{"report_id":"24d252f6-632e-460a-9092-670b5c0dcb9c","version":0,"status":"done","tags":[],"date":"2026-07-19T07:19:45Z","url":{"schema":"http","addr":"strongway.icu","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"title":"Umbryxduh","dom":{"size":141870,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1888)","md5":"85e501f41ac55f1ab7db41755d0ff502","sha1":"b4218ba305a44bbc639a2f35c3526a772f19f630","sha256":"d0780183a193f9b10f77392b8e5c8ae197247b7d969074acbb571641cb77678b","sha512":"19b94d54c7d97009ed4ef738492d63b16b8f95ce422ab699563ef52cf00f457f73acc5bd1b56232e3809669eb34955b37e027dad7f62f1866ab270e7499b835a","ssdeep":"3072:Uk1tKtL/4/C/O///WfY5P/C/bnZwUnWPzRLui4kAY5fdi/Z1w2kZOlnEy8USQTRT:3tKtL/4/C/O///WfY5P/C/bnZwUnQz8B","tlshash":"f1d3635030fa10b512cb85ad2a779f5a7790c14be685ce173dec13bc0fc2d66a8dba49","dom_hash":"domhash1d8fe3d03cef3f645637a8683e0b92ef","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"strongway.icu","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T07:19:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":5,"received_data":144077,"sent_data":2736,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":2,"received_data":12621,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"strongway.icu","ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":80,"request_count":40,"received_data":8428943,"sent_data":31783,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c21d6c327bd3487621615ceb3780848","sha1":"397d25dc9d9cdd1aecae8d28e792aba03b4145de","sha256":"8d2c4c2e529ce21f7dc3e6ae05e82cc9b692f4ec7776233ff1ed4792f07e3081","sha512":"a5e5cf3b06634b5f80d549d4e336e3069d18853ef48460f88e8c93b2942588741d938f9b03e36d03172e708d6842fd8aa3df36f9aea9899ed0d683e94e1adae4","ssdeep":"","tlshash":"60f06d9230e32f664c2bc0c30eb65d985b2da097429b573cf92e5d48bf981e6961324e","size":534,"data":"","first_seen":"2026-07-19T07:19:59.918856Z","last_seen":"2026-07-19T07:20:51.803434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"86d13e5d294ad722caf865d11cd82bf1","sha1":"c04e979404417bce8e593487cb15ad5cbd3f3734","sha256":"1ddc3cf5512fc085937f9636285584e8263376d34ca54bbc8bc33d8315a36171","sha512":"9ead157a0b8737289565d82eb4e9c8e0557b516b6188ca8381695530b11ae39708e8bca2bd594ce72e4353f009d4fe6df253e9ebc5ab5b3afab8f97a86b97241","ssdeep":"","tlshash":"994179047075017515af667808bf12ddb2e0001ba188e91fbddd119d2fa8cb17aeeee6","size":1878,"data":"","first_seen":"2026-07-19T07:19:59.91982Z","last_seen":"2026-07-19T07:20:51.804368Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba2c3e19ce1976680cef48cf5e9e96f5","sha1":"faf9ee487e455aa3155ed5b96aab473313e4beaa","sha256":"c08166cd3415d66e39b9520024f03d103ce11e9bc4fec9ea76692c359194698d","sha512":"df5584d821faa030da3f5351af24b13d036c13b8352aecdd4067d24ea24498605f923074ca4b362a058a35f328f0a29aa355c9208e7be42d22dc0d4549fe7c3e","ssdeep":"768:0vgwayB3Y//VPum/Z1wuMU+3OAtZOlnEy8USQTRC:0HayB3Y//Vz/Z1wtU+3OAtZOlnEy8US1","tlshash":"5bd26346317b04b001df65be19ab264633f0504775c0ae03feed93dc0f59e58a9aba8b","size":28753,"data":"","first_seen":"2026-07-19T07:19:59.920685Z","last_seen":"2026-07-19T07:20:51.805208Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fba3a0bb9be9916d69026630cacaee83","sha1":"75cb9abdba8c1a626533675aeb0562ccf1aed05a","sha256":"c10307193d9b7c31d2ec051aa538a690695e2bca5c3ffd3d067666b3023786d3","sha512":"abcc98f10922af52361140658ab312a9dabe21e2caf6b3c7b5cd89315f58aaeb3d258c95c37c280b7364640a5626b01e30d2f50092057896a27c64280970482b","ssdeep":"","tlshash":"02f02bcbb0f3223c403f419e223767459b15495bc34647b8bc0d795e4f560626d617dc","size":600,"data":"","first_seen":"2026-07-19T07:19:59.921868Z","last_seen":"2026-07-19T07:20:51.806187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"50d15005f27b758cf70894060be5e135","sha1":"b3debc550921e11ec2972644de51aaaa65b2c46e","sha256":"9069d27240756083231fc3c3936ee9e31e03987a1cb309c7918a1ff94807a10b","sha512":"fd36d1c1297acf7fb282e30dcfc97800cbb5f3581f2c55f6efe2d49f15945d422d871d20a2d474b8a78676afbe5037762126be5ec1b49be27a62000357c64666","ssdeep":"","tlshash":"e5d097a040972024402f89aa0b2b13a1c7906c47814d96083c0e288a0f670a4ecf1bcc","size":242,"data":"","first_seen":"2026-07-19T07:19:59.922798Z","last_seen":"2026-07-19T07:20:51.807179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd14e3a14ec066ff2d92594cd050bcf0","sha1":"99fb78b247221291e50e9dbf063fd1eb1785ef43","sha256":"c86616f44da15c479debedb954d1e00f0f7045e16682d821d1676afd53916c09","sha512":"d8d8db2321d7df2f766c0fc0f66fe36e673c9a17183b79c7eb71438b717db5746cd57ae525858c02247722dc09526edd4536c3ff7695873dcbcb3592667598f4","ssdeep":"","tlshash":"4b012de6a0eb0609542f905e59ba0d85679048638c04579ab82e51a8efdd1fa96f2708","size":676,"data":"","first_seen":"2026-07-19T07:19:59.923746Z","last_seen":"2026-07-19T07:20:51.80815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/js-multimedia/jquery-3.7.1.min.js","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b83db83a1d89113ee03ab730efa48c7a","sha1":"2fccdd3e43db21bbc8448ed6d6311c4a6eea1166","sha256":"99e691fae5e88eb36bafb24758b35f0f990708295f8f2abe2221891e328f776a","sha512":"10d6f09a04eb135eae12c890be0512ead801e213614505937d1e782d5a6af86550395470ea31b3aebd85695f07a8fe903eda4941e52bcb7278cce02eacb13800","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:vHNwcv9VBQpLl88SMBQ47GK7","tlshash":"1083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-10-23T00:47:02Z","last_seen":"2026-07-20T22:32:53.41625Z","times_seen":9672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/js-multimedia/bootstrap.bundle.min.js","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd31cd6c0de0972f2e5d260a09ba121f","sha1":"8b7152605b0b84878a1e76fc336d4543e52f95af","sha256":"eb37e4d8bf11df00a045b673a64122ed4602d9b73a7d81888057cd7aac8e5a74","sha512":"75335f85c2254b05f606f84b6fa0d6b2acd2fd9a6558696f8e00cc3c01279235fdeedd0911dc441db292fe8331ac618f85fa5bd9bdd4716c1f94d0cd1017eaa2","ssdeep":"1536:gnwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07B:CwORx3YCD45wZbDZTb0gB","tlshash":"4f83c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80727,"data":"","first_seen":"2024-08-06T01:30:00Z","last_seen":"2026-07-19T21:46:21.53677Z","times_seen":1470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/js-multimedia/cookie.js","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f211f7fc7f548dea3cc5dd25872ef7","sha1":"d0328f154ce1ed9c8a706d13d73e5a5c6c26661c","sha256":"6edd4fc3a89439788008d82bef25cb46e3a6621e59927d9e3800efb65d5b50bc","sha512":"844ba0699255ac026fa9937202f96842d6e56c5ed579df1ce382590ce476fa5a135103a452acf89206a8d6617d81f5878ecc8ac10ae181cfde33918c9f8e52c8","ssdeep":"","tlshash":"7461750b61f3597613bb20be8bef1b5e7131121b2215cd643c6c52185f80f9961e3aee","size":3297,"data":"","first_seen":"2026-07-19T07:19:59.902951Z","last_seen":"2026-07-19T07:20:51.783767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/photos_header_69ce29f02dda67.34764620.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.782Z","timestamp":1784445555782,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/photos_header_69ce29f02dda67.34764620.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 513565\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-7d61d\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":513565,"size_decoded":513905,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x2880, components 3","md5":"f84836e2021adb5f4f9a92929e476c33","sha1":"dc05cbba12a30dda148f64b639ff474ab094ada5","sha256":"61572b067b772e7ce1e804f47102b26abdfcdf18201674d3949294998e5c214d","sha512":"c9fb66ca0d4cc38b43c26a7baac672f055d08f7433b7a6832d59d0721d83223540c8c4dcc9c43a78153f9d6138340b85aba9c8e902d6be7c6582bd6e0a3a7115","ssdeep":"12288:WDRNU/Zwp2fQA8Y1GmxFTQwnMsuUgrOV+kItRPRNDOHY7HJi6Pd0o9cDF75:WDy3wRwnnufrPtR/OHY7Hg6Pd0FD/","tlshash":"00b423a506c118cfd4db3cb25983de90af7c033a36b06a5349735adfe693aa5b46144c","first_seen":"2026-07-19T07:19:59.771957Z","last_seen":"2026-07-19T07:20:51.774502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":61,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/posts/03-21-2026/shop-2026-03-25-2.