{"report_id":"2e2656cb-f365-461f-ac07-ccfe12e64475","version":0,"status":"done","tags":[],"date":"2026-10-07T20:42:36Z","url":{"schema":"http","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":0,"asn":9123,"as":"Jsc timeweb","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"title":"Отзывы реальных покупателей автосалонов по всей России","dom":{"size":60397,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11742)","md5":"e227e7de48202da2a8016005a3291257","sha1":"ec97bf1a1a24f119f2454721e0e6dc64fbcc47ad","sha256":"92bea44ead3ac1bb9569e4dd837611ae3d60f5ac8ea0eaea53f8d3d9c7fdf59a","sha512":"03164fc0868a8432298f993d024fd9e936e67f5b467bbc9aadcb6f502969637a8e3d6951f03f90717e49d820323053906237d1fd9eac32d750cc7595f3d8dd70","ssdeep":"1536:CgM3M8wd/6gnkt+f2QWDo32QsDS32QkD4l2QrDH32QOD+7vf2QiDI22QdDjA2QkB:CgM3M8y/6gnktGHVfi","tlshash":"e7434172948a287b4623a5c5e9107b5e30e3427fef73c507a7fa5e6e5ae3c61cd20406","dom_hash":"domhasheb4f1d7027e12d0cf08e2c9b287f5659","first_seen":"2026-10-07T20:42:47.268246Z","last_seen":"2026-10-07T20:42:47.268246Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":0,"asn":9123,"as":"Jsc timeweb","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T20:42:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"autosalon1.ru","ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2018-04-24","domain_rank":0,"first_seen":"2026-10-07T20:42:15.533246Z","last_seen":"2026-10-07T20:42:15.533246Z","alert_count":74,"request_count":37,"received_data":745416,"sent_data":26598,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":537284,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/d95d4967b4d2ca6ed0b2986e684c7f1009077352.js?v=1750152339","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"febdb915ec2bf662b58d507c647961b8","sha1":"11ed1dc3ca9ce7c832e1f8fc3981a8f14e4e9b89","sha256":"25b1f430db064739334c97ec2a409c5aac903376cb47fba007a1eed495c8d581","sha512":"4aba440f87d85b0162866a91f432603eab55d64a385d1ffaebedae9a9ac547d08bc86f4e2b38a8197e775e05131f29bf118d9ba1f010183e471aa4a43d88eb3d","ssdeep":"","tlshash":"77f04c06d61a64315f97ee56ec205124e151f1458de73cb563d0c5c9c6b141e02debb0","size":555,"data":"","first_seen":"2026-10-07T20:42:20.836119Z","last_seen":"2026-10-07T20:42:47.297781Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/d38a62db7861da7dd77adc5ae3ec2fb29b35f000.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42cc231ba0bbd66e2f19e851374f02d","sha1":"f19fae31745c4f640aa2bf3ceec0795151789731","sha256":"e0e5d02eaabcee4ccfaf779880d31e623dd50642a91dd67e58ebd5f393b8adec","sha512":"cea679deb8153cce4394f311d49fe1918692fd9ab7f4b629f1557d279e854e3538b537dfa445ae618d0d2a5e450ee03574ee73d272d75f8d6a8091cad7961425","ssdeep":"","tlshash":"2221e46cfb18bf50116b25b9487fd60223347d1ec981d505c90489fe19b860af782b5f","size":1134,"data":"","first_seen":"2026-10-07T20:42:20.881809Z","last_seen":"2026-10-07T20:42:47.303471Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3df2c7de1291b49b78f07000d163d709","sha1":"8c47e859eb4d7eae693051d0c7989ed2cffe3b83","sha256":"17629b1ee8fd4f066d788eb4bbb61775fc0ef6fa1a9998254097874523e685b2","sha512":"58931d1904618a2db7f88dc3001282634f67d660e4c3221be88a170e4a61b071c9aab5eac058ff23177f5b34f4a6e4356e6f16c0b5433bdb2ab39f1e085f8b0f","ssdeep":"","tlshash":"912135b51a96a63189f5d13d9b1de6d4763f0c4f1005be0945fe4c508a57eed0821fcd","size":1256,"data":"","first_seen":"2026-10-07T20:42:20.914327Z","last_seen":"2026-10-07T20:42:47.360389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"52725f979a3f94de50aa686a2a1b2710","sha1":"1470b34610fbb631b121c6b2aa637afb47cd3024","sha256":"211782ae4788838d3f54283e4999c89021df1f110072af81cb64132a5859f4b9","sha512":"2d453f3228ac3bac84a83e56d44397804a61d264973a4c3837a76a96479b37cc1a4a4f5e18b43e10aa90aab95143c4feac1f87e2e2a1c0f702acdc5c83882d2f","ssdeep":"","tlshash":"5e1187397fabfd3550f3d36267aef310a33a1713a013e0200aad9bc8c910dd610a6888","size":1102,"data":"","first_seen":"2026-10-07T20:42:20.921677Z","last_seen":"2026-10-07T20:42:47.361496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"04ab45790119b30b4fb5955bd28894b0","sha1":"b1505d2e5ca28273c3840799019a481b10c33671","sha256":"b6eca79a07730d18d178f386ceb2fe71ea913b8182fbefdbf8c4832f2df8879a","sha512":"1646cf4d3a9618f0e538b7896be4be6453cdb179b6c246b6758c059fc66b6895d1da0b66fb5ac6c2671443bdcf2ac2161fc9ea033f4ee09cc4ad8e5f38ce409a","ssdeep":"","tlshash":"3ee0263878d80955961b3715ba3607543c74f23262a28058009cc1f03b1182751efafa","size":322,"data":"","first_seen":"2026-10-07T20:42:20.924663Z","last_seen":"2026-10-07T20:42:47.374696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c69d2e7d3cc197985d7b506bf0e25b8e","sha1":"df9dfe70dbe6f8f9de23dc985f108a787259c56d","sha256":"acadb736f6ab96ab151bb5354ebe53f5b748f9f8b617debde159e878eef4b2ad","sha512":"c388ce28a73dc424919ed38d4de6299352b778378625f9918b97d6f8d87b1fcbc3d8a1f870daa135c795ad161c15bfb9b8f125739c8f115f9ca420c958e4fe0d","ssdeep":"","tlshash":"f9c09bbdb1c8d17c01f175769c375b0d3d952901365ef055d85c43b25fb40a55d1245e","size":130,"data":"","first_seen":"2026-10-07T20:42:20.927443Z","last_seen":"2026-10-07T20:42:47.381902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/68f9a2ab3e50033246d858c646ac25a60fe164b4.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"703d91468201d2fc31800ccbd3e2eed3","sha1":"97468cd60afaa5732696699df3d76d55e4007a89","sha256":"c2808823ffda75abfb875c8cfdbe07f9464063d2a134569adc55405ef617faa0","sha512":"b4b3bcf749fb6ecdbdeaee691af0302f25240d2009c59de788349e9637ab18904ca0e537465bc31a246584315d26a48325ea44990fc8a05685e826377c548b9e","ssdeep":"3072:EoSmxDYoWQdvjvenl63o65dkjwFIzHHQV8BU7tn:Eojco3k8FIzHHQ9n","tlshash":"74d309edb645207e93f731bbb07b0b1eb53a9656480c9041e16848e83eb8d05d1abf7d","size":138805,"data":"","first_seen":"2024-08-20T12:28:57.004892Z","last_seen":"2026-10-07T20:42:47.344259Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/73f95356add0be464b8c2a4386c251c1eca2e53a.