{"report_id":"48e7b0db-4b06-4234-a198-df024bd8f6ec","version":0,"status":"done","tags":[],"date":"2026-09-22T18:49:37Z","url":{"schema":"http","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"title":"Swedish Digital Library","dom":{"size":205862,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1023)","md5":"6e4ef6f89307b3e766303870da9a2fd4","sha1":"df3a3583eb745ce917c9520532e775cbfe229dec","sha256":"79301f7046060303a9c56ed520e4c56164fc32a780509ef252e4d583214010f5","sha512":"7d8601c04571a3885696d1e346a505917c606a49a78893f6ae894d5462dd8d9f715473295dc73ccb4023f655ca83fa49b8eebfb726e8d4062cc403d3dc255c7f","ssdeep":"1536:6EGdd+OT0N7AEnxjdZ5WYczyX/QvDOSvOSSjGQP/sqgHv34DuBz6plGY59:6EGTdT0NcEbOCX/QvhhEGRvoD6xA","tlshash":"ac1497f241e19fbb13e373c96511f32da9534607ce834984f2fd0a6b6bc6e65982216c","dom_hash":"domhash819b9ffd474a52b80e5ee4154df7d723","first_seen":"2026-09-22T18:49:59.411166Z","last_seen":"2026-09-22T18:49:59.411166Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T18:49:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":3,"received_data":50800,"sent_data":1754,"comment":"","tags":null,"fingerprints":null},{"fqdn":"libmonster.ru","ip":{"addr":"87.236.16.244","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-08-21","domain_rank":1723753,"first_seen":"2015-09-12T06:16:59Z","last_seen":"2026-03-05T09:08:37.077334Z","alert_count":0,"request_count":1,"received_data":249536,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"library.se","ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-09-09","domain_rank":2110743,"first_seen":"2026-05-10T21:16:28.826363Z","last_seen":"2026-08-13T00:14:39.621218Z","alert_count":144,"request_count":48,"received_data":1905005,"sent_data":25023,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.0.6","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"VK Pixel","description":"VK is a Russian online social media and social networking service.","website":"https://vk.com/","common_platform_enumeration":"","icon":"vk.svg","categories":["Analytics"]}]},{"fqdn":"elibrary.com.ua","ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"domain_registered":"2009-08-17","domain_rank":7272113,"first_seen":"2018-12-19T00:06:35Z","last_seen":"2025-03-15T20:47:40.961805Z","alert_count":0,"request_count":11,"received_data":9092,"sent_data":5973,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-09-21T16:31:28.28991Z","alert_count":0,"request_count":11,"received_data":1715283,"sent_data":5312,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":3,"received_data":19229,"sent_data":1566,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-09-21T08:49:50.625523Z","alert_count":0,"request_count":2,"received_data":110009,"sent_data":1123,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"56be6212c60206812c81d2771cb0412c","sha1":"30aa09f098d7eeb1f146593d6071162c3dbe5f3a","sha256":"abcbca61351ae47f1053c3c80dd0302594bca211d19a59da67a21e91d25ddd83","sha512":"65477d719d2b395e6131f37baa475ca9946e546fac0530e54962a295a14ed3f9eced6027a0dd90043588f707a74565e15a8e8baf1430a1f24ceb8957efd37e51","ssdeep":"","tlshash":"a3a01241c323f34b535f64e820851548d111141b48d1064913d4540241506043066e15","size":85,"data":"","first_seen":"2026-05-10T18:46:25.910405Z","last_seen