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.806Z","timestamp":1784445555806,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/posts/03-21-2026/shop-2026-03-25-2.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 27572\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-6bb4\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27572,"size_decoded":27910,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 1024x768, components 3","md5":"ef5a575d149fcf9011f5a4773f9a82c0","sha1":"22c817bc9dfb4b14e7ccc534031fa60741ab5df2","sha256":"da4beb455c54aa112af19bd0355ca6d33f7c346cb0a161f1be9777bc4230c674","sha512":"e34222928587baacb80dc5be3593aa26478ac20d1ac40a850204548df605c0f61ee21d4f765f23191e63d8e2b652b0c4460137da1f9bf35f9ccb3fee9f647b52","ssdeep":"768:aWZYpej4PiDPwS5WL3qKpsK8Q87EuYzCMZ/:aNp7PSPwS5WuKLh0E6A/","tlshash":"51c27b034c189f839875c3e4be436cec6f423a2ca9d239ff59635dd73a14a224c5a61e","first_seen":"2026-07-19T07:19:59.774958Z","last_seen":"2026-07-19T07:20:51.785134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":731,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/core.css?6d5fa","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.763Z","timestamp":1784445555763,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/core.css?6d5fa HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ce2c59-aefe\"\r\nExpires: Wed, 29 Jul 2026 07:19:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44798,"size_decoded":6919,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"6bd5c86acd704d88efc3374f0b42a0fc","sha1":"e8e7ee8217462f6aa3dec28cdd4309b4c252893f","sha256":"524e0772c382123798c5d47a37d9353090e367f358398440b945fe595a816c44","sha512":"7eb01f223182ff0baea3a07c4afb7e092a2142d74953e1f29bd2911741f630f734193bcb3235cb1510df7293976d07f6add2c5f44c640059d4de222aec58407b","ssdeep":"384:1WhoPmMI83WLz2QmLoWrXRckWMIOAR4BWZqPW9W:1W52QmLoWekWMs4BWZqPWo","tlshash":"4613202ae90122457537d37cafa30759e7669053d30386787fdc63450fba1a88aa2fcd","first_seen":"2026-07-19T07:19:59.777127Z","last_seen":"2026-07-19T07:20:51.790214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":61,"send":0,"wait":73,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/logo-main.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.780Z","timestamp":1784445555780,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/logo-main.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 18084\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-46a4\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18084,"size_decoded":18421,"mime_type":"image/png","magic":"PNG image data, 400 x 361, 8-bit/color RGBA, non-interlaced","md5":"d16dcd43a4665bfd31c1dd71d08b24cc","sha1":"7ca41c032e47c6209f1828010419027b2690a010","sha256":"3f8f5fbf348d5b6f64cd308444609dbb21718f717fe1e533007bf6562489dd39","sha512":"f6c422e3bb28fb944bc39619f0fdba4efb990378ff9f32990cc62e44eae5d2089fd282acc970e0d6fd0e7c9e5516741be885d63dd48e866f79e78dd577ab63aa","ssdeep":"384:uE7L83LoLktfinsUybBa99ecEBXdg6schOh6faOOzgh+16G4SnXkg:hLZLktK8EecUXTs0Qkhu6+","tlshash":"9b82d1c3c2386b875dff19637f2708647b17086f76998ee6a6a2b3bd1039205dc1c146","first_seen":"2026-07-19T07:19:59.779338Z","last_seen":"2026-07-19T07:20:51.764292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/renders_header_69ce29f02dde68.56917319.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.794Z","timestamp":1784445555794,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/renders_header_69ce29f02dde68.56917319.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 714946\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-ae8c2\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714946,"size_decoded":715286,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x2880, components 3","md5":"fed9567102db2d4ef1c4fa9e750ac899","sha1":"4e9efa9e6ce0d944411168ab445aa1e6d7f49ada","sha256":"5af751e9939302b9d70aab53c9837ba023895add623a2de185c79028a4dad970","sha512":"de587b9a03604bf2785180717455bfc2a764d514caad8c9c63e4d221e019a99ae0427b612ceb5ad90dbec10d3a4a96b788bf8189be68fbe49a03227ae891bb97","ssdeep":"12288:5XU4Ot65sn/cYXGGU0hwWJOrN+xEmmYjYq/xQCJCeUj:5XvA65EccGGf3JNxVmYj3xQCJCeUj","tlshash":"3fe423e1bc1d9a74eaeb11b505a74bbc4bddace08df3881e48924e0d37fad123907195","first_seen":"2026-07-19T07:19:59.780982Z","last_seen":"2026-07-19T07:20:51.775383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":802,"dns":0,"connect":0,"send":0,"wait":63,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/partners-thumb_q701.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.813Z","timestamp":1784445555813,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/partners-thumb_q701.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 5741\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-166d\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5741,"size_decoded":6077,"mime_type":"image/png","magic":"PNG image data, 320 x 98, 8-bit/color RGBA, non-interlaced","md5":"e1d2ebffb74bbde3d4d19654cc4413b6","sha1":"328de876fef6a0d178054e0e0c5fc2722b7bc394","sha256":"85dbe05f6434476eaa1f6ddaf3601c0d62563c3d1137ab4350dc06791fcbf708","sha512":"6af6523d6a75b2c8dacb9f57fbe7b1690d2a0579000d03c487e4c445cc282c1349240e4e053152ad78c0cee926cb3b7e19eb09ccfff8ab6d7a6e29565ca198cf","ssdeep":"96:Zc9JZ5jNa5EoKxawUUhu5imt6vP/6KYk4T7evN3PfpdNbE+1lMvc+vn3:6FTAVKxacat63SjjevN3XpdNbllMPvn3","tlshash":"e0c19f19532167465de899c1c3107bfa6857bb3e30a48c9e23b73c678648c64f9a934d","first_seen":"2023-11-04T23:21:52Z","last_seen":"2026-07-19T07:20:51.800934Z","times_seen":11,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuMw77I-NP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.729Z","timestamp":1784445556729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuMw77I-NP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://strongway.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21232\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:10:07 GMT\r\nexpires: Fri, 16 Jul 2027 05:10:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 266949\r\nlast-modified: Wed, 10 Sep 2025 17:01:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21232,"size_decoded":22045,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21232, version 1.0","md5":"f617fd584ca510f63d365750a132700b","sha1":"60295b6e1ec750a7ed3463c55c5809ce77c56846","sha256":"c57d9ca3bd42e6bc093badc7744dd2059a78f66a3a4dc6ca40574480c870f553","sha512":"d1c9c656ac93b396768761f6b20590c055d0a491371a45419b0c9557180e7b0ed6b9f5be82e4b2b9d33488faee3a9624eacc03fd70484bb0bd36b11ca3f4887e","ssdeep":"384:1MGTE91mBI8lMbNvHn/i3NQOHI6a4sDf0onbq3KvVHJDYZuE/lC+Txr8qCzHx:C1mBIbvHK9QtPHTtgKtHJkZuE/NZADx","tlshash":"1892e15e98ab9bea7e0df727109114139b77287b47be082c85e4443e9482ef84776ccc","first_seen":"2025-09-14T11:14:04.9633Z","last_seen":"2026-07-19T13:28:17.232837Z","times_seen":325,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":32,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/css-multimedia/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.737Z","timestamp":1784445556737,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/multimedia/css-multimedia/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6 HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/lander/umbryxduh_ru_wp/multimedia/css-multimedia/bootstrap-icons.min.css\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 130396\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-1fd5c\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130396,"size_decoded":130736,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 130396, version 1.0","md5":"cc1e5eda776be5f0ff614285c31d4892","sha1":"020c3c6f9280a315e8425d7f92e15bcd0cdda1b2","sha256":"476adf42b40325098fcfa8b36ab3e769186bb4f6ce6a249753e2e1a9c22bf99e","sha512":"8ea88eb326ce57117a24f88abf9ef1740ff55a1cf6d09d8bc1e798132d44bf237aecff44253ef60c9eb3fce108cf4f7d8ea27e6a763a9338c7d6204247b2cc60","ssdeep":"3072:IBqhyg8Dr/UO5b2uP63F92P/ke/zjK9Ec5DGl0zdxxNSw1F:EsyH/uuOsP37j+NK0zdvNFj","tlshash":"b5d312e3ae1bd5965ccf2adb8431382d5e861ceadd039ff265b477ec579182028c025e","first_seen":"2024-01-04T23:06:55Z","last_seen":"2026-07-21T01:45:24.581298Z","times_seen":15573,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Unbounded:wght@200..