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"033d789fcf39852bd238921c712b4574","sha1":"cec94949b7ba543eec9b69f506e97e5388ef77b7","sha256":"66a8cfca20943039df0816580790711de284d36ea938c6351d7544e003868220","sha512":"2c002d8c3939efc7d8b309d9998e7e437ed8d8157b9cee103f3ed1b90d0fb279077b39170a064edbc375e40617c0b468453f17785a8bd6d066f24ed302dd74dc","ssdeep":"","tlshash":"94216e49f70c14378df286fbcc9f1bc06d0735cb5400285d2565844a8fc895a5ee9fa6","size":1424,"data":"","first_seen":"2026-10-07T20:42:20.850613Z","last_seen":"2026-10-07T20:42:47.319021Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/2fa474dc159357998bc2082abf31799ecb534c40.js?v=1724663330","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"410ad95b9190f0292e656d44ae4747b8","sha1":"9bf5ecf155b031cbed1e74312bd356fc5aac1a81","sha256":"0ddc2d2989c0286937e4f924d2d1896044d4e05bbb11b396c83f42ed7a61dc7b","sha512":"b8a098df75773d472c475dd26cd9b5896aacda625486dadc09e0d8ad617361c4460aa4b2c0721e658af09497670b9fd4fb3c4ce00d5ee2b4bd546d8b49a231eb","ssdeep":"1536:FKJrfGA4FDE8Ng1sSl43Oa/BlxvHzEwAEG+3VN3/KCZP+pBnTEP2wmsywYv3APMa:AJtOZNvowEwAEAjBnLwmsyT36MRlrYP","tlshash":"bde3e889a221b57646e316db93e4c221b3b54540b40ac8f470f94c9f597ec9813feefa","size":150031,"data":"","first_seen":"2026-10-07T20:42:20.852996Z","last_seen":"2026-10-07T20:42:47.296493Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SPM5K3WN59","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b76cb6dfa308095f336006d80603a214","sha1":"317ce8fcbad653fdb7294627d0292070af5fba6f","sha256":"826c93219c7090df78f508620e8dcd0d9b9a7cf3ec9a0ba12b881464fccf383b","sha512":"5719834dabd72d390a054c76836aa7545b18acd0284127bd6e485a605dd1a500e5d524bdb56a1177956b834903843499838e572d2d2410cfc9f2fd1d70a355dd","ssdeep":"6144:4ocUrtyDetGl0BCveZNAAycBcNMMb0Er533QN3DsxXNU4m9kpp84A:wDeq0ByeYnE3DsxXFm9YOb","tlshash":"74b409ce73c6742293a6f578903f01cb657b29a2b45cc89ab289dce02d3465a5173f7c","size":536680,"data":"","first_seen":"2026-10-07T20:42:47.352726Z","last_seen":"2026-10-07T20:42:47.352726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/b44fc3295eceeeeb8629ddb67831d54f09b229f3.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"86261c81f6a9be4ad85f61bdc431965c","sha1":"f62a649407c1e24229b78c7a90ee8d66883b00c0","sha256":"be6229b7ee572152661319e8dcf410fcf793e810ebeefb6145d6b7b24f1deff4","sha512":"aa9da163a4da9bb9d0e1a424ed840f845a296810fecc89f731f8087ed4fd9c57b8ceb73c96e5c4be800b5faf99bbf4709e76740d70f2500bbed9a99cb03ee507","ssdeep":"192:chUcazRfRlsC2N9Pd5MxqrMJwSeWPAD1jV1pHTeSGrolLT:GanlmLj3XHHlLT","tlshash":"b9f1b615f702bcb362fb623f976f162915765187a80fcc52b91858c65f78482c833e2e","size":7535,"data":"","first_seen":"2025-11-11T09:17:07.138501Z","last_seen":"2026-10-07T20:42:47.27333Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"DOMContentLoaded","filename":"https://autosalon1.ru/","line_number":73,"column_number":9},{"level":"log","text":"Fallback load","filename":"https://autosalon1.ru/","line_number":120,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/b39eb8b86fcbb472d7710bae8fa626031d16ad23.css?v=1750674332","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.733Z","timestamp":1791405718733,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/b39eb8b86fcbb472d7710bae8fa626031d16ad23.css?v=1750674332 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 23 Jun 2025 10:25:32 GMT\r\nETag: W/\"bb02-6383aa1b6f1ba\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47874,"size_decoded":9936,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (47853)","md5":"7c03358fbfde4b0c02facadb296cb639","sha1":"14cabb83e175cbad08118c4a5fb1d7fc284cc4e3","sha256":"e80aabe0e596ac04f04aeb9b24c0aeda3212ad4e4b586b1c1df27174d6c0aefd","sha512":"7a5c3808e73fc6f2fd8b31e8e989a08a0a02133827f80424fd17952bb611368800736640ed8cbdba3616b42d244a38448a53a5933c4468cb50db4a4beee537d3","ssdeep":"768:Ntm33CnJwAFjdnUF8xK3nklKHkFbOwoRoDCraxIKe2uZdQ7GpfsxdiAFzV/+FRqm:LmqnUF8DxoRoDCrWIKe2uZTz","tlshash":"d523c92396d5105cf327c667be84f39c35206672d30b9aeee925d624cec72a905b3b4c","first_seen":"2026-10-07T20:42:20.904737Z","last_seen":"2026-10-07T20:42:47.271833Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":62,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/b44fc3295eceeeeb8629ddb67831d54f09b229f3.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.739Z","timestamp":1791405718739,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/b44fc3295eceeeeb8629ddb67831d54f09b229f3.js?v=1724663325 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: application/x-javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 26 Aug 2024 09:08:45 GMT\r\nETag: W/\"1d6f-6209278e4b4ab\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7535,"size_decoded":2879,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1368)","md5":"86261c81f6a9be4ad85f61bdc431965c","sha1":"f62a649407c1e24229b78c7a90ee8d66883b00c0","sha256":"be6229b7ee572152661319e8dcf410fcf793e810ebeefb6145d6b7b24f1deff4","sha512":"aa9da163a4da9bb9d0e1a424ed840f845a296810fecc89f731f8087ed4fd9c57b8ceb73c96e5c4be800b5faf99bbf4709e76740d70f2500bbed9a99cb03ee507","ssdeep":"192:chUcazRfRlsC2N9Pd5MxqrMJwSeWPAD1jV1pHTeSGrolLT:GanlmLj3XHHlLT","tlshash":"b9f1b615f702bcb362fb623f976f162915765187a80fcc52b91858c65f78482c833e2e","first_seen":"2025-11-11T09:17:07.138501Z","last_seen":"2026-10-07T20:42:47.27333Z","times_seen":3,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/images/logo.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.753Z","timestamp":1791405718753,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /images/logo.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4750\r\nConnection: keep-alive\r\nLast-Modified: Tue, 06 Aug 2024 05:36:11 GMT\r\nETag: \"128e-61efd2bd29f8b\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4750,"size_decoded":5028,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3","md5":"08cb6e0e00d9ffca017ad51c94360278","sha1":"f22f9dbc2ad85e6ebb76b33d7e1bd6caa3ff8c12","sha256":"a59e5f7987f33cb1ce0339ed83a9fecc84a7afb65a46645d4f5ef7019901fdae","sha512":"dd32fc64f0dd32dcd8b38d2b11d91b9469e4755e42c47488c9e3082f9081e884c74c340dd150f94c8a5dd27a065aa626883547139ee62efd3cae494532cd41e8","ssdeep":"96:ZEdYlBI7Kz1gs9zLstIT0tqnzJ9HvEAi51DOGNKs2/q+qCbZAzfLdBOLY:ZyYjI+icst4Fzfc5NOv/q+qCFAzRBOk","tlshash":"54a18e065e11bf612c1aa6f8320981acc9f6f586bcd3770d2f58c2b4ca180ac235f6dd","first_seen":"2026-10-07T20:42:20.838503Z","last_seen":"2026-10-07T20:42:47.274611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__1244033-2072-12440332072.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.977Z","timestamp":1791405718977,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__1244033-2072-12440332072.