":"2026-09-22T18:49:59.495182Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"192d25415df3ea49ffa12917819e6f0c","sha1":"8cbccc39dd55f43a19c1298c414cc2aa8470d633","sha256":"a1b48c17e63e5d62b194d52e6d920687bcaaa2de4beb6025fe335dd9c4c84551","sha512":"8c2cd3dd94972fabeadab6c6c9075ada8cdeaabd081c135627800c584a211a10659b558db3be53c3b70d6c14f9dae1aec62e04c0f6b1a52e78b85bf0934d637c","ssdeep":"","tlshash":"b7c080418206151d5006e31d30511036bc541893ca25da5d72a1222458b552f9c52a43","size":161,"data":"","first_seen":"2026-01-14T02:28:54.225794Z","last_seen":"2026-09-22T18:49:59.495983Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e06320bbe59118e6b0edfb4b18449ed6","sha1":"a420ff843ebebfa3f9689ee6991609dbaf25a252","sha256":"bd71b5529bb01582a3ac5044ad870eed32bd391b6dd4b810de8c8d37ac071d1b","sha512":"34b1f068f896b082bb48f4c3d57320c365ff8da5480b336f098d430d7e2d15f7508b04f6638e219f6316acdd35b396fe5330eea972a09008be897d0f67073de0","ssdeep":"","tlshash":"747000000000330020ab0080828000003830833020000022008382200000c20c083e2a","size":21,"data":"","first_seen":"2023-03-10T17:04:26Z","last_seen":"2026-09-22T18:49:59.496794Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f60eebc2e3ab84ad781f301fb4b744f","sha1":"bc00e724385581fe876840574d6bb01ea71e9853","sha256":"e9cc0bded7f5f7ae9de244a422883ae27b5e9274e975fe91734db82861d6dda6","sha512":"0855eaed04344060c468087a9fe995a6bcbe6d46fdd70377e77952617341729a8664d463c5a8d44b94e6e081b8c4c9b1acc5b6a5b712c49c69e2e5f6ec51acc8","ssdeep":"","tlshash":"f6c08c96de4d136237af31a4573fa78884e260243402897db23da6805f599384209e70","size":161,"data":"","first_seen":"2026-09-22T18:36:28.991887Z","last_seen":"2026-09-22T18:49:59.497684Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"494d413a28afcfe4fffca48007e1e2d1","sha1":"850050e314af812e398d2ab3d214f0b32a202c9d","sha256":"f7ffcd8293683a20916cdf93bad8bfbf79618a87123bf353a8b485f13447ae19","sha512":"a1907cbe7d2d98ddb0b8c71bf84523ce439da715dd0625cc813b6831072cad6def6555a52b7485df9df7013c3f0b725877ee7eb544df4aa9e84568dd33da03b8","ssdeep":"","tlshash":"50b09275c2036b44d99225808e0382042dd26c45fc237c12f3af2c00eb807c58434a7e","size":107,"data":"","first_seen":"2026-09-22T18:36:28.993252Z","last_seen":"2026-09-22T18:49:59.49846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"651f7b9a432e4957bccafd5c1a7ac87a","sha1":"88734fe49561bac13ec970582e553f1c7809b2bf","sha256":"6e2d6fa4891818313daa05c7b397ee83c82fec59b79cf1415c30fd11b60ebe83","sha512":"f9b4dacc20507b07224adbc900b6006e0bf80e00f050c9c81a0ebf8353eff66502ed6a3c5485384bc8f079059ec908292cc27df81d13b139b7691fe2ce15aadb","ssdeep":"","tlshash":"e701991950972670b3b32a30c78b33a46e3158777080dc1af89c91617f20d2ab7cabc8","size":694,"data":"","first_seen":"2026-09-22T18:36:28.994767Z","last_seen":"2026-09-22T18:49:59.49923Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"39598af14fc77f221063d35f132ed0b5","sha1":"7ca8db5af4f65d725033c5e5ee416542bbc93ec5","sha256":"c5def36f14e40d064b66fa5c144c7b4291a3e5ac0d797668b5ebf0cb072583d3","sha512":"9f07d871d39012fa14e8e8a8c76cba52f1b5485c0e66425eb224c3c064b4ffe1b796fd39581eb203b719936565507c3129fa9ec48c23ee6a46291ba098cc8d1b","ssdeep":"","tlshash":"4b900435104f1573533c3f43c7043770cd11535fdc5004553f1c704074301551104304","size":45,"data":"","first_