{"report_id":"3f32c763-681e-4b7d-accb-5b06b6ca65ec","version":0,"status":"done","tags":[],"date":"2026-10-11T00:50:44Z","url":{"schema":"http","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"title":"Логистика в РФ","dom":{"size":67083,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9531)","md5":"d6ce0712f30e98087f1415814919f7d0","sha1":"bc5e99a75d00d1133662f511024a9c9871ca5716","sha256":"25dbda6fc21df66d6c4965cf53ee1deafd3e234d27d2c67ae226895b09cedb4f","sha512":"8134497a54d8eabd92d4579b1268872856c8c50874cccc8a49d355a0accbd2d00e5b92c1599cb54231414fa78fa0efbe85bbe7f4c8dde3d29c21fd5e9d287e4a","ssdeep":"1536:vcyppcIIrQ/QQZnAimORi5AB+5HuiR08OR9m:vtH0AB+1ui+8KA","tlshash":"7763d971a0a1047a560bf1a6c5917f0d6ea4825bdf069b11b3fc56a93fc1eb285fb30c","dom_hash":"domhashfb2181fd10fcff3438b4dc4aad6654fb","first_seen":"2026-10-11T00:50:54.415045Z","last_seen":"2026-10-11T00:50:54.415045Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T00:50:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"logistiya.ru","ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":10,"received_data":650826,"sent_data":4854,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":4,"received_data":126316,"sent_data":2268,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":6525,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"logistiya.ru/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T08:43:36.409518Z","times_seen":1099891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/reboot-scripts-js-extra","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"185140403e7e2f65395252c47865977c","sha1":"6747324fe1b323fa55a4758758580492b5306ccd","sha256":"27d20fdae4ce3e16abf12bfb982395f3d9727347a9c22884a2f72b7c9cec697c","sha512":"4a6becba2b5949662e500d73f9cdd0245ec3476375c43390c22f9a220456f117db60f8767c10dde0d099f836832ad853261486c5cb54b525f0549b2bd9a3ffa2","ssdeep":"","tlshash":"a0017292c1a90e0a0183a6b1cd348b3e22ae0842f840df18af5ed882a9343419e64589","size":805,"data":"","first_seen":"2026-10-11T00:50:54.463969Z","last_seen":"2026-10-11T00:50:54.463969Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-content/themes/reboot/assets/js/scripts.min.js?ver=1.5.2","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e81a8f47303b27776e1c9b6b897d81a","sha1":"5f452e7a7241aeec222a7382f7e0751a1c173e7b","sha256":"8a6ff5e3967f0710b6d97ed9433ae7469d023f259e9dd901e6205c83fc5ac306","sha512":"e507ccbb258810ec7f8cb7726e0d9e03e53d5e99ee47cd97a115f80643c8d456a201cbe475f492dc9e087c78e664278d8e932511d5a2656d110b6ef80c557048","ssdeep":"768:JlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erM+ZenQKM/lTuTl9hC:JlLxjafljUkyJxk","tlshash":"a33382807241b0b50aab51154bbfb70ff07a6b166cd6c400d06a8eb42e64ee7b167ff5","size":54754,"data":"","first_seen":"2024-05-27T17:13:45Z","last_seen":"2026-10-11T00:50:54.459744Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"792ed7a2a462c839538c757879d40c6c","sha1":"6f4447afac5655ab04fde961afd8ea6bd88eff7a","sha256":"473c40340235016d654affd29cf5d1e392129ecc72a9c9ea0001f47a170e9b11","sha512":"999614c3efe279a399d0da0e927d330c1f0d3c7debbb5dfde3b5927c191202180f992d94ad523d90356a2e784811a4ce783df3b3493daa11d5eabc568571108d","ssdeep":"","tlshash":"b1e0eb9281a90e0a0183a2d1cd308f3e23ae0c42f800df18bf5ed883e9343419f74589","size":297,"data":"","first_seen":"2026-10-11T00:50:54.468901Z","last_seen":"2026-10-11T00:50:54.468901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b747f224d4e031cd4742a2b4d17de22","sha1":"a722f7eb50a36a87c2503ccffc50a05b2982b916","sha256":"4c2c48854fae096c647aca44017ffb7e0d595eb40f1e643228dbcd737dc42fc5","sha512":"d25e97903b887561f14b4d115ea13a2e7f2548611bf06926801f65d27b132d9c4a361f7bf4ae399677d3affe3c2f272baefbe5590b77f44864adf9c63aeb215c","ssdeep":"","tlshash":"87f0226d2efe