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10769\r\nConnection: keep-alive\r\nLast-Modified: Fri, 06 Feb 2026 12:42:36 GMT\r\nETag: \"2a11-64a271fb3651e\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10769,"size_decoded":11048,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x247, components 3","md5":"bf0a9b94b167e3345a95d61ce10f7f57","sha1":"247ce5e370679829ad5ac86b93d9478e048a5f20","sha256":"c6b17327538473dd609a3cd728426eaa9fe17e1f83e0c5f8426c5a76c4f215f4","sha512":"90f5bf700590ed283eaa66fb4d4cbf189578a45970974d2ae69d402fc4c8425ebe1d3574952ae8c0090183bd8ab37cec1313b6a867e0b1e69be1c775b394aa5b","ssdeep":"192:8lSmWJUq7jYpppywUonxJvLIJ3NMpS+W5B73jnZCc8zDgcxKtHhxg45/a1CiY9cg:1ukjT9gbvLIn2w53FCcEKtRa1Ch","tlshash":"1e22b02106b70f0edf27bd61992f073d8d974b9847cd260938a52a98c4af4d59e22f24","first_seen":"2026-10-07T20:42:20.857575Z","last_seen":"2026-10-07T20:42:47.275636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__310284-1577-3102841577.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.985Z","timestamp":1791405718985,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__310284-1577-3102841577.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1492\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 10:57:22 GMT\r\nETag: \"5d4-6383b138698c3\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1492,"size_decoded":1769,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 83x83, components 3","md5":"6a0a50427d0040d5b3660ce240f5c6c6","sha1":"ae09f4c7c891e8c0372c0ae47bba3987aa974274","sha256":"c00807de707b6231a8d132dfb84eff97f894811f8164c68c9ca1ab0296f7182f","sha512":"59257111e92cb382bfd26f91bd227beab0184d444724fe24d51b048cc10651050bbde5b21e28692714b67cd858580aae6a09434b49096a312fce3a3083648373","ssdeep":"","tlshash":"2a31e9a0564ace92fb343f7562ff078ee5e3bf9197113704864c927e6a360d89d55310","first_seen":"2026-10-07T20:42:20.821256Z","last_seen":"2026-10-07T20:42:47.278036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__704324-1578-7043241578.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.994Z","timestamp":1791405718994,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__704324-1578-7043241578.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1255\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 10:57:23 GMT\r\nETag: \"4e7-6383b1395bbc0\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1255,"size_decoded":1532,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 83x83, components 3","md5":"725a5b631b4957576a48d6e1be994e11","sha1":"5b9484877055656ced1a7c05b1a2c4a736eb2718","sha256":"704a1385a431e8207ff093642b175c8868b282599583b28dd3bc27301586d818","sha512":"482b673f14455cdd317c142f621f8ab54bc451b161fa7687ebc203d84198f905bfd170cdfcbb643f8a00e822d44d628bd1244890ec52afb4293ef2acf30b86b0","ssdeep":"","tlshash":"5c21e7031416d832c69621b868f7174df6ab644532a40315c12cb7fb9d2fbde19c9701","first_seen":"2026-10-07T20:42:20.872653Z","last_seen":"2026-10-07T20:42:47.279616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__1084918-2029-10849182029.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.998Z","timestamp":1791405718998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__1084918-2029-10849182029.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1193\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 11:23:49 GMT\r\nETag: \"4a9-6383b72285a3d\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1193,"size_decoded":1470,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 83x83, components 3","md5":"b2ff93a7df84d4e98c7eb6e909f555cb","sha1":"efc4931ae2f7d70baad9cd21dd5af68f81f5d83f","sha256":"5715fa9a80ee790f921ddf23e00131bc802545ba126ee3b0c28750220d7b73c5","sha512":"5ad73e5cb81b910e9e54b8793420588235e693b34448900103b00b626d660afacad64856ca61f49a301e635484fd57704c0d2263b07c21f15d516e500d5c7e49","ssdeep":"","tlshash":"b4219a167f48de18f9793772c8790f3dd602e241ec010619916898a996626e1f4307a7","first_seen":"2026-10-07T20:42:47.282547Z","last_seen":"2026-10-07T20:42:47.282547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__904683-1597-9046831597.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.974Z","timestamp":1791405718974,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__904683-1597-9046831597.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9849\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 10:57:51 GMT\r\nETag: \"2679-6383b1541e4cc\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9849,"size_decoded":10127,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x247, components 3","md5":"8e31e9a82fae8fe296a1a2b49977a76d","sha1":"19c64026e7d30a325b100baa75aed5008e4bb30b","sha256":"b7e05d9e724119241c92cac8e0c90b87d2cfc62c6dc24aa2020eb1fd237ba0db","sha512":"cc2c2f9c4e68c267c4259bfef71505dd7639a93658109c388923239fd81eb0a09867975747d6cf565bf5c54841471fd09228afcd69a7db3e1ab97daeae0a252d","ssdeep":"192:bM7YVP31mAs3NBkrpYOcc3uFXdYzGvHjIJMdlg9UGxRyb7aOwVMy20wK9Qfmz7rr:bMqPG9BSX3u4zcxrg9UGxRyOR20nQq3r","tlshash":"5412bf890b100192d70f4460d59e1bfddeadf59a416a1327d49d1f6282680eefd503e9","first_seen":"2026-10-07T20:42:20.813861Z","last_seen":"2026-10-07T20:42:47.284498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__496107-1575-4961071575.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.987Z","timestamp":1791405718987,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__496107-1575-4961071575.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1817\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 10:57:20 GMT\r\nETag: \"719-6383b13679749\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1817,"size_decoded":2094,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 83x83, components 3","md5":"5ac89b1b4032bad93504bd907e531103","sha1":"e3a962f5625f742cf411587b7dd4f0c54b0e4ba7","sha256":"3edf776f9711e1524ed89324bfe24c33dd748cfa0e6ba932d84b73060ac55954","sha512":"3fc894bd5ba0662d533a1afd1deb0bd69c60fbaca8df4de8002f8d31f99b20d3b85d9e33394bbf1b34d928f418f10e3e13d0db9427c752ce183dccb38140357e","ssdeep":"","tlshash":"5631c72b523dea90cab83e300d100b2de1bb7104e581ca64054877f26b7a8e0c924f92","first_seen":"2026-10-07T20:42:20.843211Z","last_seen":"2026-10-07T20:42:47.285584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__752148-1959-7521481959.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.982Z","timestamp":1791405718982,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__752148-1959-7521481959.