seen":"2026-09-22T18:36:28.99608Z","last_seen":"2026-09-22T18:49:59.500082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-09-23T06:14:17.082156Z","times_seen":15563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"76ea582b041fe1638acf9b8aa3821553","sha1":"c509f9c811af12738e68c673d542c98d0d0f10f6","sha256":"ef8c36f6571e126129c5278e0e94e70951750b2ee2ac3e84325cfa440b7eae30","sha512":"f889ca21b37bc1787d12338aa8276b5010c461ec93a5f3ddbf01114e4514b30d870083eff6076090bfbe98f184dee60284557b29f0b699922c19e6666da31bb2","ssdeep":"","tlshash":"e6e07d0e78e070241ef8643f062105ac315c5a544a11cc554d8ec57d7b60fe10eecbec","size":317,"data":"","first_seen":"2023-04-16T05:58:58Z","last_seen":"2026-09-22T18:49:59.501772Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dcf1101e2e2a41b5e7edfd254d7ab71","sha1":"d02e8e195ba48945b712fed2080b579042704184","sha256":"4757458786bc1b850dcc96cd13acb3f4772846df2408fc43ee15fd7442aae654","sha512":"1f86d6793dc0e644b89f2d0fc162082e46fc5596c58231d12257ac268945b9eb0eeb3b67fdd11b7b58a53f9a94a43321880402f5d9582f824fb3b3589eb6d122","ssdeep":"","tlshash":"7ff0f444b0a74a81096ba1f62bfbe94e7b57b357d20446087d5c38c0ff015e2be1990d","size":615,"data":"","first_seen":"2026-09-22T18:36:28.999575Z","last_seen":"2026-09-22T18:49:59.502679Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcccf141987b5697dd16ce57515b9526","sha1":"d58d10aa7d44c813893432dec598bafe1abcd524","sha256":"9a24c56325ab65e549f27ec09da84bddae42639201db8ba729226fcf9fe68a0d","sha512":"123042d1f6078e9149108f8f7d3bf8fce895c4a8f6a5f5f1be0b59f4cb1410c1eb45524cc2d8f8439a96322b594eab711f21bc687333a2c6709ab5e389e77f78","ssdeep":"","tlshash":"f3c0921bfa6a14f6805fe310ab9795412a6ab8024591d7843b2ee0ed0f1638a71c3007","size":138,"data":"","first_seen":"2026-09-22T18:36:29.000824Z","last_seen":"2026-09-22T18:49:59.503581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"666706f828866c0d43fe8a83b87876ba","sha1":"cff2e193acc9acef3cdf9191f51f906e9084435b","sha256":"f48b62599a06782735ed8813e7fbf3457377da2f663457fef45cd4e6488cb163","sha512":"8503f767236e39b75a52f1dc479b5da4df07f4e4576965b4683e6b668eb45536b93ac4eb1a45ab0fdcd7532a08f43af4d2d85d9b0c191e993de6b0de37cab9aa","ssdeep":"","tlshash":"01e0c2f18512544163a3376a941d48524c3301430d4e61b1bcfd09180f5e11882a25ba","size":338,"data":"","first_seen":"2026-09-22T18:36:29.002126Z","last_seen":"2026-09-22T18:49:59.504417Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca8f17d8a88fdd48019a3da56a1dec64","sha1":"28b4a1eeec527116473befb55187d1bf596dcf05","sha256":"f61ebfa28b825cfe3d19ad6a969c5c8facb3fb613d1f9259500df32eefe502cf","sha512":"aa97130e3292cbd82daf64b04f6a7ac59a994b3863355d0481034461283f2f9e8569feda921b551ea904931f3da96fad2b03fc1502b5209f891c8f5945389ba0","ssdeep":"","tlshash":"dbc0921bf96a14f6809fa710ab9706822a2ab8034191db443b5ed0ad4f2635971c3057","size":134,"data":"","first_seen":"2026-09-22T18:36:29.003522Z","last_seen":"2026-09-22T18:49:59.505319Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5983bfa3d7439b8c508fad880b93f1c6","sha1":"75b3de3cf33c4f05473904d332b31d46674a3bb0","sha256":"34412612e5bf2bcb724bde57c038e249481b2e34cefbb96aaa15854c9a4cfc90","sha512":"b3b634a5e40f2575675bfee6b5351ac56a5091c25503cd27b6c4cc7bdb3a11ee116ef437d623a1959452ea0f894c6605fb3dc2bbc2efe876