2030865b353b2aae87893a344003340489023d2c9a448f908b10677fea","size":456,"data":"","first_seen":"2026-10-11T00:50:54.473986Z","last_seen":"2026-10-11T00:50:54.473986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"efdda930b6d6bc032ef0bde013412dbb","sha1":"4877f8faa2487e349ec91b3d9cda21b31c95448b","sha256":"3d9e4731ba9ccc36bd1ffcbbeecb59657d66c9e6926bba7c69d638bcfa6ae20d","sha512":"5b8de52a219717c62c81a9ae15761e247830037b88715eb895fa419ea1bceae4849496b859ce39a496da329947401af9c2032313bdf2f28da9068660381c47fc","ssdeep":"96:KVBn/lh8aqdNJ1MxVrh5K3xjm//l5RTPMmpw6KoqEIzvyHd2YjGrb4p1K0:md/b8lbJyxJgxj6/bRbMFj17KwghpH","tlshash":"7bc1ca2cbcab7031a937e2b69bdfa18ed5e4718b1545da517c0cafa12f91110027eced","size":5936,"data":"","first_seen":"2026-10-11T00:50:54.47557Z","last_seen":"2026-10-11T00:50:54.47557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a3b85e9f4e2ea1b2c8a75edeb765188","sha1":"8503c830ddd5d1578ca2b5c4690a09a774734762","sha256":"ddaeee7976aad77e8a6f83c252bd593259e09fa2fc93a7ab6633d0c9c6958d5e","sha512":"c14651bd485d63e5372fd0ecb4814b257bba1f6c71eea3fa1b565dd93d3e2cc6a1a3478e251d1f96063670bb489ea4adbab6c5656abbf4c2cbdb0895fa9e24fe","ssdeep":"","tlshash":"fcf0e1f73cca4538c7a712a53b73924c7039253f740eac52b50d28922f94ea514ab51c","size":615,"data":"","first_seen":"2026-10-11T00:50:54.47761Z","last_seen":"2026-10-11T00:50:54.47761Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T08:42:43.065719Z","times_seen":80838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T08:43:28.079087Z","times_seen":1004126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-includes/js/wp-emoji-loader.min.js","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"16b6f0bdb76fb2103bc3862957cbc08c","sha1":"7b3e36ae1fa330ca493c7d2c47742134bd123702","sha256":"5911d68b110ef354731a124ac78d87b93f474abb02fdd4dfa0c46cbe737aa5ba","sha512":"142fad3959d19997e09591a4a87a1a25695d92bf359bca7a9d4eba653fbbe51f0dbde421b8ea2f8ea253c23d75e6fde6d2ff8013805ce86787081443cf558547","ssdeep":"","tlshash":"63719659eb7938db33fa01f2653a4d47eb614436e784d038c9ae631414b1893c375a16","size":3567,"data":"","first_seen":"2026-10-11T00:50:54.481679Z","last_seen":"2026-10-11T00:50:54.481679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://logistiya.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"logistiya.ru/","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:44:47.856Z","timestamp":1791679487856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://logistiya.ru/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://logistiya.ru/wp-json/wp/v2/pages/133\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://logistiya.ru/\u003e; rel=shortlink\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":62844,"size_decoded":13685,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9531)","md5":"df9cb750c7e3eac8eed2f8c32beb0365","sha1":"41d23e83e1abbbd3045d8898e246e10b67cb2294","sha256":"391da38f7b607f777e2dce62383411864834c2acd2bcafb8d0f8461de8360db9","sha512":"281a5de099d73c767d2e13537fcb7b6a0d750e4792267bdc9668d4907702f652280bb1cf3d49c39a19a7507463887f356b03fccfcf49366459b5d131898736b0","ssdeep":"768:u2BDZdyp49lsII7u3F7icpJRxwcB1kUfQ+5HuiJ+b0vLB0h2bMFj17Kwg3OR9E:/9ypasII9IQ+5HuiR08OR9E","tlshash":"8a53c871a0e1007a560be1a6d5507b4dbd94866bdf069b11b2fc5ae93fc0eb285fb30c","first_seen":"2026-10-11T00:50:54.418837Z","last_seen":"2026-10-11T00:50:54.418837Z","times_seen":1,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":77,"connect":28,"send":0,"wait":201,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-content/themes/reboot-child/style.css?ver=1.0.0","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.438Z","timestamp":1791679488438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-content/themes/reboot-child/style.css?ver=1.0.0 HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 02 Oct 2026 12:13:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abf9fe2-1bf70\"\r\nexpires: Wed, 25 Nov 2026 00:44:48 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114544,"size_decoded":19107,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (426)","md5":"86ad26050ad433ff621398fb5a4d5356","sha1":"1a97344e9caa0ce1e830e833257e8adcaefb4c80","sha256":"b5032d6666794d366a8d1d4989607136aacb0aad90aa09ae8d423019e1502982","sha512":"a52e2b601d8d12ee46b644b16becfc91e3a46b5613c10340d80a69e0b06e22dbafa2519d15bc26a3cd97bc8175c78624b1b03a0ddcd69071f512f90e6f455538","ssdeep":"1536:kmjq8nijKeDbfFlCfXcS9TvkFuMyXhcCedGk9gZ41n:V28nxeVUfhi","tlshash":"3db3ab976b632594b407d8396bb75755632c4103c10aeebd7fd8324c8f8a3d8a276b8c","first_seen":"2026-10-11T00:50:54.421566Z","last_seen":"2026-10-11T00:50:54.421566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-content/themes/reboot/assets/css/style.min.css?ver=1.5.2","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.658Z","timestamp":1791679488658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-content/themes/reboot/assets/css/style.min.css?ver=1.5.2 HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 Oct 2026 11:33:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abe451d-380a3\"\r\nexpires: Wed, 25 Nov 2026 00:44:48 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229539,"size_decoded":43045,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65107)","md5":"fb1cf6ed732e8afec05937438db5f735","sha1":"8af2610085da4a8aa28fc52f16b28810e50fc332","sha256":"c7f78a966b0fcdf96be7141d1e223494459e7fcc84fb8712eba8d8a4630b0521","sha512":"01cd46283077acd6b572e152845523786de215d2e5c0cf859c1ed0f68a98fbd057aaa04f73974c196eb20dd5066dca01a8bb9ff2f4e095f3aa1c7d8b646ed680","ssdeep":"1536:D6ACWf65WQXcNFI00iB/QtI8UYXTaZTir0ro/Jv6rw9mQXAV:D6Ajf65WQXcXP/9YXOAJ2w9C","tlshash":"782419e029a025dc9327cb3b5771f26c6d2491b1c7414af4e2f5ca1c8beabe6417364e","first_seen":"2026-10-11T00:50:54.424146Z","last_seen":"2026-10-11T00:50:54.424146Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.662Z","timestamp":1791679488662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Oct 2026 11:26:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abe436a-3509\"\r\nexpires: Wed, 25 Nov 2026 00:44:48 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5187,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T08:43:28.079087Z","times_seen":1004126,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.866Z","timestamp":1791679488866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://logistiya.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463835\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-11T08:39:23.518285Z","times_seen":569734,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":23,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/favicon.svg","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.974Z","timestamp":1791679488974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 06 Oct 2026 08:34:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4b294-9ce\"\r\nexpires: Wed, 25 Nov 2026 00:44:48 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2510,"size_decoded":1679,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"745b2ea2350c5fd48784eae78ee8e38e","sha1":"644e4f4b915eb52679dd779ecd277818afe9c7c2","sha256":"d670e529060c3c4c8557ad569014133b8e1fdc08d6169ce01176df2acad24e86","sha512":"b4c30d3e87cfe6ad7a2d34271ad7a285587cc424bf4fb16341f646ed7c9e7724bc6a90b6ca7b47835d3ca7e465f0b318be10aac7c70350b4dad094b4143316f0","ssdeep":"","tlshash":"415184fdd2954a35efde070820fd1ed60ffcaa49414d884a16ee24c58c04b2978ef15e","first_seen":"2026-10-11T00:50:54.431996Z","last_seen":"2026-10-11T00:50:54.431996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-content/themes/reboot/style.css?ver=7.1.3","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.436Z","timestamp":1791679488436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-content/themes/reboot/style.css?ver=7.1.3 HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1007\r\nlast-modified: Thu, 01 Oct 2026 11:33:46 GMT\r\netag: \"6abe451a-3ef\"\r\nexpires: Wed, 25 Nov 2026 00:44:48 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1007,"size_decoded":1302,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"2c9400639f529bfc03843bbb64dbe649","sha1":"c3fafb0fb072b4afb7bacb7d936854111cc33f13","sha256":"5840d658a98e80607b899262f6bc3c8aff50f25f2f857a9403f110b62435ba39","sha512":"91ddfcc81849afaa4d7758ac567408bf93f9738af8fd0e21c0602c756ffba5919d7d5e16cf04afb86745fb1d54754c0d1436cbe22c11cff5c18430410f6ea020","ssdeep":"","tlshash":"831190110c1b58a52021c667d0197f05fbaf967ab7a343c2f25d3d7a76f0a98473da0a","first_seen":"2026-10-11T00:50:54.434923Z","last_seen":"2026-10-11T00:50:54.434923Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.660Z","timestamp":1791679488660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Oct 2026 11:26:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abe436b-15601\"\r\nexpires: Wed, 25 Nov 2026 00:44:48 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":30735,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T08:43:36.409518Z","times_seen":1099891,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.864Z","timestamp":1791679488864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://logistiya.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Oct 2026 04:03:34 GMT\r\nexpires: Wed, 06 Oct 2027 04:03:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 420074\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-10-11T07:33:19.349447Z","times_seen":12843,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,400i,700\u0026subset=cyrillic\u0026display=swap\u0026ver=7.1.3","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.655Z","timestamp":1791679488655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Montserrat:400,400i,700\u0026subset=cyrillic\u0026display=swap\u0026ver=7.1.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 11 Oct 2026 00:44:48 GMT\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5841,"size_decoded":1357,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80b4903d50ae56d007efd4e14981e751","sha1":"5dca38578d64a1e0294246a97f042697d7d825e2","sha256":"c3b84b31129df32aaa8d59c27441f6affbcc12e984e0b591011087b0ff0c93a6","sha512":"46fe574c16d26d6dfab49a0c784a4ca4180521d5d7cdbbd31a339f17baeac30e2146ed4c3cdd6f09c480624bb6f9d8e25fbc04d1f66aaa283bcd85b75b51e988","ssdeep":"96:AOYgEadwOYgEaTFZOhOYgEa7/OYgEaEJc+qdOYgEaBNtOOEaRwOOEaOFZOhOOEam:AOdwOqFOnOAaOjRo7TbOCu6RB7W+Ofu8","tlshash":"f0c1ef91005ba500e6471cca23cf7e36de4e65627494c5797ffe2ca8addac260321b3d","first_seen":"2026-10-08T11:12:34.513671Z","last_seen":"2026-10-11T00:50:54.442463Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-content/themes/reboot/assets/fonts/wpshop-core.ttf","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.664Z","timestamp":1791679488664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-content/themes/reboot/assets/fonts/wpshop-core.ttf HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://logistiya.