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.270Z","timestamp":1784445556270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Unbounded:wght@200..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jul 2026 07:19:16 GMT\r\ndate: Sun, 19 Jul 2026 07:19:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1931,"size_decoded":1247,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"18159af445440da1598a04e124a3fba4","sha1":"87aea06785760be3de6f17a7b788ef5996c9faef","sha256":"c2bedf4123599d555833cd3f0b7b4b80e67eae488743f68ce88708cf25b374cf","sha512":"49bb4af9736b7b33a33c2ff6cdcb84389893219869c0ba92c2a23a3d12e3147b7fd5055526c6afa3f037ced723e94491ac5c020fa1c8946f7c34a21818faf551","ssdeep":"","tlshash":"9441c8900037d548a6834cc233ce7f25ad8e12553402c9ae7ffe2894adaed3a122db0d","first_seen":"2025-09-19T23:36:26.47294Z","last_seen":"2026-07-19T07:20:51.768119Z","times_seen":214,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIhMX1D_JOuMw_LIftL.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.731Z","timestamp":1784445556731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIhMX1D_JOuMw_LIftL.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://strongway.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40772\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 11:06:32 GMT\r\nexpires: Mon, 12 Jul 2027 11:06:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 591164\r\nlast-modified: Wed, 10 Sep 2025 17:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40772,"size_decoded":41585,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40772, version 1.0","md5":"1640b0b69ef0647e11b559178cb8a08d","sha1":"99523cf576d3d1815e27b58a35daff6edc443dd0","sha256":"d824d807d4d832d12c87932d0b8ec1314dcfd502157a56dee6bb04cf8a3768ae","sha512":"2969e677c9d9c2a9a7bc7d5bd21b0397a3cb67642b99a2603936538bd580f837d93e6bb191e02a932493207d17d53b664e04272bf3850c6947b042d4c1a1d423","ssdeep":"768:W0q6cKPuFGIRn7MJzdS8CAvC3AA3x8dlmHJ45S4O0f3DNmzcB:WC0FGA7t8HvC18dlmsS4rY4B","tlshash":"3603f13c5f73a978faec58b8ecdf0726df9e0338a8eb1a5672d15c250aa0dc17610065","first_seen":"2025-09-11T22:06:21.040627Z","last_seen":"2026-07-21T00:48:54.30256Z","times_seen":3976,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":24,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/js-multimedia/bootstrap.bundle.min.js","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.757Z","timestamp":1784445555757,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/multimedia/js-multimedia/bootstrap.bundle.min.js HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ce2c59-13b57\"\r\nExpires: Wed, 29 Jul 2026 07:19:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80727,"size_decoded":24167,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"bd31cd6c0de0972f2e5d260a09ba121f","sha1":"8b7152605b0b84878a1e76fc336d4543e52f95af","sha256":"eb37e4d8bf11df00a045b673a64122ed4602d9b73a7d81888057cd7aac8e5a74","sha512":"75335f85c2254b05f606f84b6fa0d6b2acd2fd9a6558696f8e00cc3c01279235fdeedd0911dc441db292fe8331ac618f85fa5bd9bdd4716c1f94d0cd1017eaa2","ssdeep":"1536:gnwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07B:CwORx3YCD45wZbDZTb0gB","tlshash":"4f83c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-08-06T01:30:00Z","last_seen":"2026-07-19T21:46:21.53677Z","times_seen":1470,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":61,"send":0,"wait":129,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lora:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.267Z","timestamp":1784445556267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Lora:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jul 2026 07:19:16 GMT\r\ndate: Sun, 19 Jul 2026 07:19:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9342,"size_decoded":2211,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d3196cd8703ed97878540bf035827457","sha1":"f5ceb365d8834051ce627e230bf54a2c6ff28ab4","sha256":"b8348fc32dc6b0f88dd6b3086208c814ec53285c94a3bcea265c68a7e5c33c8b","sha512":"5efbc1e4602206c3aac7cbcebb0ee060787499b0798af627f15e52d343836fd9852dcb4bbfe4da2918844acf62ae4203681fd352ca6a389d01b70230d03ee4d8","ssdeep":"192:3HlnHQHzqQHPbqGIwV42HEHRRHM7IyTqVLbqGIwV4XDIWM:3FnwGQzqY42k/msRqY4U","tlshash":"af12129100179544a75718d223cebe7aee4e93587140d035abfd8b87fe8ede692a831c","first_seen":"2025-09-15T12:33:31.260503Z","last_seen":"2026-07-20T08:37:45.408969Z","times_seen":672,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-423.svg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.800Z","timestamp":1784445555800,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-423.svg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2362\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-93a\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2362,"size_decoded":2701,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb4acf199943c236259b55bf8f96cbc","sha1":"689b5826055bf3850d816b1c4c136c967b2bd26d","sha256":"5ebe55d1d8d7e9939327ebef46f4c1e2331e0373472ad817faae2f6f3e77691f","sha512":"1b64c54d51586fe9352e785a67b5e22d9dbee91ee17ac5b5a4b041e13f94081b0eff285205f3a7f1847e8eff932e64e8538eec5ac0fe50b837a4edb6bcad95b3","ssdeep":"","tlshash":"ed41557a8379b0f8180283c5e3e5b1e77199a003f3b262ecc7f607855e108b78278667","first_seen":"2023-11-16T00:05:23Z","last_seen":"2026-07-19T07:20:51.790878Z","times_seen":8,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/pictures_gallery_69ce29f02ddf33.51909098.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.801Z","timestamp":1784445555801,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/pictures_gallery_69ce29f02ddf33.51909098.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 211678\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-33ade\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211678,"size_decoded":212018,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"db6eed83ce8b0eb14cc3fa28931fcf98","sha1":"84c8fd08933bd99cb2d013e041fcefc2e066e46b","sha256":"d6c2bd46666c4fb1d58cb4832217b6628e382948d1a9c2b95bee7d8d93039810","sha512":"2777e655ddc847be93ebd49e2ecfad5c0b0d6c28a36826947e81bcdd13c8f9f2aa15a28092f6fae609d130365e63b36318ace721fc49bda19579342245949c35","ssdeep":"6144:sF8pndUPcOe/iwPb8BmI2lLqMQ+qxc41qre:sF8D98bBiknDqy","tlshash":"b0242327e8dc3aadd00ac3f6d579ef15316ae92b1a4a78cb375e4c130e90d48ec55d28","first_seen":"2026-07-19T07:19:59.816209Z","last_seen":"2026-07-19T07:20:51.78183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIhMX1D_JOuMw_LJftLp_A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.734Z","timestamp":1784445556734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIhMX1D_JOuMw_LJftLp_A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://strongway.