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7809\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 11:19:19 GMT\r\nETag: \"1e81-6383b6205a0c2\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7809,"size_decoded":8087,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x247, components 3","md5":"900ee9204f318fa680cbfa7faccdd768","sha1":"d3afe7d975e91bf480b276b514562c3a6ecfd84a","sha256":"86765b65d417460f6a206d42978d17cc1068c793db04706b88ed2a97e09cd7dc","sha512":"d2c38416815581091937786c1052d20666233d0e452c7ee0e25da3116c5f79610edef4dc35ab7d3a9a20d0c1738f58d9cd1186a5542c6ebcb48a90235011f4cf","ssdeep":"192:OUBt90AC5XEwecUsDdc89bbdYQSJRK5ol4HyH6sI9fcNJdBmnMlt4:7DupeBsDdD/fSuSlRpYfcNPV4","tlshash":"d4f17d23691161d3d113cf7a75c6b76ceccbce0c87a95165788e64bba03d1e388a77a0","first_seen":"2026-10-07T20:42:47.293674Z","last_seen":"2026-10-07T20:42:47.293674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/2fa474dc159357998bc2082abf31799ecb534c40.js?v=1724663330","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.744Z","timestamp":1791405718744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/2fa474dc159357998bc2082abf31799ecb534c40.js?v=1724663330 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: application/x-javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 26 Aug 2024 09:08:50 GMT\r\nETag: W/\"24a0f-62092792f987a\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150031,"size_decoded":41764,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"410ad95b9190f0292e656d44ae4747b8","sha1":"9bf5ecf155b031cbed1e74312bd356fc5aac1a81","sha256":"0ddc2d2989c0286937e4f924d2d1896044d4e05bbb11b396c83f42ed7a61dc7b","sha512":"b8a098df75773d472c475dd26cd9b5896aacda625486dadc09e0d8ad617361c4460aa4b2c0721e658af09497670b9fd4fb3c4ce00d5ee2b4bd546d8b49a231eb","ssdeep":"1536:FKJrfGA4FDE8Ng1sSl43Oa/BlxvHzEwAEG+3VN3/KCZP+pBnTEP2wmsywYv3APMa:AJtOZNvowEwAEAjBnLwmsyT36MRlrYP","tlshash":"bde3e889a221b57646e316db93e4c221b3b54540b40ac8f470f94c9f597ec9813feefa","first_seen":"2026-10-07T20:42:20.852996Z","last_seen":"2026-10-07T20:42:47.296493Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":58,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/d95d4967b4d2ca6ed0b2986e684c7f1009077352.js?v=1750152339","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.746Z","timestamp":1791405718746,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/d95d4967b4d2ca6ed0b2986e684c7f1009077352.js?v=1750152339 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: application/x-javascript\r\nContent-Length: 555\r\nConnection: keep-alive\r\nLast-Modified: Tue, 17 Jun 2025 09:25:39 GMT\r\nETag: \"22b-637c11886e185\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":555,"size_decoded":844,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (555), with no line terminators","md5":"febdb915ec2bf662b58d507c647961b8","sha1":"11ed1dc3ca9ce7c832e1f8fc3981a8f14e4e9b89","sha256":"25b1f430db064739334c97ec2a409c5aac903376cb47fba007a1eed495c8d581","sha512":"4aba440f87d85b0162866a91f432603eab55d64a385d1ffaebedae9a9ac547d08bc86f4e2b38a8197e775e05131f29bf118d9ba1f010183e471aa4a43d88eb3d","ssdeep":"","tlshash":"77f04c06d61a64315f97ee56ec205124e151f1458de73cb563d0c5c9c6b141e02debb0","first_seen":"2026-10-07T20:42:20.836119Z","last_seen":"2026-10-07T20:42:47.297781Z","times_seen":2,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/d38a62db7861da7dd77adc5ae3ec2fb29b35f000.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.747Z","timestamp":1791405718747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/d38a62db7861da7dd77adc5ae3ec2fb29b35f000.js?v=1724663325 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: application/x-javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 26 Aug 2024 09:08:45 GMT\r\nETag: W/\"46e-6209278e4c44b\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1134,"size_decoded":937,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (334)","md5":"b42cc231ba0bbd66e2f19e851374f02d","sha1":"f19fae31745c4f640aa2bf3ceec0795151789731","sha256":"e0e5d02eaabcee4ccfaf779880d31e623dd50642a91dd67e58ebd5f393b8adec","sha512":"cea679deb8153cce4394f311d49fe1918692fd9ab7f4b629f1557d279e854e3538b537dfa445ae618d0d2a5e450ee03574ee73d272d75f8d6a8091cad7961425","ssdeep":"","tlshash":"2221e46cfb18bf50116b25b9487fd60223347d1ec981d505c90489fe19b860af782b5f","first_seen":"2026-10-07T20:42:20.881809Z","last_seen":"2026-10-07T20:42:47.303471Z","times_seen":2,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/images/star_1.svg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.921Z","timestamp":1791405718921,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /images/star_1.svg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/js/minify/b39eb8b86fcbb472d7710bae8fa626031d16ad23.css?v=1750674332\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 06 Aug 2024 06:36:13 GMT\r\nETag: W/\"4d0-61efe0289a9fd\"\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1232,"size_decoded":955,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c30437ad170477d05c281423e4dddd46","sha1":"4b2164d03db963a02f476e54c9cd166bb563f758","sha256":"41dffaa651a19e77dc05ab102df183a23e615841737aedf7e8a91932cb043522","sha512":"1a3ba324b8625f8b059995f9e734d46dc2f0850e7261ed17a84c64e39953895b333b6affa92cc0bf1ccc96ecd5ccf287a3c98b90e765e740d577f45a5b4d7b0f","ssdeep":"","tlshash":"6b2177f5599ce4e44187cfc4da2379a6f0cb58bf5e40032484878bb0ba1d996588cdc8","first_seen":"2026-10-07T20:42:20.855629Z","last_seen":"2026-10-07T20:42:47.304204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/images/star_0.svg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.923Z","timestamp":1791405718923,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /images/star_0.svg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/js/minify/b39eb8b86fcbb472d7710bae8fa626031d16ad23.css?v=1750674332\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 06 Aug 2024 06:36:21 GMT\r\nETag: W/\"4d0-61efe0306c923\"\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1232,"size_decoded":955,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65b275296bcfe19f87b2ae3b61a14223","sha1":"92a401456564cc5f3279a1e782f459bfd89f942d","sha256":"45f2c7be827d7802344e4a96ecc77382670bd0285481a02c922f1d377afb8aed","sha512":"65001d6aaacd8914337e5076f72ce0d8e92486c81450b9c45ff266f06cc06d37fa50398870357a14e629261758716c55d44f3897a5d03f393eda581d20f203c5","ssdeep":"","tlshash":"7e2177f5199ce0e44187cfc4da2369a6b0cb587f5e00032484878bb0ba1d996588cd88","first_seen":"2026-10-07T20:42:20.889696Z","last_seen":"2026-10-07T20:42:47.305041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__920890-1883-9208901883.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.979Z","timestamp":1791405718979,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__920890-1883-9208901883.