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 58668\r\nlast-modified: Thu, 01 Oct 2026 11:33:50 GMT\r\netag: \"e52c-65cc5ca251e9e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58668,"size_decoded":58898,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, wpshop-core","md5":"2fcda07cf0f6e04e36a23362734caea2","sha1":"c596aa516e5cf216fdc514679b4a6abe337eed13","sha256":"973408bd1a1da181c7eaa9293c0cd095f3836a76b626bc76af21e1cd96b5dcde","sha512":"42b1bb8dc70bd0b65d2586a6a11131db5f604d8e16c1669efe4687f26f1e65705bcc02e911e88e07fb8d3a27999d76b62cbc6a31b7069772dd8edf50a5cd52a4","ssdeep":"1536:I5LQRM0CsPnjQegTDHjNWOPRaEXhHRfI4TgrAw0L5Tq2wsuQugFB9yjxwBGDx0Eb:uLQRM0CsPnUTDHjsOPsEXhHRfnTiAw0s","tlshash":"9c43295ab34bff1fdb6aad3ba80162a20ee9d425931fb14b59851d03460dcb84c8c7c9","first_seen":"2023-04-07T13:41:48Z","last_seen":"2026-10-11T00:50:54.444995Z","times_seen":1093,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.863Z","timestamp":1791679488863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://logistiya.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463835\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-11T08:39:23.518285Z","times_seen":569734,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":20,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.867Z","timestamp":1791679488867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://logistiya.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Oct 2026 04:03:34 GMT\r\nexpires: Wed, 06 Oct 2027 04:03:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 420074\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-10-11T07:33:19.349447Z","times_seen":12843,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":37,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:49.063Z","timestamp":1791679489063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Oct 2026 11:25:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abe430c-58e0\"\r\nexpires: Wed, 25 Nov 2026 00:44:49 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":5699,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T08:42:43.065719Z","times_seen":80838,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logistiya.ru/wp-content/themes/reboot/assets/js/scripts.min.js?ver=1.5.2","fqdn":"logistiya.ru","domain":"logistiya.ru","tld":"ru"},"ip":{"addr":"31.31.196.139","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://logistiya.ru/","date":"2026-10-11T00:44:48.666Z","timestamp":1791679488666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logistiya.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:06:23 GMT","end":"Wed, 30 Dec 2026 13:06:22 GMT"},"fingerprint":{"sha1":"CD:B0:09:2D:FC:C9:3B:D7:8E:9C:EB:64:D7:63:B0:70:1F:E4:46:B7","sha256":"45:DE:D7:22:E4:58:C3:6B:BD:9B:6C:D3:29:37:ED:7F:34:E9:68:60:40:03:27:74:BC:6F:8E:FC:39:F4:73:11"}}},"request":{"raw":"GET /wp-content/themes/reboot/assets/js/scripts.min.js?ver=1.5.2 HTTP/1.1\r\nHost: logistiya.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://logistiya.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:44:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Oct 2026 11:33:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abe451e-d5e2\"\r\nexpires: Wed, 25 Nov 2026 00:44:48 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54754,"size_decoded":10291,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54718), with no line terminators","md5":"6e81a8f47303b27776e1c9b6b897d81a","sha1":"5f452e7a7241aeec222a7382f7e0751a1c173e7b","sha256":"8a6ff5e3967f0710b6d97ed9433ae7469d023f259e9dd901e6205c83fc5ac306","sha512":"e507ccbb258810ec7f8cb7726e0d9e03e53d5e99ee47cd97a115f80643c8d456a201cbe475f492dc9e087c78e664278d8e932511d5a2656d110b6ef80c557048","ssdeep":"768:JlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erM+ZenQKM/lTuTl9hC:JlLxjafljUkyJxk","tlshash":"a33382807241b0b50aab51154bbfb70ff07a6b166cd6c400d06a8eb42e64ee7b167ff5","first_seen":"2024-05-27T17:13:45Z","last_seen":"2026-10-11T00:50:54.459744Z","times_seen":51,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"logistiya.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}