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22972\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 12:30:01 GMT\r\nexpires: Fri, 16 Jul 2027 12:30:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 240555\r\nlast-modified: Wed, 10 Sep 2025 17:07:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22972,"size_decoded":23785,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22972, version 1.0","md5":"d866603498cce2bed6a389643df0a859","sha1":"65cbe56d2d3c827c0dce42224f4898ccd0882427","sha256":"405b30a5bea8b70446e08e40e5d70b7bf5262ef3c4a9e4f3e4672e079a01a4cd","sha512":"40c5fc3b3323f34cc26130a05ac8451020941ddf21f90fb0847ee5f5c80ce483881f52d304d5e9b09f60aaefcffbd5f9f7363f2af4a923e7ad3f971936ee0eba","ssdeep":"384:k01+36Nr/NMw3ikVewwluUFhH2ldm87aE4PhS52hInOuzT4etcsI:ki/Nh3ikooUFAl7SPhS5OInOO9A","tlshash":"36a2e1e69234eb3a9ff9c0bc94691f060b411c826f677fc1a517645f2be0f43645b4a2","first_seen":"2025-06-22T05:23:39.909252Z","last_seen":"2026-07-19T07:20:51.792794Z","times_seen":46,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":49,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/posts/03-21-2026/shop_2026-03-26_4.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.808Z","timestamp":1784445555808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/posts/03-21-2026/shop_2026-03-26_4.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19828\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-4d74\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19828,"size_decoded":20166,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 650x650, components 3","md5":"77d9c44e4399c75982c85f4e87a5fb27","sha1":"d0812e2b234c5cd356e5ef82db09a658428588ec","sha256":"9dc5f94581ca452e28acb385b4bf1e80194b6004e408cb32f4faf436d83b6bde","sha512":"e345a8a3479751b81583b582e2102413b45a4b99aea04422a0fcb43bf8b2c99af1d79a19c0a789f38541728b21d51e5e11b983400a76d3c36ea8a78f82f5d2c8","ssdeep":"384:JR6S1YLxaFzQhEn9ngoH23zoy7TLjzueIjsvGnk6tNNgjDskRq:JlwaFqzu23VuX8Gn12Xq","tlshash":"46925a1368498f935039d7a4bf034f9d2b4a3f0da99539ef18164e8b7f306220d9d5ae","first_seen":"2026-07-19T07:19:59.827597Z","last_seen":"2026-07-19T07:20:51.785987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":864,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/partners-thumb_q702.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.814Z","timestamp":1784445555814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/partners-thumb_q702.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 1358\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-54e\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1358,"size_decoded":1693,"mime_type":"image/png","magic":"PNG image data, 200 x 63, 8-bit colormap, non-interlaced","md5":"1bdf524fa7c2bca0a69d7a7162d1a684","sha1":"e74944e626476674fd410ae3caa0c7afca75ac03","sha256":"6fed491d729b6f2c2acd5d5c4314494ed759fcaecc15dae1c51a330c1c684ab4","sha512":"3c09ea600b4279a1240f910de82217eb4e9728c534f670dfba124b23bd603f9d53fd70cb83740bb8cd4ec3b2fb1b4443b36dca287b532127e2f9d458c2574e1e","ssdeep":"","tlshash":"1221eaf31fb259ac116168f4dad5325399802f94cd415c87510230edbaf3e04c85e4df","first_seen":"2024-08-20T12:37:47.103648Z","last_seen":"2026-07-19T07:20:51.769321Z","times_seen":18,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/partners-thumb_q704.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.817Z","timestamp":1784445555817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/partners-thumb_q704.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 3427\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-d63\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3427,"size_decoded":3762,"mime_type":"image/png","magic":"PNG image data, 357 x 65, 8-bit/color RGBA, non-interlaced","md5":"d3c3134e3b7776cd858205e747537cc4","sha1":"c148a2108c5ab9ee2b82c7c3e39ccb5c27f82e72","sha256":"e188696fa8ae625a49f18d284b4b11f85579e481152030806a22f541735baff6","sha512":"ad45a9de8cdc2480fe25c0f2cfe60b65d4548cc65654f453ddb060528684af86bd7f2c163a5d27e2d3732b931ea101e35bb894c48c9093a8e2040107844b276f","ssdeep":"","tlshash":"5d614cd6a5d014429e98e36411ef8cfcd0643d922841774e6f985c2806ebcae497b795","first_seen":"2023-10-13T09:47:49Z","last_seen":"2026-07-19T07:20:51.76219Z","times_seen":23,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":260,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/depictions_header_69ce29f02dde29.66430583.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.793Z","timestamp":1784445555793,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/depictions_header_69ce29f02dde29.66430583.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 245323\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-3be4b\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245323,"size_decoded":245663,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x1372, components 3","md5":"5bede55c55e2e25dc864e77b208788a5","sha1":"e36fba3acf3590f18cb214e8b41237548cfc8035","sha256":"2e27e3ea6b6db02b954edde5c38212e13a857ef2a512627d71a21098d8245938","sha512":"5deb060a6717538bf0d88bd1596614634b7771a0fcad9ac58b108f5762c4fcc180d3ed2e856035b2393cc552af8f13efa17d350e37f8e1a75aec576fdb329cc6","ssdeep":"3072:n9+PBu7DrBMQCtV1V3H+l0xchERkrCPoCE0nsazoggkDOHMtQ94nDcXLOmw68GiW:9+PiDSVL3+CkChXtz5GWDcXLdi+PsC","tlshash":"7134227857240bc7e5a68b358e54e13ea2eeec5517463927c06c7efc98ed8c6ce1c029","first_seen":"2026-07-19T07:19:59.83446Z","last_seen":"2026-07-19T07:20:51.765174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":385,"dns":0,"connect":0,"send":0,"wait":61,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-420.svg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.796Z","timestamp":1784445555796,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-420.svg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1266\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-4f2\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1266,"size_decoded":1605,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7ed6225f2cfac7f2a0d764446331cbf","sha1":"95be1da8ee4fefb8bfb44857f399e4812d1fbd43","sha256":"fc7949634a35f3b0df7351f87211906b2b804ade351fca0b75a75b8e049d1400","sha512":"041a3bd72c9116ce4ea1a0dae2ad99d4548e28ee5c492267925dcf9bd27671cd087d770f773cf69f13099ad52344788157283f7643eb883092b4aa9136e949be","ssdeep":"","tlshash":"0e2142f7a2156bf9941421988d692d07a80ca013f35340fc63b3af1b59106f6013c6e9","first_seen":"2023-11-16T00:05:23Z","last_seen":"2026-07-19T07:20:51.781235Z","times_seen":19,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":796,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-421.svg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.797Z","timestamp":1784445555797,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-421.svg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2984\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-ba8\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2984,"size_decoded":3323,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"154b577e5d8f01da259298f65469fd82","sha1":"507835f9eb7c75bf65b108fa9e4a1f7f5f63b2f9","sha256":"9d7ac1fb24ad8f58d909a7b2ccc1f6b9f6e41d46b3f41f7f357951532b2c628a","sha512":"7b95c8218b64800c7d5cb60e46add56b6f60a93e02dbfac3c77f8d57cfda5018018beada51b47d913d2b73f6aa459dfe3ed1ed2a444bff4c70c6525b63b3bc80","ssdeep":"","tlshash":"ad51655ae7141876e4d649acc3d44542116ef44af27281fcbfb813cf3a24bfa089cb65","first_seen":"2024-12-19T09:31:19.891754Z","last_seen":"2026-07-19T07:20:51.77308Z","times_seen":10,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":796,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-422.svg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.798Z","timestamp":1784445555798,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/advantages_2026-03-25_08-33-422.svg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 12334\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-302e\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12334,"size_decoded":12675,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd0c05ef3b8b6ef2739b7a8a36901f87","sha1":"5b3b47505a0a37d04cc1a57973a45efd788c8523","sha256":"0f45196ae9855d1d367b8b52402cd68d7fe1e701e5ce78f01c5da6861207c128","sha512":"15fb86b1cf1a3e7a5f47ee9c4b46cd9f37092460f9a1e82dd5ead60ddc68a6b46ff53e144002c64da2145759dbb75639da0ef7fd1912b11b676e2654c7ec5fa0","ssdeep":"192:6WjzmMlQrDdQolQUyvN95m9ezC7PGEETY/2cd0e:64zmMlQrDTy5moW7E+ZT","tlshash":"934254f3d335653a94624784d6c81895b0aee04bf1e791fcf7ba425b0a209bf047cb92","first_seen":"2023-06-30T02:45:11Z","last_seen":"2026-07-19T07:20:51.779643Z","times_seen":15,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":732,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/posts/03-21-2026/shop-9526d-3.