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8165\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 11:14:09 GMT\r\nETag: \"1fe5-6383b4f8bc8bf\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8165,"size_decoded":8443,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x247, components 3","md5":"df68c6491f4ef081f3504791d848cd67","sha1":"7a1350252b894037d52c86ace50b893e08a9e10c","sha256":"4495bf3aef1c6e321e002ed8b0290f1a03d59709da33fd9fc1faea12108f310d","sha512":"68cbbaab271cccb6bbada7e590d980e04a06023635ab2c3140c59dffef2255b9e76e02751ce8f51c79ce465d84676b465f6b31d8561a6ed9e3619530a5e0fc4e","ssdeep":"192:lL3UcrcbabvyI6XByYwA8fA/Inwi8n+QKpRX1XriZdjYiz/Af:lnaaNSBylZKQuRKjXVu3jYia","tlshash":"7df18da54e9aa838940f5fb769d8b75c4720738959301aa5a4003b3e97ac0db4ce7bb4","first_seen":"2026-10-07T20:42:20.907561Z","last_seen":"2026-10-07T20:42:47.30577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__1220409-1701-12204091701.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.984Z","timestamp":1791405718984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__1220409-1701-12204091701.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7489\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 11:04:21 GMT\r\nETag: \"1d41-6383b2c80316d\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7489,"size_decoded":7767,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x247, components 3","md5":"158ad4830030205a5f786af127dac322","sha1":"268c9e26dd78242e378e38de8af27bf1cd19f9f7","sha256":"520cebf8b6097b35e4661923230413880fc3f668125bc3df86988878bd316db9","sha512":"12497d2cce0cce00d7b4e184837bbb2eac40fce581ec6c18fc3ee581de73d61e5dbbf1fa4a9b24155da2a2ccd429b74b9d3333635ad5420010d7df2037c8c995","ssdeep":"192:0SEf8OUy0GE2hIpQIXhrTn42AcVceDFpqmah/dUK:r0ThIpQIJZFDSp","tlshash":"f5f19d635b276191c4be6b289c58774e0b19149363d16356c81abfefbcbf4d78c64301","first_seen":"2026-10-07T20:42:47.30659Z","last_seen":"2026-10-07T20:42:47.30659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__1283340-1427-12833401427.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.999Z","timestamp":1791405718999,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__1283340-1427-12833401427.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1131\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 10:56:29 GMT\r\nETag: \"46b-6383b105d8462\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1131,"size_decoded":1408,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 83x83, components 3","md5":"cb1a6ead402bfa90acb1096ebb5df8fa","sha1":"f11c724e011473bcaf9e9e08a84441f1e8ea946f","sha256":"c05117c023dcb34da5fe237ecc43980011e8f72ea6046f45c3b0f8f6706b8255","sha512":"778ba7e9999a0bc1d2c946418a1a568e6a41a3af7cdf05121685099a9644fd0caa0c71cf9e5d586aac08725e098cfa0c7440de69b25920d53000ca173567a0f2","ssdeep":"","tlshash":"3b21821c1be85662edd41b33e0a90b5df24bf86152b2020b4406b0756e37ae60f7134a","first_seen":"2026-10-07T20:42:20.827194Z","last_seen":"2026-10-07T20:42:47.308446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__595498-2073-5954982073.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.975Z","timestamp":1791405718975,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__595498-2073-5954982073.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11600\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Feb 2026 14:09:00 GMT\r\nETag: \"2d50-64a78cc0c89c8\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11600,"size_decoded":11879,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 300x247, components 3","md5":"b9d375960f5889771c74e2365282f09e","sha1":"f1b9fdc963f6e7fdadab5fb24fb17b4720f68c69","sha256":"81a8d754e15de84702ee2fd91910c2af11ee5803017e1824fc833021c76f58e9","sha512":"00f4260dc22a7476819b20efbc48763a94ebd251e7590e1d9ff6a2f51da178b14f3742c446188ba4f94aba1431fab24d038233e0ddce8e5ad014fb73cd9c648f","ssdeep":"192:GiMR5kTRnm+OI52ccccTKT+++SJqDOrM6vvJBkt+VV51PctYMaeU+Pc3K8AuTZBQ:5MR5kTtmrjcccceT+++SQqASvJBbf5Nq","tlshash":"3c328e28c12b544594f0326d8fdd4f4c12e7eb02f59df3b666882e569bc60eada30706","first_seen":"2026-10-07T20:42:20.800787Z","last_seen":"2026-10-07T20:42:47.312511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__27433-1947-274331947.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:59.000Z","timestamp":1791405719000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__27433-1947-274331947.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1417\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 11:18:27 GMT\r\nETag: \"589-6383b5ef822e0\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1417,"size_decoded":1694,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 83x83, components 3","md5":"dd0946993af48a36e78cc17b6c8062d8","sha1":"ba61796c86f581b8006cf3842f60f944f83f00eb","sha256":"e83cf8d3d62190ce5715011f48a3baa0ce888e68b5fe8cf67cbe709a4c9b604f","sha512":"98fd5ced67fc9d082d7099539e7b39bd40af5050c259c1ce7be9c8fcf89877a73bcece6d90c4691aac06de641f4d1e2c594efe830ecbf3436af99eeb4517ff1a","ssdeep":"","tlshash":"e521b6275236891ceb903472c0ba8bac878da7413211839d0cb4ba1c7c25be59660b48","first_seen":"2026-10-07T20:42:47.313413Z","last_seen":"2026-10-07T20:42:47.313413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/pages/66/98/small.jpg?_=2293370702","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:59.003Z","timestamp":1791405719003,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/pages/66/98/small.jpg?_=2293370702 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 65478\r\nConnection: keep-alive\r\nLast-Modified: Fri, 20 Jun 2025 09:21:00 GMT\r\nETag: \"ffc6-637fd6169dc7b\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65478,"size_decoded":65757,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 262x163, components 3","md5":"5042d5939cb039f6f1f8aa8f2f015345","sha1":"730d1f97f4c013a96d39e1455859d981639b4a48","sha256":"3788946eba905947c9a9e1810b52ce6f903e38943d5fb2c6e087570d4adb732c","sha512":"8847513b5b1e65d3711a6fdca7ce062f3cf85d755802039677f6355d74d402504623a056181f1d8eec8eb5e743864ff2954f942f09479d2e173656abacefec66","ssdeep":"1536:Y4HxQe07Egrh52YkkvJXyn6sHD5EbJB+5k9z82oOon9bPU:lQeUEg2pCBYDqB+5k9z8JOgzU","tlshash":"8c5302eaa31e0c2dd6f54f4451ae63adfea6b84e2134140b0a42a1e1e479ffd6684c47","first_seen":"2026-10-07T20:42:20.846937Z","last_seen":"2026-10-07T20:42:47.314971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/favicon-16x16.png","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:59.284Z","timestamp":1791405719284,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 1325\r\nConnection: keep-alive\r\nLast-Modified: Thu, 08 Aug 2024 10:30:35 GMT\r\nETag: \"52d-61f29845c2e50\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1325,"size_decoded":1601,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"c6a9f1141d7147447d5a8fd44b53665b","sha1":"647fba5a22e663695d62e53b3e4eb2caf547fccb","sha256":"91113e2b509c7807528505839737c95d42ed568bd14a1ce1a41dd309ae32ce69","sha512":"71d2a19b348a10b3c6d366859ce67be5854b96dbd79eb260116f2af608388a7f02161e2c12a9427ff77eff6543d7eea5a7e97d1acf46ac4a746321115637b5bc","ssdeep":"","tlshash":"1b2153c2f4b4e0d1a29711ccae151960e5ba5d0b4bcd970eaa84d034a61c17929f1f41","first_seen":"2026-10-07T20:42:20.911404Z","last_seen":"2026-10-07T20:42:47.318142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/73f95356add0be464b8c2a4386c251c1eca2e53a.