da7672d9d298930b","ssdeep":"","tlshash":"17c0921bf96a24f6805fab10ab9705452a2abc0251a2e7943b1ed8ac1f5638971c300b","size":138,"data":"","first_seen":"2026-09-22T18:36:29.004932Z","last_seen":"2026-09-22T18:49:59.506239Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"62bfd30fc3cf1693c91488d7ec44a088","sha1":"05d4bc7416823aa96c91c88d40e65c782befee84","sha256":"b58f9eda22c55278bf2367a2d3d989f6d2d270cfbfc63fa2a7a1fb782cad103b","sha512":"17274ee750832417955c1df2161a1b11fa4d85d6294082a88c525a972d72e9e5cfe61a7c34b36d863ae40105ad9c8fd3ee750332085905315454e56ffa673b20","ssdeep":"","tlshash":"8ff02b759f43a379b8770019121bc60479931ac1222bd5107d9cd15c4f78c15075b3e1","size":603,"data":"","first_seen":"2026-09-22T18:49:59.507209Z","last_seen":"2026-09-22T18:49:59.507209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a7d0412bdf88191bc9cf870af9f26ec","sha1":"4121665808269ce416806a924a8b973f9cfad2a9","sha256":"d8cd45c292da31364e8195bec7bf7bade6986ad893851b5ee7de1ab7a0fe7e44","sha512":"82729c183c30c939230aca85f4086574cc36a5156f7de5054ef86000a7087046fcaf45bf9392e51ae689c0e9ddb87c3e9f6bea8b12db3d0cf7ca654a11229ad1","ssdeep":"","tlshash":"43c0921bfa6a14f6a05fe310bb9706452a2eb80341d1db843b1ed0ed0faa349b1c3047","size":138,"data":"","first_seen":"2026-09-22T18:36:29.008008Z","last_seen":"2026-09-22T18:49:59.508499Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3dc69bfd35e66b706d88a19eac6e24d3","sha1":"be9c696f91e7770d128622a2249b52b8a3c79579","sha256":"6d0b91ba1755a89e5bd8b00be79b2d3dad2eefb46d3e7c97d285187c36de669d","sha512":"d2a204b6683843027a6d4eb8b0058e97e7010993667dca0ec70850c64e26a761054b268a1e8d3fc3b7e15de3ce0d104e4413bb7bc1f2753813dfa23d6552a427","ssdeep":"","tlshash":"b401a96c442ff8f9a32aa37bb30f510a016c28bb242bcd113b1ec7c49fc211808143c9","size":767,"data":"","first_seen":"2026-09-22T18:36:29.009268Z","last_seen":"2026-09-22T18:49:59.509585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a9c959653bab1f09813180a834b92dc","sha1":"6c1662b371105f8089a4ac9d0edb222b0230d09c","sha256":"1dc144a68c8ec80457b3f35a78f4c8a1b4fcca6b0485faeb876bbe5b617a691f","sha512":"c782c90b828122795f5c1f0f3a55bff3d380d6fca9c8073ec3130629697dd06e78b5f52830485eddde27387e6a8d9c41bbefbc069d42ba12d0808a1c41022da4","ssdeep":"","tlshash":"3fc0921bf96a14f6805fe310ab9706462a2ab80291a5d7443b1ed0ee4f1634971c305b","size":134,"data":"","first_seen":"2026-09-22T18:36:29.010563Z","last_seen":"2026-09-22T18:49:59.510446Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cafb28cd9e97c1524b207af30153d00c","sha1":"b18a44f72ca2e6c9aa10905fd6ff0b449f8c3431","sha256":"dfc6d041e48cc4892762c0892eac848feb6eb9b0573ff23595e1c61b33146808","sha512":"28faad69df38f11a224a2a7f74ec7d1acd97bcb6f8653e27b5cb7d4a009e058f6585d93c8146bbf948e656e4059df6b5dda630dbf03b22d339709fbc03064d85","ssdeep":"","tlshash":"2fc08c6eaa6238b14691f028444c1482176201834a5d82a6975024adbbfe00a02ae6d8","size":141,"data":"","first_seen":"2026-09-22T18:36:29.012001Z","last_seen":"2026-09-22T18:49:59.511363Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a766b584edb7472d0b3c14a0390e2e45","sha1":"b1be8dfa6098731c755e583a11153abf5c5e335d","sha256":"e386f084ac00e7c28c8a8729a601f134847828691c96046691c84fc20d134642","sha512":"102184205981aefb431a776ceb5c944855a8217c6d36ed0228d02f62950