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.807Z","timestamp":1784445555807,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/posts/03-21-2026/shop-9526d-3.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 212721\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-33ef1\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212721,"size_decoded":213061,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 74\", baseline, precision 8, 2141x1401, components 3","md5":"da99dee3b3e4867c936f6c9c84ac11cb","sha1":"141f54eff5a364c7d93935a53c0a2a0348dd0eae","sha256":"29411d187c7d5289f4aeb23a72429ed2fb8bd84e543ffdb002b4ccd3c10fcf9c","sha512":"e6722e543633a3b21e583027bee77b6f9105237efe67ddb178c687841310970bc3822828a7b7b628bf6c60929a80192fe71f2670467f4047adf51bcca106e818","ssdeep":"6144:vTQAHzN1t5ymEIwOfREKR2lbyjoLIxfevyYXqwff7F0Gl:vTQqzGmEp8nC+j0gZZw1","tlshash":"c62412a72ce6336ad162f2802c3f55db642877de32a73cd967176a40bc4b301d36b086","first_seen":"2026-07-19T07:19:59.843135Z","last_seen":"2026-07-19T07:20:51.802502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":860,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.728Z","timestamp":1784445556728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://strongway.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:32:10 GMT\r\nexpires: Fri, 16 Jul 2027 02:32:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 276426\r\nlast-modified: Wed, 10 Sep 2025 17:07:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37788,"size_decoded":38601,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37788, version 1.0","md5":"9577af3ccda5f49d71b0dea88b47f1ac","sha1":"fcfdbcb885ebabaf7354b134c44269942ae61698","sha256":"ddb8c66035104e233fc024669183aad3738b6daa16deee2ebb1241bd0f98ace1","sha512":"8f2256872c7a17c968039323f97a1646ff6bc682456621568a4c35f3f8780fa9237fe1c3192727f4f2e19d018bda5614bb197616b81e6ed87cc6683423e0650e","ssdeep":"768:+Ws2cEh6gcFObhrnUzM3jZdJIHnfwa5ZsXkyyIt:bt36FMyzMTZdJiwaXsJt","tlshash":"af0302bf85218f3e577b3d70c507af133c955938e92cea94e3126fa2ac432d90815693","first_seen":"2025-09-11T17:50:43.786734Z","last_seen":"2026-07-21T00:48:54.312001Z","times_seen":22827,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":33,"send":0,"wait":42,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T07:19:14.799Z","timestamp":1784445554799,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: Sun, 19 Jul 2026 07:19:15 GMT\r\nSet-Cookie: _subid=18uumd059v8lt; expires=Wed, 19 Aug 2026 07:19:15 GMT; path=/\n7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I; expires=Mon, 20 Jul 2026 07:19:15 GMT; path=/\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/7.4.33\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":142720,"size_decoded":21310,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1882), with CRLF, CR, LF line terminators","md5":"13b69983e1e986c0904b5545594937ac","sha1":"0161c01988a3967f2d5123ad049db0887d7094c2","sha256":"e5a1372caf54aea7e73bd6b7c60cc45a4f7265ed2bb714f535db24d3e44a5359","sha512":"bb92a2da4e6bd9675971000c736b3f7c904f0df2d93ec5a59236f7784c8fe3b6c82818b2e5520ac01b7b41528df9e9d16c00b8d3e1546cf12843568116247d8f","ssdeep":"3072:U5LtKtL/4/C/O///WfY5P/C/bnZSSslN4LcRffY8VFpiBOC7rywY5fdi/Z1w2kZs:MtKtL/4/C/O///WfY5P/C/bnZSSsX4Lv","tlshash":"15d3645030ea10b512db85ad29739f9af790814be285ce173dfc23ad0fe1d2598dba49","first_seen":"2026-07-19T07:19:59.846312Z","last_seen":"2026-07-19T07:20:51.762937Z","times_seen":2,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":0,"dns":64,"connect":62,"send":0,"wait":375,"receive":61,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/posts/03-21-2026/shop_39f9e_6.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.811Z","timestamp":1784445555811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/posts/03-21-2026/shop_39f9e_6.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 50554\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-c57a\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50554,"size_decoded":50892,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 74\", baseline, precision 8, 800x800, components 3","md5":"bd09541a6871e47e425b09b9c6d395d6","sha1":"10b472e1373136b45e259863003b00b497cfefbd","sha256":"059d06a54d3ef1a499c568501ca473d6cbe0e04f2178830be1164eb69f756da3","sha512":"623623f0c38fec6903cb6cc2773716b00fd0f1cdb4e778df2802253c207d91acd1eeca064d39aac96c9015069cc41acd359bb52d57d8021c5c889d79d6f93b9e","ssdeep":"768:ff2ZYB0OiEuN8h8cGCGBYZ0Lz43WOtRv0JIaXaOV+S58M19cYHjPEYhlq0uG7Jg:ff2yQEhYHf43FR2I7rW1OajPHhlqxOg","tlshash":"c0330244101950b6b20980628f8350cfaf850fa099d1de73eb23fa9f6463bb669786dd","first_seen":"2026-07-19T07:19:59.848727Z","last_seen":"2026-07-19T07:20:51.766064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":799,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/visa-logo.svg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.819Z","timestamp":1784445555819,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/visa-logo.svg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 5432\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-1538\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5432,"size_decoded":5772,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f424fca1d1f079aa829dad315d9b1e01","sha1":"0d282c3345d9dd19357651f82495e6267c0c74a3","sha256":"40e9172073e1c4c57b217e1ec47b28cabc00785250acf039d64d5bd05829cbb1","sha512":"b8182c032a02e32b81829be04ef30a1f251c9dd8b5b43b03f2a69c8c41293339e0c137636df73aa0a3f59563dc37cbcbc418debe6f9628d4fa435d2bcb1bb6e4","ssdeep":"96:ZSNl6SLWEEqJi50d52uK7EU4GxF4wPtmgil0yWEtETMQcaalBNaED:Zyl6SqEUqauK7/4GDU/0yOlEra+","tlshash":"54b188e13200a5f1740bfbb8c625e465772618f97995c5d9c2e62938e84262d8e8cdd2","first_seen":"2025-06-07T10:35:57.081517Z","last_seen":"2026-07-19T07:20:51.782633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/logo-main.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:17.026Z","timestamp":1784445557026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/logo-main.