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.743Z","timestamp":1791405718743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/73f95356add0be464b8c2a4386c251c1eca2e53a.js?v=1724663325 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: application/x-javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 26 Aug 2024 09:08:45 GMT\r\nETag: W/\"590-6209278e4c44b\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1424,"size_decoded":842,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (731)","md5":"033d789fcf39852bd238921c712b4574","sha1":"cec94949b7ba543eec9b69f506e97e5388ef77b7","sha256":"66a8cfca20943039df0816580790711de284d36ea938c6351d7544e003868220","sha512":"2c002d8c3939efc7d8b309d9998e7e437ed8d8157b9cee103f3ed1b90d0fb279077b39170a064edbc375e40617c0b468453f17785a8bd6d066f24ed302dd74dc","ssdeep":"","tlshash":"94216e49f70c14378df286fbcc9f1bc06d0735cb5400285d2565844a8fc895a5ee9fa6","first_seen":"2026-10-07T20:42:20.850613Z","last_seen":"2026-10-07T20:42:47.319021Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__320754-2005-3207542005.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.996Z","timestamp":1791405718996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__320754-2005-3207542005.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1501\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 11:22:23 GMT\r\nETag: \"5dd-6383b6d0c01c6\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1501,"size_decoded":1778,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 83x83, components 3","md5":"dde87943491b988edcb55f20ab8558e5","sha1":"3a1a5507dd4fa76f648c01cafb7e39c10d74d17a","sha256":"6afd03662b51868850d85d1c9e8e19ca7762bae6ae2ef41ba8a6eb52658b1ba3","sha512":"72571ebd36bbe8eace00c97525f781d8295f72f7c68820f6b3331ed28222a07e34df966522be8dd2e5ee9955e338d1adbd609084906885c2a31094c147f9af70","ssdeep":"","tlshash":"9e31e9275571cf62dd447532dbb9438e9327e3b795884d09012de808f9948c3dbd8302","first_seen":"2026-10-07T20:42:47.320557Z","last_seen":"2026-10-07T20:42:47.320557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/9fbdbd043eab27c93c037981981c46e20db8e9d7.css?v=1724663330","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.735Z","timestamp":1791405718735,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/9fbdbd043eab27c93c037981981c46e20db8e9d7.css?v=1724663330 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 26 Aug 2024 09:08:50 GMT\r\nETag: W/\"4702-62092792ce8fb\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18178,"size_decoded":4966,"mime_type":"text/css","magic":"ASCII text, with very long lines (15853)","md5":"76c1ee880fba8d9508afc2e7f8f707b5","sha1":"5beca41b7e0eb4819e77816bbc87b403b0da67c1","sha256":"e5249c22016f2286742e0d5c3565e1d6fef174125bf06d8cee41f1ad61117f0c","sha512":"302155d0c7b0437d8230c8916713f972a0ee1d1a46fb31ce18e3dc67252dd23b9c50b38b7db130445f8bc9eb770b574b18bcc1592b77edde65231caa4f5d0f31","ssdeep":"192:JmUJbiKneXJTLdKSme+jedo7AnQ7p/l2GZbcE5RfufKDvAYfg9faeesedOJxH/P4:0UbeXJndKW+SKUni24TnWfj4kfQ","tlshash":"d88255a45310182753274f374bb1cbb9e97444d24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2026-10-07T20:42:20.798539Z","last_seen":"2026-10-07T20:42:47.322856Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":45,"send":0,"wait":52,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/6767283abee5d937716a1d45208b9789afbd554c.css?v=1725178392","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.736Z","timestamp":1791405718736,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/6767283abee5d937716a1d45208b9789afbd554c.css?v=1725178392 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sun, 01 Sep 2024 08:13:12 GMT\r\nETag: W/\"1400-6210a653b3e39\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5120,"size_decoded":1908,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5100)","md5":"246e387fd72cd6643b3c09c48ee384bc","sha1":"461bf3480ce3f669d276a132a9349d4ca26105ce","sha256":"bd2fb1c6bbf2f7873a7e7e8a3824d4ab77d2ec5c441913387d27f1b88e94d6b6","sha512":"038cd91054a78f169ff8334477231d3194176e7634a1ad800c7df72edeb70aa07a4ff6fee4b88883b765b73ac7b39693e06994cdfa46561a1f5d001cb43429a7","ssdeep":"96:Kd/gIEnlh/3/WgCL9L8SCoeuKdKCQnAiuA5MzeK:yl8SZESyKK","tlshash":"3bb16322f6453138b137c92be901b7eb31a49513e22783fafca1b734c9ce0550662788","first_seen":"2026-10-07T20:42:20.863533Z","last_seen":"2026-10-07T20:42:47.327865Z","times_seen":2,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":56,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__1145143-2068-11451432068.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.971Z","timestamp":1791405718971,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__1145143-2068-11451432068.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7041\r\nConnection: keep-alive\r\nLast-Modified: Thu, 25 Dec 2025 07:10:11 GMT\r\nETag: \"1b81-646c177b2e846\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7041,"size_decoded":7319,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 300x247, components 3","md5":"b534d60057f481a03021dc0f747e8263","sha1":"0c0a0c4d9f78add433145e0e341a1f4462d9450e","sha256":"09538a734325d9579b48b8056952469448c3a6ddd176dff6ea55709451723542","sha512":"213c5a8919825cd6386b3f9ae466b8b673b34ca11f80db38c1a6c7960392cf9684e18078b89a8beca1084d477f03f269dfb04fe5880deaf936518ad65ce9d49c","ssdeep":"96:v1RKCddddddJW4B5K9eZlWitcBMgzVGgdwYQ2MkWxSjXdIYnbhvHYtO4jGcDpDFf:OA/7JlRWBMgzVGgKYukuGA6cDP6YDt","tlshash":"b3e17cde5c0d4351f60d3a30828ef7ac5a263683299283888d7c7a60fcb4ec3a559b24","first_seen":"2026-10-07T20:42:20.893557Z","last_seen":"2026-10-07T20:42:47.332528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__849843-2106-8498432106.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.978Z","timestamp":1791405718978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__849843-2106-8498432106.