ebcedcc3f52984d49d056b80ebd6cd7593a67b7f7a73546d0303652bd456e5853e306","ssdeep":"","tlshash":"8cc02b8f28c760035157533c351e881002588013545dcf54778e1500bf5091d255050c","size":180,"data":"","first_seen":"2026-09-22T18:36:29.013145Z","last_seen":"2026-09-22T18:49:59.512343Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5393556ccc0d1676749e7d553664a7a3","sha1":"cbc5e8984455ebdd75361e5bd1b1a1201fe10f57","sha256":"3f9b2c3fcf8c50851a7767c8be8f201f5e392df4929b77f068be8b7858f99923","sha512":"1cf7ef476f93235aa790dead703dac55c49d4c67bb2d74673c4aa4f2b12e6a90374a9390ab3ebf87f54bb2ffeb7583e73b18854c6d9d2160c1a7e68eacab489b","ssdeep":"","tlshash":"39415a11de48a7f472e3f5868f2dbb01a67d9324b355007eb8ab6c5d28378137400d68","size":1965,"data":"","first_seen":"2026-05-10T18:46:25.982222Z","last_seen":"2026-09-22T18:49:59.513224Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c9e57906fffd66cff607e9b760155ce","sha1":"abdbce0e3129ad4bbabebe117e08c3f612c55aa0","sha256":"a78cda739a99b5da5018c98236333cb586c0706ce9880147c1d36dd66c44aa5a","sha512":"a903c1067971ea13b854f83672e06f73b11c1543af48def198d49b0223bc5e867c1a7331547327dfaf212a30cf9a5efb2de847ac421ead5d2749f1aee5c9f848","ssdeep":"","tlshash":"5de02d22d105948a4a8714b23809204d0908a8622e846f1d54ad293cbce27f9676f23c","size":317,"data":"","first_seen":"2023-04-16T05:58:59Z","last_seen":"2026-09-22T18:49:59.514151Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ceb13d29ebb5c191329dec7392d4c6f8","sha1":"e1d3aa748a99e7f10ad41b5ec14d94e8dc28c220","sha256":"2aeaeb280197ef28e5841c8fffa97ac0a3a6497f875345c61758a3743168c97f","sha512":"556293a9d72d5609047d0029b44ce7ebb8c4318bd61628cbb2697036b0d658c7cf46f8c2a93bd69d18e52232617d9f494ed4d056602961b20d423f9634a777d9","ssdeep":"","tlshash":"8201cb6b2df654308113f0789aaf91042033a0074809ad197ccdc4988fa4b7d0b76bec","size":848,"data":"","first_seen":"2026-09-22T18:36:29.017169Z","last_seen":"2026-09-22T18:49:59.515026Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/js/alert.min.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8fd2629e09a80a823f3ca71ddb5788b","sha1":"1cab959b6ccfe4c02b9a666879ad555e3d73ff66","sha256":"ed30a5a5db68b36f0cd13c7668725914667e23e5f9d2e7f156894f4e8a4bc5d2","sha512":"19decf394397388d9ee3a5fd03f902adbb1d86c0184b57586e2e8199367456f833d87b2f10a499c3fa3015208fe7e13b945b09c6942f88c8e2e6c28b5a183a3c","ssdeep":"768:7VBqFYv236fHR4itmoXY01iDkITip/dhq2AXI4wC+lP4m:7gDAMDkITip/22AXljm","tlshash":"b0e2e455721134fa57ef2329e28f1208a163b15a4703a49070acedf42bf5e746b6bf4e","size":33948,"data":"","first_seen":"2023-04-16T05:58:58Z","last_seen":"2026-09-22T18:49:59.422814Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/es5-shims/0.0.2/es5-shims.min.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e3b4f3a8f6048da9934fec1ca08cea","sha1":"39852ec495232af465ec59e74f6ab0c51a91390d","sha256":"40f09dcdb226fb60428bfe107e02f6c50db1561694264b0144e0155f9f3e4140","sha512":"ce39cd7c7d9f65a5589b4192ac8ad1aec0fce4c540600525db1effae6920fba6c1c3a9c07766acb5bce9afbb92097136101497e74962a3bd49c1b144cc71b69d","ssdeep":"","tlshash":"6b5136cd749af435c1572a74041f2419f23e9f2c4a9ca880e3c1e4e6ecb1949c2e5f78","size":2703,"data":"","first_seen":"2023-03-07T01:17:19Z","last_seen":"2026-09-23T06:13:39.10557Z","times_seen":5415