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 18084\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-46a4\"\r\nExpires: Wed, 29 Jul 2026 07:19:17 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18084,"size_decoded":18421,"mime_type":"image/png","magic":"PNG image data, 400 x 361, 8-bit/color RGBA, non-interlaced","md5":"d16dcd43a4665bfd31c1dd71d08b24cc","sha1":"7ca41c032e47c6209f1828010419027b2690a010","sha256":"3f8f5fbf348d5b6f64cd308444609dbb21718f717fe1e533007bf6562489dd39","sha512":"f6c422e3bb28fb944bc39619f0fdba4efb990378ff9f32990cc62e44eae5d2089fd282acc970e0d6fd0e7c9e5516741be885d63dd48e866f79e78dd577ab63aa","ssdeep":"384:uE7L83LoLktfinsUybBa99ecEBXdg6schOh6faOOzgh+16G4SnXkg:hLZLktK8EecUXTs0Qkhu6+","tlshash":"9b82d1c3c2386b875dff19637f2708647b17086f76998ee6a6a2b3bd1039205dc1c146","first_seen":"2026-07-19T07:19:59.779338Z","last_seen":"2026-07-19T07:20:51.764292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/css-multimedia/cookie.css","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.764Z","timestamp":1784445555764,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/multimedia/css-multimedia/cookie.css HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ce2c59-1714\"\r\nExpires: Wed, 29 Jul 2026 07:19:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5908,"size_decoded":1822,"mime_type":"text/css","magic":"ASCII text","md5":"94af2359b37653bc5173bb4bac469d49","sha1":"de3666489efec5c1e8396ea0abd140084d0c4697","sha256":"1f3a62ae2fd5a242f3e5eabeb9106fc69a9e1ad22e6e7e1b5457f2752b3e00d4","sha512":"590cc442ff543365ca574317a17e2cd6cd4f260db450e9ecb618d4c8a4d54650efc60736d211a159067fd2f10d8d19d1a94a73d5069792434e30531310670669","ssdeep":"96:/J/zz8hXu4q9RkL3tnS4gOBi4B+CHDjwCJwY2W06S8:BLQhXuz9qdgOBi4+CHPwCJwY2W06S8","tlshash":"8dc1daaa6af70485765a4074efb5d70133a8821bcd3dddbc7e9821864f882d8dca538c","first_seen":"2026-07-19T07:19:59.865294Z","last_seen":"2026-07-19T07:20:51.79897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":61,"send":0,"wait":72,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/figures_header_69ce29f02dddd1.42379863.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.792Z","timestamp":1784445555792,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/figures_header_69ce29f02dddd1.42379863.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 715664\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-aeb90\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":715664,"size_decoded":716004,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x2880, components 3","md5":"c70ee73907f513a7ba14683b5046522b","sha1":"a5efee294f384847a47ac3f1702373982d15a7a5","sha256":"1bcde013bb6c9bb2805c9f9f4c69dd6fbe7bccd7c180f96329b8e3d687169c63","sha512":"987704b43ce604344cb20d03fd2db1b29bac6b16e48d5fa7b2ecfa185c6707e714fd83f47dc58aae6ac956b5fcfe48d78aa58b89afbdbaa00bebe6eacebe0f82","ssdeep":"12288:r5Dwdz5anFN7bptyzd65wb1o+yb8AWsbwF/ZZ11iEW4CbOcKKFXblO5Umj9YyY:lUeNT865wpujWsU8EWzbOcKKVbgZ9TY","tlshash":"c8e423842c3008c0c45c81b676504f97ed3b55a86e6f776f3c292135af4bddae2d84ba","first_seen":"2026-07-19T07:19:59.867738Z","last_seen":"2026-07-19T07:20:51.778892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":733,"dns":0,"connect":0,"send":0,"wait":64,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/icons_gallery_69ce29f02ddf78.74028336.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.803Z","timestamp":1784445555803,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/icons_gallery_69ce29f02ddf78.74028336.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 189423\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-2e3ef\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189423,"size_decoded":189763,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"e2f4f8ada9b725a99e55d9ff6eab4439","sha1":"1bc4431ee1890823e73623aa1bfa3eec25a13187","sha256":"f839363d6913bd652a24ab9a5ab68a83e46f765922257e41c246a95366d96e58","sha512":"2d1cf69011f783443f843bca5d7aa5a8e70faad5cf84ec3b880b1b78071a051013a287d7036989552d845f3c9d5fd345eaaf771a32e7f19ea5f6a212295d0bad","ssdeep":"3072:BOrmf0SSWDu/Nu2mnjms69gIkQ/lsQOKGe3z8di2EohvEUFQlHy0ZJwELVtIE4gV:BsXWqdIms639OhtlyMUwEpt/fV","tlshash":"a10412f8178c4368d04e55b2c920f78269fd766c63d86e4328a5e199fbf4170746fb0a","first_seen":"2026-07-19T07:19:59.870132Z","last_seen":"2026-07-19T07:20:51.776266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":732,"dns":0,"connect":0,"send":0,"wait":65,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/partners-thumb_q700.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.812Z","timestamp":1784445555812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/partners-thumb_q700.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 3862\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-f16\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3862,"size_decoded":4197,"mime_type":"image/png","magic":"PNG image data, 150 x 70, 8-bit/color RGBA, non-interlaced","md5":"ec90dc2513ae9d3ef8cfd5d9dbd7f559","sha1":"35a823c981adb062725b3bbc897902e879d5aa6f","sha256":"7ba99536463e46bd9123a354f49bf45b97d377b78e8e95ebd42265341f7a3523","sha512":"89f6b0437fce798a9cbfb67945619bd70126617d50bfe53c34ea1fb42ff1747d5b9315e20d160747248714c9be289a9cd6425a257788540d9cc9bb46f9d93918","ssdeep":"","tlshash":"14816d4c75127500f6b9cac0a4d6c66285d30b0015949136b84edc4a2a716fca97f2db","first_seen":"2023-08-29T14:10:49Z","last_seen":"2026-07-19T07:20:51.769879Z","times_seen":59,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":796,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/partners-thumb_q703.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.815Z","timestamp":1784445555815,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/partners-thumb_q703.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 4271\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-10af\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4271,"size_decoded":4607,"mime_type":"image/png","magic":"PNG image data, 118 x 31, 8-bit/color RGBA, non-interlaced","md5":"b90dfc49bfc67f7273deb663f9d71d35","sha1":"2b1452e8068d3c48316cba1ddb1b05e2da8b4f57","sha256":"3f61b2441ccc35f5c93d1b4eedcf72dd83e5732a5c0cb24be157978734cce53f","sha512":"79f265ffdaf0288d8cc2bd00a9f2673bb77544887a7024fa4d5a394b313b3f1c785b8ef2c7b3054bf76b58b87a1b964f65452b42e9d76b003599a98ce6a2d91f","ssdeep":"96:pkSeAsDcba3aBlKk2UboUgrOM8Ddbplr/si4HxjOaMxc:9ZI+1fxhDBLrki493Mxc","tlshash":"48917e72f7833448b2a5cc952cf49679eb550ccd6af0fc54a4e94c1520e0af96f7a08b","first_seen":"2024-05-30T21:53:46Z","last_seen":"2026-07-19T07:20:51.766931Z","times_seen":10,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/js-multimedia/jquery-3.7.1.min.js","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.756Z","timestamp":1784445555756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/multimedia/js-multimedia/jquery-3.7.1.min.js HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ce2c59-155ed\"\r\nExpires: Wed, 29 Jul 2026 07:19:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":30774,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"b83db83a1d89113ee03ab730efa48c7a","sha1":"2fccdd3e43db21bbc8448ed6d6311c4a6eea1166","sha256":"99e691fae5e88eb36bafb24758b35f0f990708295f8f2abe2221891e328f776a","sha512":"10d6f09a04eb135eae12c890be0512ead801e213614505937d1e782d5a6af86550395470ea31b3aebd85695f07a8fe903eda4941e52bcb7278cce02eacb13800","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:vHNwcv9VBQpLl88SMBQ47GK7","tlshash":"1083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-23T00:47:02Z","last_seen":"2026-07-20T22:32:53.41625Z","times_seen":9672,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/css-multimedia/bootstrap-icons.min.css","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.760Z","timestamp":1784445555760,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/multimedia/css-multimedia/bootstrap-icons.min.css HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ce2c59-14f77\"\r\nExpires: Wed, 29 Jul 2026 07:19:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85879,"size_decoded":14012,"mime_type":"text/css","magic":"ASCII text, with very long lines (65350), with CRLF line terminators","md5":"90c6ea83dbdf2b22d1f5ea20b281fa7f","sha1":"ce2b2ccc57239c0936a7e1e77b6460d7b3679008","sha256":"240e7d6be7423788aea5668535d25299358817bfb2164a2555435050c31c1314","sha512":"0d0c0ccfe9dd835b0630bd618a659ee875fb111bdcf4c9388f34d966ba4bdc8691b93b5720d8ef3302081869a57e8356d2a70b11804a67f26062f9b72f604aef","ssdeep":"768:VPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:NrpEKt4moUeqfZbc5+XIHZz","tlshash":"7483fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-08-19T20:56:24.899302Z","last_seen":"2026-07-19T07:20:51.783203Z","times_seen":141,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":61,"send":0,"wait":135,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/posts/03-21-2026/shop-2026-03-26-5.