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9545\r\nConnection: keep-alive\r\nLast-Modified: Tue, 06 Oct 2026 14:04:36 GMT\r\nETag: \"2549-65d2c7a8ae63b\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9545,"size_decoded":9823,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x247, components 3","md5":"b6c9d5b9a384faf1a7b7302ba1778b95","sha1":"9b4f960aa2b8693a4bb6de881b57f765e8aa59ac","sha256":"d31169f2ff75bda9501fe606355760584faf2fdeeb3710d5d9215717f4a51a3e","sha512":"f5410199cc80b5ee39340e96c908f706260b6405fcdb615a6210223a4df7f1c93d5bd3b14f5a46aa76456eebe1bd5ba83ff99425de3caa2b10e28fbb3bad505e","ssdeep":"192:SD1oY+Ti22222222CedrVrnflJCKKNtQWPzVGrLfeqkxBjVNYQC8:iuY+Thulnb9ktbBG2jjVqz8","tlshash":"ac127d46e46e4443a3d0ab3f4f1c738f528aa6955a48d6c36c4c6eb9fec83d1561cb0d","first_seen":"2026-10-07T20:42:20.869815Z","last_seen":"2026-10-07T20:42:47.333833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/3__149527-1674-1495271674.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.981Z","timestamp":1791405718981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/3__149527-1674-1495271674.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8514\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 11:00:47 GMT\r\nETag: \"2142-6383b1fbffb58\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8514,"size_decoded":8792,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x247, components 3","md5":"4b6ac63d2ed06d9143122a9f597e60dd","sha1":"19d6f28217f70ecb24e3a32430dc9e516315d951","sha256":"1ee2df599bb72e826f719cdaa2aa4343851644f7dc0ae91a0a76e48a9b89026b","sha512":"ed60f8b84bd997a556c0c2884d38f111ca42c19be3a9eab78b80a3073989d959284218da0fccb3364735b848a96a26f945a11ac13755b9926521d22185a4d0d1","ssdeep":"192:+ZBNfMR2BSl52fqvC6A2Kv8ndWYzl/qVYCh:+fuRuK9AKX6YK","tlshash":"f4028cc9d915a972a9e413fc3d64cb6fe0231c82081bbf3908aafa53b0746d516ad381","first_seen":"2026-10-07T20:42:20.896222Z","last_seen":"2026-10-07T20:42:47.334667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__86838-1579-868381579.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.990Z","timestamp":1791405718990,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__86838-1579-868381579.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1631\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Jun 2025 12:47:03 GMT\r\nETag: \"65f-63850b9a47c7a\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1631,"size_decoded":1908,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 83x83, components 3","md5":"00a12330d4e69d50d77892658a6c986d","sha1":"7ef1840a45ac11f3db6825286d3a3dc1343710ba","sha256":"b8f5fb32cc51c5dbd8ca6aeeadb985069bcb08e6f116da14243bcd205f3a34d6","sha512":"43fd497c3625646bba37904097d9765d59c7c81efbe3769eea804c8eb476e24ff941af163d2a4a86b1ca61376a576640b8ef90bce2f1dd254d841a7d0835b673","ssdeep":"","tlshash":"6b31ca046d51ad99fd9116b6dfbc3f4c6bda5c09c713a7040e8a52540736cc1acaa364","first_seen":"2026-10-07T20:42:20.823336Z","last_seen":"2026-10-07T20:42:47.33784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__681182-1894-6811821894.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.995Z","timestamp":1791405718995,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__681182-1894-6811821894.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1447\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Apr 2026 12:42:03 GMT\r\nETag: \"5a7-64f0657ea9a3d\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1447,"size_decoded":1724,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 83x83, components 3","md5":"845b7382437afcc3bb7f4fa94c848caf","sha1":"f086cc93b79a6c53c59a80b5c77bca1af384b934","sha256":"9b8145be15270253825d34bd44e4cbf13bc244100c63287e05e25d4fb7b8f0a9","sha512":"3fc6a57bba3042563576a1c50c17873c7b8ab882c93810765509acefbf8c2200ba08cf33cabb9599c8912bd0a72ead3432521b9683e0aed7a18ba9efacf0ec32","ssdeep":"","tlshash":"ee31bb06dffa4b86f531357f174907ac978fdf8785310748157aee9d58a64c30988386","first_seen":"2026-10-07T20:42:47.339176Z","last_seen":"2026-10-07T20:42:47.339176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/pages/65/97/small.jpg?_=1076717878","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:59.004Z","timestamp":1791405719004,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/pages/65/97/small.jpg?_=1076717878 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55897\r\nConnection: keep-alive\r\nLast-Modified: Thu, 12 Jun 2025 08:40:44 GMT\r\nETag: \"da59-6375be2aa8555\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55897,"size_decoded":56176,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 262x163, components 3","md5":"bc93caf64998d73c8fd4374d83921a87","sha1":"76cf0ac164e8d96bbf0d3a02cec6c8830a5f6f44","sha256":"d1821205583e8099ff006ec2b60595add0db0522966a2b9821a1e5e41cd7f22b","sha512":"9459758f9c5f134f0a3268eae6f2aea32d30a5a801c3873768efbeda3db36a3b7d2b43ccb791e7680d1ba11daecae2a284eb35035a7c2964131d47263615dfbb","ssdeep":"1536:YiZ8f+HyFiVTFcEcfSCQyTL3Q64KEJMHTgKkSCX98NAj:1Z8f+WOFcECw6bCyvSWqj","tlshash":"0b43f1bfbc7e09b49f9a5115c3618912f50b30ac42b0b8298a7c8c64d58c9ec79987df","first_seen":"2026-10-07T20:42:20.818649Z","last_seen":"2026-10-07T20:42:47.341403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":51,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T20:41:58.278Z","timestamp":1791405718278,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D; path=/; HttpOnly\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"_csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D; path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58020,"size_decoded":11577,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11117)","md5":"d2bc692b7bb05821437b9ee4c77f2448","sha1":"61e0e4886df92e00271a9b43e0b5cb58a89b1ffc","sha256":"c0a5394956f23d74ef47f8882e8f311d3eeda2abd438bd2cb58f2c2c2ecca5e2","sha512":"17b2f24406c049a730f53c33a6e082a58660aafb64f105895f6a7c6f40a35942823a599fff8675b10921f0455e2060b2b3453bbd916b5075464960353a5892b9","ssdeep":"1536:uFRBM8wRC6Mnkd+f2QWDo32QsDS32QkD4l2QrDH32QOD+7vf2QiDI22QdDjA2QkE:uFRBM8WC6MnkdGClfi","tlshash":"ff431f72a49a287b4623a5c5e9107b5e30e3427fef73c507a7fa5e6e1ae3c51cd20406","first_seen":"2026-10-07T20:42:47.342352Z","last_seen":"2026-10-07T20:42:47.342352Z","times_seen":1,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":4,"connect":45,"send":0,"wait":165,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/68f9a2ab3e50033246d858c646ac25a60fe164b4.js?