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/4e3308c2256651d3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bb41d890b53f38ab70a807d68b4bd15","sha1":"7b3388067474319f45976d4c5b957a5e903fe72d","sha256":"e67fd29dfe5e388f0195e485c7c797192e58514d4a14dd79e49343f3905ed1a0","sha512":"6aa7c480a9db1374f4461d9d94fce380525f17520892b4babeab52dbda7aca69a3ce82abe7390a98fcefb18ef39e6d945722d4ad013462399337d508c418726f","ssdeep":"1536:a21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:wN1dfXIQkN+nF/JH9zf6","tlshash":"b25475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","size":305380,"data":"","first_seen":"2026-09-21T07:52:55.771036Z","last_seen":"2026-09-23T06:15:46.130096Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/gzip_loader.php?file=bx_templ_js_e66c1c4385966e90b8aa3a4cc2e67aab.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1dff3e7adbbe4496986971fdadb2bd2","sha1":"b9d6c85e60c07e3f411498b04bc33a8f8e092c31","sha256":"b2d4f82992aec74038cadb3ea010195977d20f3bc50ce62ed753617f9e538248","sha512":"f445cf03553e3b30d254ae3b055589e9c15e69cfb9c1ff6bd11f0684d0c2792124239e10be1805411e41f2ee29762fdf74645535df369b0fc7f98d617bcba660","ssdeep":"3072:bGsKXlI2p0WPSbDrstfa5T0MeyKd2/Jrhn6G7/hUGZ:tKP6WgDCy5T0Mwghrhn/1Z","tlshash":"e324389c7396702243bb30b9046f500eb2365467280dc854f56ce8e57fb8a5e92b7fb9","size":218145,"data":"","first_seen":"2026-09-22T18:36:28.931364Z","last_seen":"2026-09-22T18:49:59.461896Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/b8699552207dc058.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"720277aa22671bc85a4fb66957355927","sha1":"10a13668c4cb20c1eca884b6bfb26269b90f593e","sha256":"13377900a0c17db5f2cb04af4164042af25cf3b0f836264c0f57dfe32965f252","sha512":"5de7601a48733b75a24bd6e229439fe627d1c9450e3e7b9a5b7236834e6e8dc1d076a0eb8290b86ba1c80fb81ced838cfa11ab1f097069f00b3d8f1955506a5e","ssdeep":"96:QnvwRO+264XfrGRP5FdX821dFeFIVC+E4Y1vECxGQ6aXfqXTITv1J0a2qf:QnvCd2oRP53MrIQbs87CWv1JzLf","tlshash":"b8a1e7ee324136b697c605e4c4bfa616f17d0d11ac0da452f04990112cf9fa751efeae","size":4763,"data":"","first_seen":"2026-09-21T07:52:55.764877Z","last_seen":"2026-09-23T06:15:46.11382Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/jquery-2.1.3.min.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84320,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T05:53:00.237195Z","times_seen":16848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8760a12ef6e9babba627d947a281e792","sha1":"87697f5597a3be95d20b1214ad071016dcee7b88","sha256":"74a2115a5db0b657d6e9f258badf3b917a0927f070c55a0a417cac9f99cfc3fc","sha512":"1ad6594b041dddb2e299d4fa8453a8e9c6cb773401186ee6294cf78c620a5f5bfdb2935964610bbd940ce6150760b298eb4b1156c8cee6273bc759ec03212c2c","ssdeep":"6144:nBavrxWqgzPKILPYiIl0HrNY5semgwIGg+8zDfDdeLBKkN30DwI3UhcziOKDOwtr:lQPUK0J06grM2Q","tlshash":"8f94b59db1e2f0a143e765a4803f5a0bf23b695578099090e721e9e1bc7899f9133f3d","size":429760,"data":"","first_seen":"2026-09-22T18:49:59.51593Z","last_seen":"2026-09-22T18:49:59.51593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"06ce398bd571dd5ae6adb8521f0ee8b5","sha1":"d90c22300b89d7224b881e76cbdf494e11ddc66d","sha256":"8513bcb42d5ae235d7f8332cda85d75beebe0dbc41d510856eaae33cb9cd79b2","sha512":"4c19fa91b4fc759f492252089473fe9d9dce960bb8a7ac5c6c96faf2f92f74402711dcf17df29c62e7ef5484c123c5ba30cbbcf51bd88a50ee84c1fcff0daddf","ssdeep":"","tlshash":"6a51e450e65d63ac88f2748eb8b76320f136eb30f4119219b645def0ec75a469b63a1c","size":2700,"data":"","first_seen":"2023-03-25T23:10:10Z","last_seen":"2026-09-22T18:49:59.51725Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/doc.