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.809Z","timestamp":1784445555809,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/posts/03-21-2026/shop-2026-03-26-5.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 236921\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-39d79\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236921,"size_decoded":237261,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 1024x1024, components 3","md5":"1bc2da09404d1a296425c6fb8c14b756","sha1":"7f4833dffc98e7026f88cbf02c94812b795a7ce5","sha256":"fb0bd7d2f10415767682a783ddbceee98fdb614e979912617f14c94c0ca70bd0","sha512":"3fa6d91e233edc73215ef66e8d72029e117faab566851c45ca607a746c8435c43aae463345a64330035ae39c1787962fe2f44e8ad3d9011308080a2688c6ad6d","ssdeep":"6144:lJAiaRZR7tNhiemgyS8KTJvHpEqEVdnC8Z0JbDNhveHSvZu0P:lJCRtOS1TBJEnHC8CBDf5","tlshash":"c2342366d0b69e4045b760969102dda6d2d342ab5f8037dd46c3fdadc43ce91be2ef08","first_seen":"2026-07-19T07:19:59.89891Z","last_seen":"2026-07-19T07:20:51.789531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":731,"dns":0,"connect":0,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/js-multimedia/cookie.js","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.766Z","timestamp":1784445555766,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/multimedia/js-multimedia/cookie.js HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3297\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-ce1\"\r\nExpires: Wed, 29 Jul 2026 07:19:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3297,"size_decoded":3645,"mime_type":"application/javascript","magic":"ASCII text","md5":"78f211f7fc7f548dea3cc5dd25872ef7","sha1":"d0328f154ce1ed9c8a706d13d73e5a5c6c26661c","sha256":"6edd4fc3a89439788008d82bef25cb46e3a6621e59927d9e3800efb65d5b50bc","sha512":"844ba0699255ac026fa9937202f96842d6e56c5ed579df1ce382590ce476fa5a135103a452acf89206a8d6617d81f5878ecc8ac10ae181cfde33918c9f8e52c8","ssdeep":"","tlshash":"7461750b61f3597613bb20be8bef1b5e7131121b2215cd643c6c52185f80f9961e3aee","first_seen":"2026-07-19T07:19:59.902951Z","last_seen":"2026-07-19T07:20:51.783767Z","times_seen":2,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/multimedia/css-multimedia/bootstrap.min.css","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.761Z","timestamp":1784445555761,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/multimedia/css-multimedia/bootstrap.min.css HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:15 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ce2c59-38d68\"\r\nExpires: Wed, 29 Jul 2026 07:19:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":232808,"size_decoded":31469,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65338), with CRLF line terminators","md5":"1bcf7ee45ab9975f9b9eb016fb96771a","sha1":"69c92abc829b77afbb0638a36f1ccdf25f9c94bb","sha256":"b0a21045f42b8884ae43d97fe386f5cc77d09e21972611a89d5b41d8b952b88b","sha512":"d5483fbc1a6639618df13146f5e7af6b35bfe38d63862a8b4c296caf4b7cfcf82a7aab124b26f4bee005977836214c42596a24d7e630dfb51d9c8f09e5879c23","ssdeep":"1536:Q9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41q:7nIw98fbV986I6V6pz600I41q","tlshash":"1a3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-05-29T20:38:41Z","last_seen":"2026-07-19T07:20:51.778307Z","times_seen":1288,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":61,"send":0,"wait":131,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/mastercard-logo.svg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.818Z","timestamp":1784445555818,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/mastercard-logo.svg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 23116\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-5a4c\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23116,"size_decoded":23457,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44d4a3fa2ed8919bcd932824a521fa80","sha1":"d3b6e78cf93ac77d913830be61aeef458ed969e7","sha256":"c7b777cd14ae87680a12eb9571b39e9d12dedfc74886c8300f31e9b0fb21240f","sha512":"5e7d6b87361d6e662a5b4dc2da23766ccf55b64b09d535ba181ad442b53032a6c40e79cf33e3ac4ae987ac9f6123548047e1e984a529a2365654cb9b74b7277b","ssdeep":"384:LymfAvslaG3nCYAnc0ser8XS1py1Afz7pKzZvinvaRRw15W2xcX2:LyWOslmPJR4Ky1Ast+SJn2","tlshash":"53a2d6e6a3e5e2d4f505f3f44b25a8757f4b24fa3b12ca9c87b56d90eb0101c4988cd1","first_seen":"2025-06-07T10:35:57.055302Z","last_seen":"2026-07-19T07:20:51.770434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":260,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/posts/03-21-2026/shop-b0a8d-1.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.804Z","timestamp":1784445555804,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/posts/03-21-2026/shop-b0a8d-1.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 51340\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-c88c\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51340,"size_decoded":51678,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 79\", baseline, precision 8, 970x970, components 3","md5":"ec020ec9d6712c4d08d235a14d46de0f","sha1":"8ec5ab02faf07d67c06a74ef351049fe254711fb","sha256":"eb860d13e5c8e168b80e2c7959615ab8ee19320468c975afde4e4eebf8aac918","sha512":"3ab9c1cbf97e08eb11391c6bae5126d42d0758174b266f3d523945af48d7b0901f5dccc140519390e13a1537fb07ae0f83b16fc7bd516484918886716c7d0834","ssdeep":"768:VLMNREFc6RYL5rRCqLsLVmbxeDNv4w4YnD249zquDF5/C+X2OFaFAYnTf/:VLMNSnRZqT9eDFPmUGS5/C+X2OMFAq","tlshash":"0433c3579c499b93607853e97d034fad2e0a3f4dd8812aff00621f8b7e252665c9f06e","first_seen":"2026-07-19T07:19:59.908038Z","last_seen":"2026-07-19T07:20:51.788807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":731,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lora/v37/0QIvMX1D_JOuM2T7I-NP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.736Z","timestamp":1784445556736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/lora/v37/0QIvMX1D_JOuM2T7I-NP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://strongway.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:44:19 GMT\r\nexpires: Mon, 12 Jul 2027 12:44:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 585297\r\nlast-modified: Wed, 10 Sep 2025 17:03:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":17248,"size_decoded":18061,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17248, version 1.0","md5":"777d741345ba899c7c01afbe40540f5f","sha1":"5261de59dfafc3adcebfcf39de4d2b03a8c5c458","sha256":"2df52199eac56e2ec7a735e609bb151bdab79422c3e73948f4b6580c66bb5a50","sha512":"65ba9bca87dc14dfdc88a62da1842f10fd062d723687905ec3801a5b74ebc7d39b9cbf5548980b3fee7f2ae6e2dc12c9421a17c7a47bc704f477f7152105a932","ssdeep":"384:AINGaxRZx7ed4az+Zc+Vs6CQ3JRkN0z1hF1a7VDqWBAgmMx+ZsHk+o8a:AIN777JZB66CsG0z3FWNqdDMxu71","tlshash":"2672d151d702e63ca84011b982e6dc33e47b57caea5456131bc0ae1ffe733d252691db","first_seen":"2025-05-30T08:10:59.47292Z","last_seen":"2026-07-20T23:49:54.587698Z","times_seen":3617,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/depictions_header_69ce29f02ddd91.04546660.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.790Z","timestamp":1784445555790,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/depictions_header_69ce29f02ddd91.04546660.