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.738Z","timestamp":1791405718738,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/68f9a2ab3e50033246d858c646ac25a60fe164b4.js?v=1724663325 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: application/x-javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 26 Aug 2024 09:08:45 GMT\r\nETag: W/\"21e35-6209278e4956b\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138805,"size_decoded":39596,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1499)","md5":"703d91468201d2fc31800ccbd3e2eed3","sha1":"97468cd60afaa5732696699df3d76d55e4007a89","sha256":"c2808823ffda75abfb875c8cfdbe07f9464063d2a134569adc55405ef617faa0","sha512":"b4b3bcf749fb6ecdbdeaee691af0302f25240d2009c59de788349e9637ab18904ca0e537465bc31a246584315d26a48325ea44990fc8a05685e826377c548b9e","ssdeep":"3072:EoSmxDYoWQdvjvenl63o65dkjwFIzHHQV8BU7tn:Eojco3k8FIzHHQ9n","tlshash":"74d309edb645207e93f731bbb07b0b1eb53a9656480c9041e16848e83eb8d05d1abf7d","first_seen":"2024-08-20T12:28:57.004892Z","last_seen":"2026-10-07T20:42:47.344259Z","times_seen":22,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":45,"send":0,"wait":104,"receive":28,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/uploads/salony/0__1044790-1573-10447901573.jpg","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.989Z","timestamp":1791405718989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /uploads/salony/0__1044790-1573-10447901573.jpg HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1865\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Jun 2025 10:57:18 GMT\r\nETag: \"749-6383b1349032f\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1865,"size_decoded":2142,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 83x83, components 3","md5":"037e2687ba6a0ad1ed76656a5d91334c","sha1":"730c3f3c8323d77039fe6b10fff604dca10e37f7","sha256":"946b44a38904aa383917abe628d760f79c47f996cb79b8f642c79ee04ca37d96","sha512":"a8553d6cd8801dbca360e57d62329a2ed7cf6982ae3d35aada2317a5ba39baa0b981e074069cf675b3f8e345d87f3138f79e97ec7b490dc910210a0b43e8f600","ssdeep":"","tlshash":"d1310b9e2a50d698d50c26f8507793aedadf177fdda4932f00e0b76d68310c783a1768","first_seen":"2026-10-07T20:42:47.350341Z","last_seen":"2026-10-07T20:42:47.350341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/android-icon-192x192.png","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:59.281Z","timestamp":1791405719281,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 28319\r\nConnection: keep-alive\r\nLast-Modified: Thu, 08 Aug 2024 10:30:29 GMT\r\nETag: \"6e9f-61f29840081a4\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28319,"size_decoded":28597,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1963eb0b1fbeb870a2a9e96fe6513758","sha1":"f0bd5aaeedcb6cce8f8e4d5ac160a68376719922","sha256":"d18249c849f5479791bb0930512aa78094dd8fd858ce22b113c13d5336f3d705","sha512":"36ec21e11f5f27f357042e242bb6bc789ce09a5808f17283f80e084f737a8cdad69d3d2b6d89fcdf14977560984e2468ff0c00f6b72b547a62531076c3511feb","ssdeep":"768:Kf5ND2661KGWwK332+ulYsPh1rfcXN9hJZUNsh:KBNDzWLG332+ulDfrfcXzhrCk","tlshash":"e7d2e0d502bb586acd17ddb72a61a0440d1410a7ff99a58b093610fee083eadd0f0cdb","first_seen":"2026-10-07T20:42:20.902629Z","last_seen":"2026-10-07T20:42:47.351859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SPM5K3WN59","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:42:00.250Z","timestamp":1791405720250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-SPM5K3WN59 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 20:42:00 GMT\r\nexpires: Wed, 07 Oct 2026 20:42:00 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 179066\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":536680,"size_decoded":179670,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"b76cb6dfa308095f336006d80603a214","sha1":"317ce8fcbad653fdb7294627d0292070af5fba6f","sha256":"826c93219c7090df78f508620e8dcd0d9b9a7cf3ec9a0ba12b881464fccf383b","sha512":"5719834dabd72d390a054c76836aa7545b18acd0284127bd6e485a605dd1a500e5d524bdb56a1177956b834903843499838e572d2d2410cfc9f2fd1d70a355dd","ssdeep":"6144:4ocUrtyDetGl0BCveZNAAycBcNMMb0Er533QN3DsxXNU4m9kpp84A:wDeq0ByeYnE3DsxXFm9YOb","tlshash":"74b409ce73c6742293a6f578903f01cb657b29a2b45cc89ab289dce02d3465a5173f7c","first_seen":"2026-10-07T20:42:47.352726Z","last_seen":"2026-10-07T20:42:47.352726Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":42,"receive":60,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autosalon1.ru/js/minify/44da2207fbbb083047d7f10ccd8f833779ca7ded.css?v=1724663325","fqdn":"autosalon1.ru","domain":"autosalon1.ru","tld":"ru"},"ip":{"addr":"5.23.51.201","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autosalon1.ru/","date":"2026-10-07T20:41:58.732Z","timestamp":1791405718732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autosalon1.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 04:23:43 GMT","end":"Mon, 09 Nov 2026 04:23:42 GMT"},"fingerprint":{"sha1":"3E:FC:80:C1:CC:22:71:F9:1F:C9:19:4A:CC:72:B1:92:32:AC:55:7A","sha256":"47:CC:40:68:BA:BE:16:71:CA:6C:57:09:0C:72:5A:70:07:F9:27:55:FF:73:03:18:D8:BC:A1:E3:C9:87:3A:78"}}},"request":{"raw":"GET /js/minify/44da2207fbbb083047d7f10ccd8f833779ca7ded.css?v=1724663325 HTTP/1.1\r\nHost: autosalon1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autosalon1.ru/\r\nCookie: _csrf-frontend=b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_csrf-frontend","value":"b73bf78070aed5ce34fb37e2d006a2d67e4bb9f5437fc85c309a8d6f8773bbf8a%3A2%3A%7Bi%3A0%3Bs%3A14%3A%22_csrf-frontend%22%3Bi%3A1%3Bs%3A32%3A%227BkMoPxgrh4VqH5AbMogJgTNOpQ2OEHc%22%3B%7D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Wed, 07 Oct 2026 20:41:58 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 26 Aug 2024 09:08:45 GMT\r\nETag: W/\"cb62-6209278e2728c\"\r\nCache-Control: max-age=604800\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52066,"size_decoded":6006,"mime_type":"text/css","magic":"ASCII text, with very long lines (52048)","md5":"ecb2b2f03be141ca207da9d661fb8da9","sha1":"c529634b2ad5496458d31a963ab9286d92bd6fee","sha256":"023e7777a517bb95f326611b80efaaad7a6045dd4c5ca08e42ae8ef68f40853e","sha512":"7f3bfca08f56aa66361395f75ef3fda25a229cf8689cdb6a838cc546fb56990ebd91b568f2f4cb5fb4d29690fe7161ea0e6e7a9f1cdc50bf41dd5f60032548cf","ssdeep":"384:d5ystZy8kSTtmv35pmrjY82oUJxPlqblIzr:d5ystw8kSTtmv35pmrjY82oUJwlIzr","tlshash":"f83374cbfdd2284d8b12c249c49277bc7d3f9949a352ac9ba0177f32cb446d709a294d","first_seen":"2026-10-07T20:42:20.833057Z","last_seen":"2026-10-07T20:42:47.357989Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"autosalon1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}