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a997162c05ca6f5e1afaf02b50738589","sha1":"66f68620606e418a9b8938c7e3ece0e976903971","sha256":"3809447705acada0f6aa9d28c7e8c22a063d9d2965371c01c55ab4fda9a43b42","sha512":"d73bbe39b62b57c30670ca5cd9aec71b7c0a31f7660fd1f1e5457a07675ce5ec7a1bab29493e3d16154f56178bbe4d86928fa5240d1dc428723d00f47fd5772e","ssdeep":"96:Pd98AuAhYK20eL4YoXCs0gbyGASt/JK6krb:PdevPK2L4YoX8gbyGASW6kb","tlshash":"d1b199f6c78620061332e74d6612782ccb1240ef96538f8575ae9877ff12da4724daea","size":5427,"data":"","first_seen":"2023-04-16T05:58:59Z","last_seen":"2026-09-22T18:49:59.426426Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","size":49523,"data":"","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-09-23T06:15:46.122617Z","times_seen":2136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/cc28082f2a6e35cd.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c2176ba91c5d48a7e69ad483eebc754","sha1":"d6f091b83acc0f2cf311b42303bbf28fb68c7387","sha256":"91beb8de8093bb181db9c18ba178563f5faa2abde5f7da801516a78e7d5692db","sha512":"bb04a2b6f71614c8a039bf9f9bb59b9c1a9ab5b10d6f6e74295e74f4ba9733487b300cc90908908292ae81379135efb989d1f021ef1a802b9c0a83c611264212","ssdeep":"12288:ALuQexTIRuqk2bZfWFJ/jlaWtycbWBBiwgqON5UWnhBPnzBf:ALunJIRuqk2bBWFJ/jlaWtycbWBBiwgV","tlshash":"80e4d98af5e1b07142e7a0f9803f150ff23a7a15550980a4f62ae8e57eb858e5137f3d","size":718502,"data":"","first_seen":"2026-09-21T07:52:55.917102Z","last_seen":"2026-09-23T06:15:46.108481Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"239a98dab6264e514548fe924b5cefe5","sha1":"7c412f506f0d9dcbbc4bd79b1286dcc212ce1762","sha256":"617ebec36bcab15c42300b36aa1f6ae0faf8e14b5c8395ec348e250f7e5ba73d","sha512":"0c7079934b2e99e976956441a9f6d6abfef56aa51549d30d0c2d31af9ed1d40b15a6eda83cf32833a5881fd8dcd0423dd1f887a4e6ae44a1bb1e808cde7ebd58","ssdeep":"","tlshash":"2bf02d283c8db62b0113c632dfbfca39e0a11de29f824d3056210e9619386480123c9f","size":652,"data":"","first_seen":"2023-03-26T01:07:23Z","last_seen":"2026-09-22T18:49:59.518267Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/5d6b6305fa2a6f17.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a75a8ddc92422e9b7c852a17c6b9f1b","sha1":"39c7235c08383e7ca7f3612d80b6bc7d3bf1da97","sha256":"28addecb22f26a40fe7ed7d4f4a1f77c14d76b5bdf151515217ada42558c99f7","sha512":"c64116e2f9732fcdf153813df056551fc1f107955f6bd7df64c709aba0f996d9c3af6fe8954c3f397787f2d8228efb0a92b55f212f72c7ccfa1f43d3a1ed421f","ssdeep":"3072:5IJjYL2W0MQt0Qy1bCiTcZW3hUGWiWB8A2r43HZ5BcZavMdwXR0uchqMJVioJAGS:5IJPW0MQt0Qy1bCiTcZW3hUGWiWB8Nrc","tlshash":"ade3d78db2e1b47142d7a0f5503f6a0bf33a6459a4098494b72de9e16fb898e4137f3c","size":155258,"data":"","first_seen":"2026-09-21T07:52:55.873015Z","last_seen":"2026-09-23T06:15:46.123607Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/rss/rssbox/virtualpaginate.