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 577384\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-8cf68\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":577384,"size_decoded":577724,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x2400, components 3","md5":"017b59305583aef57c206736c0252ae8","sha1":"d7458db78c5a655eff40f4c5afa3a944ad4fcfbc","sha256":"9e539066f404f1ce23a7c776224330d9df3f7d1cead8317b5d65e76a41cf61dc","sha512":"79b4ef1d22170abc5e36f59e7f921ebf030680b2fd1dce9462aa3f9d2fd76a44bef27b56b42c6d4bc44b77d17cc09bd796ec3f3295ded760d19db18592c48428","ssdeep":"12288:F7JN9D8VU5GI++yfe+9jt/1+9BrPR9b+yk8fw+Yc+9cmDZRXG2A6ry:bN9DD+re+9B/1KxPRx3wcmDqury","tlshash":"fec42331c1f17492eb70359a576eb76c276d1aa08265973b578b38f5f0c0adea630d0c","first_seen":"2026-07-19T07:19:59.912476Z","last_seen":"2026-07-19T07:20:51.761423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":70,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/static/images/transparent_q950.png","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.695Z","timestamp":1784445556695,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/static/images/transparent_q950.png HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/lander/umbryxduh_ru_wp/core.css?6d5fa\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 267686\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-415a6\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267686,"size_decoded":268025,"mime_type":"image/png","magic":"PNG image data, 1564 x 1043, 4-bit colormap, non-interlaced","md5":"d79864cbc9ae46732f8614a8dee5ecae","sha1":"2fefd4bb9fb86264b5e54d6b640dca14c98cbade","sha256":"0ef56e2ba1cd16f0ced9d7169842da94d51a8928c6ff4dec905b03edabd8731a","sha512":"d9afcec501c45adaede8e09493f5602dd965bbb2a2d09802a82a5aa700b774d97b6b81fb9979620ebc4eca01838a5f43d047dd418717b7468d0cac25c1b4361d","ssdeep":"6144:GVlPEMLzsl4eHLZq09CwlfNHgGAyXg8p3P0ty2L3V7lh:GfPVslrF8yfxgGAbi/0ty2L3VL","tlshash":"ba4412dc45881dc561881970a0750f5e73c0a624af95e8f4f2b6e1b7ba9f118e0b8bfd","first_seen":"2023-12-13T14:10:49Z","last_seen":"2026-07-19T07:20:51.791755Z","times_seen":13,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":64,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/figures_video_69ce29f7f01ab9.24330479.mp4","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:16.850Z","timestamp":1784445556850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/figures_video_69ce29f7f01ab9.24330479.mp4 HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 2671682\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-28c442\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Range: bytes 0-2671681/2671682\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2671682,"size_decoded":2672054,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"499efdc4d53539a28efe22d82823a2c4","sha1":"a87b06a6511407d0a4e90fbe2a57f38d2553657f","sha256":"3f3840f3ae07d4b9129e8c4ef37eeef25ef7faa76c25d2e97e1c35fa3062d212","sha512":"84518ef483be2d8b9508f65f89b2a27ee469c21b7ead8b668880f32ad449cce570caecfe02024bbf68ad28e0af929fa5e163f2e3f3ccbd96527d384278added8","ssdeep":"24576:LF7Uk7dPvOs+7otrP5NgPESalI+G6OZNo1WwAD:LppPSctrPf8BalI+GHDozs","tlshash":"6625230f6359b846f53b89b450720ff1b35aea0e23a61a4938b5cb3e59eddd432cd094","first_seen":"2026-07-19T07:19:59.914365Z","last_seen":"2026-07-19T07:20:51.780432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/illustrations_header_69ce29f02ddce1.01624921.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.786Z","timestamp":1784445555786,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/illustrations_header_69ce29f02ddce1.01624921.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 172668\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-2a27c\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172668,"size_decoded":173008,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x2880, components 3","md5":"667ba0d6ef3da3e9e634942697a83f70","sha1":"c75c515fac7015f7844753c3015ce0c0720e628e","sha256":"801623d7bb3ee6c3627c5eb0efae0bc393002a3964f9fb18aaff0384ef4f6dd8","sha512":"c2efb53fa7d219dd89d0d87e47efc8ad53ff3208747d069b582fced8318497f476fd3acb499edee8c551f48708ecaccb371d8a8ca8db6e45aa232c7024edf4ef","ssdeep":"3072:iqQ++08P8iK0auOrkfSDKBaICsN+sjadpmOJNaeEkHal8gvG5QLKSn:iqAR8TxuLKKBavo+dkQNQlvvCyn","tlshash":"c4f30273cf8bb8f3d0ec937081732b1a7b351b71c349594b628b9a30b9666953c685d4","first_seen":"2026-07-19T07:19:59.915586Z","last_seen":"2026-07-19T07:20:51.77216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":64,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/depictions_header_69ce29f02ddd43.99823205.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.789Z","timestamp":1784445555789,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/depictions_header_69ce29f02ddd43.99823205.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 221168\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-35ff0\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221168,"size_decoded":221508,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x2400, components 3","md5":"2ade32d5baaec44b0511d99d68105a26","sha1":"3d22b09e1e2dc8b732660655bfcfc8488d07ffcf","sha256":"f99328ec61986733641035a5e87adc004eb0249072f0d68dd6bb2d6fa34421c2","sha512":"15419d28e22edf986240b2285e9c4bef0aa6c1ffb563fe2dfaa37e19415c00d438ee46289dec412fdc38f61ff2c5363b627623603d924cc6704c16bec9a6f74b","ssdeep":"6144:v7ZQc0yb28U5wUmclRqlKLQxFSKzX4/eD/QUfWTzU:v7ZQ1yRhcfqQkxsKzbrTWg","tlshash":"862412b9bd069a6df36d3276046c3a51497298003077c5bc026c2f5a6b3d17eef69b0b","first_seen":"2026-07-19T07:19:59.916649Z","last_seen":"2026-07-19T07:20:51.78775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":61,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strongway.icu/lander/umbryxduh_ru_wp/images/icons_header_69ce29f02ddc60.34476018.jpg","fqdn":"strongway.icu","domain":"strongway.icu","tld":"icu"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strongway.icu/","date":"2026-07-19T07:19:15.784Z","timestamp":1784445555784,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"strongway.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 08:44:45 GMT","end":"Wed, 02 Sep 2026 08:44:44 GMT"},"fingerprint":{"sha1":"10:A0:43:C3:47:4E:C1:43:E6:A9:58:6E:35:22:EC:73:88:43:AE:37","sha256":"2B:D5:9B:5A:4C:A0:95:23:EB:D5:AA:8D:2E:4C:28:1A:CD:06:A7:36:84:1D:D6:A3:DA:17:86:43:DA:4A:FF:35"}}},"request":{"raw":"GET /lander/umbryxduh_ru_wp/images/icons_header_69ce29f02ddc60.34476018.jpg HTTP/1.1\r\nHost: strongway.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://strongway.icu/\r\nCookie: _subid=18uumd059v8lt; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIyOTJcIjoxNzg0NDQ1NTU1fSxcImNhbXBhaWduc1wiOntcIjg3MFwiOjE3ODQ0NDU1NTV9LFwidGltZVwiOjE3ODQ0NDU1NTV9In0.3HqoF5Zs2GlBEmjqDzMunWzWPvzRr8j5rQDvuDjdu5I\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 19 Jul 2026 07:19:16 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 398399\r\nLast-Modified: Thu, 02 Apr 2026 08:44:09 GMT\r\nConnection: keep-alive\r\nETag: \"69ce2c59-6143f\"\r\nExpires: Wed, 29 Jul 2026 07:19:16 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":398399,"size_decoded":398739,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"d7a067d6c599fe3d25da22e31d07a6dc","sha1":"843354566d0dc3c71faa2f5335cb5c2b4f964b4a","sha256":"ba16b59dd0db2098e747bccefe414347ab6f24398a3370088f712737c8012593","sha512":"53e689645048aa780531a5e25fc12645ce235a517a1aeeb1cff58f0cc1cf6c091cd9d563e1070eb9e2d29f3d8af5136019a68855de176aa0706df33212c65beb","ssdeep":"6144:pMwP5kTBnk+HDyBCb/PtFR0zPFqIbKDHwMyZdXJumr+XPgSyF5+G2gV3U28l2DiF:t0BnPWBy/PD2oI+wMyzZkfyPd22DiF","tlshash":"9384235bc5fc2f52c522613413237d3d2831341917c649ee89fa4f55baf8a2fe684e62","first_seen":"2026-07-19T07:19:59.917819Z","last_seen":"2026-07-19T07:20:51.771294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":62,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"strongway.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}