX8l030RJt4QVWI526wEq84euCQgfAiiHx556bm9TBG4Kc:S7ZX8wWzbwJttCHIfMys4b","tlshash":"ecf2e0b1475b19e30e9c55bab540bb17baccb89a7405f3844bd84eb39b00790a2edfd0","first_seen":"2026-02-27T18:34:46.844476Z","last_seen":"2026-02-27T19:05:32.585186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"limonnoederevo.ru/PARSE/DATA/IMAGES/17901095491_kraken-oficialnoe-zerkalo-kramp-onion-top.jpg","fqdn":"limonnoederevo.ru","domain":"limonnoederevo.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://limonnoederevo.ru/","date":"2026-02-27T18:34:22.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"limonnoederevo.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 08:36:55 GMT","end":"Mon, 25 May 2026 08:36:54 GMT"},"fingerprint":{"sha1":"DD:01:D7:DD:71:35:B4:4C:62:5B:AE:2C:90:1E:AF:2D:9B:9F:6C:32","sha256":"2D:B0:FA:84:92:87:6D:D0:34:76:B5:5E:8B:07:A7:BC:E7:96:ED:C7:A9:D1:75:31:A0:1C:0F:79:1D:3C:05:C1"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/17901095491_kraken-oficialnoe-zerkalo-kramp-onion-top.jpg HTTP/1.1\r\nHost: limonnoederevo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://limonnoederevo.ru/\r\nCookie: __ddg8_=HbWfgbtciAobkitL; __ddg10_=1772217261; __ddg9_=91.90.42.154; __ddg1_=to4zurmMve1XYSxDOi3R\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AVbPxuex2f6iABNi; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg10_=1772217262; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\n__ddg9_=91.90.42.154; Domain=.limonnoederevo.ru; Path=/; Expires=Fri, 27-Feb-2026 18:54:22 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 18:34:23 GMT\r\ncontent-type: image/jpeg\r\netag: W/4244886417\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":37850,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"816ee692729cb0070becd402f67fc476","sha1":"d6bbe0f026054e6bf10631c9e8fbcf2094d6ce42","sha256":"2e394dfebc9dc599574b539a7cb139d5b4c5dadb7ebb4ce41845bd992ff8a8e1","sha512":"aed35fd8a80c8d282402875a0b011aad646f54d075a821423c15d874609dc361562e65a3d9bdc0a63d45e0fff60b56666d924529865509a1899b8cca6aef45f2","ssdeep":"768:SvKTOcAqFkGgLIYbk/qh114ZWgo6l/TtFaDinOA4lKCevUKDBXVSe7DeT/MA8cE:SJcAqvuIYI/Q11GWgogtgxApxZYe76jU","tlshash":"5203e14fb35a663ccdae857fa949e14dc91a4b21384007c4afb43e74af1ce91c22d5a8","first_seen":"2026-02-27T18:34:46.847135Z","last_seen":"2026-02-27T19:05:32.585945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"limonnoederevo.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}