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3511970bf1ad80fa0bb3c1962012e5e","sha1":"f5c8c9cb686a855698c05f8a4850f9a84d8da8e2","sha256":"71676b78e6beeadda879aa9b9f361347964596cdddd506f036fe7207692db230","sha512":"d36ac8b499daebd22f73f8a986fc4284cc9f177bf653bbe8b9e7ce560527a18e2c26b1382ee8fe30714db195776485a059c3a9bcc1ff08baa48677b507a4909c","ssdeep":"192:A2zucKVhs3Cho8iyIozOiGxvVsMi/67P8ck+b6yUR4XeIWki6wXSNB:A2zucKVhs3/8iyIo6igi/6pXb6yUKOIf","tlshash":"53f141125dd06278a31bc1776459231efe355839bf16ce4db0acc2a06e9086c26bdb3e","size":8176,"data":"","first_seen":"2023-04-16T05:58:58Z","last_seen":"2026-09-22T18:49:59.419515Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/rss/rssbox/rssdisplaybox.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"21133be769bbd522a61a1a4fb6e743c5","sha1":"3eca42f4442c1abbed3874b8ce694067129568d4","sha256":"866718c33644f83605bae22627af65684001f253b43587de84ed3cbf1908189b","sha512":"9383c1f69d7eb6e170b977ee527ea27204c6215c4cc435d31fa6e583ef9c4bb7e8a1fe04c9b7c5803e7c41e602a380bbeb7768da090f33db59a92b445b203f27","ssdeep":"96:bMMLUn5Ad6QAh84aSqf3mU2okS67zLvt0Bp/6i8FcVOpDyfcynnb1weSqXACyY8P:+5AqqvmUNszLm8iG1xynIqyY8fzpc8","tlshash":"5022d68b0d0185326306e9f926095397e730407b9f73ea4c388ee0e4286765d837e77e","size":10084,"data":"","first_seen":"2023-04-16T05:58:58Z","last_seen":"2026-09-22T18:49:59.455487Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/share2/share.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd93a04426fbdf0c39cc4143f1cd3e2c","sha1":"a8cebe982f25e97f4539e15be448b58fe7adeccb","sha256":"e89ffbfe44f4c9b22bc2c2b4b769316ffda4efeb64c128ff7b72a06f562f8c04","sha512":"cea7ddd3b9e010d8d0b103c532fd24f17f6f0db0728e85b7da58ff55408c24a27788b21411ef525e83e53dbf54f4dd8f124b2b6cce229eff8c58e91d28eec4e8","ssdeep":"1536:+45QpjY2UwOr2zqNxB1D9YYF3VBKbGybr1R3PRjt42DNRdBttVHk:+JWB1+v1bn3PRjt42D7tY","tlshash":"1ee3098d3d90b45e139b9068b51bf00ff2298c15e8e90c91f690c5d8d9f384ddb5abae","size":146583,"data":"","first_seen":"2026-06-15T16:10:07.966936Z","last_seen":"2026-09-23T06:13:39.091453Z","times_seen":1861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-53c35c90.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f38e75732892165c554961779f79138","sha1":"a5f9efaab095432315549efede70e9f15c2fd4b9","sha256":"de30ed4c5b345d69b642c0e3c090bb5fd65290712aae4bcb20b3e66ee37be63e","sha512":"5e3812a249a341a05ff05c5e9f022d942daf1455537bcbc43eb9912a6d1556f7d272cb515e6e62897ca945c0dac71735c32fd8040c057f0dbaf69fd9712eb8d2","ssdeep":"192:sOiMOSZkremHlX4Wpq18LX157r5NpPlqJYoxpPsYoxXPqqt4ML+9Xb:sOir8Ce8pq1Y1FR9qWgpBgVWMy9Xb","tlshash":"ce12daf932a1b8c412f659c1085f657b01b97e07b90d259b8b22599279244ce50f2fdf","size":9234,"data":"","first_seen":"2026-09-14T07:39:08.755167Z","last_seen":"2026-09-23T06:15:46.117317Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-53c35c90.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"870d7e19e4d083901f771244ec27bd64","sha1":"ff89b9b0b771e974879ed4263f23f40c63dec373","sha256":"b48e95a8a6dbe23303674f5f13e1c1d35148a93143393c5674a6ce1f61d08a9c","sha512":"664ed512bcb3fb3d9c554a5a30c95a5de40b3a5e238a8aacfc3c97e2751b616e5578c20331998a59665c79b5ce2c739312157c5062b798b29137de6f97c69b15","ssdeep":"1536:GBD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0Z:I5SGX7g8BYlyp2z2BWoy5Xi6","tlshash":"c034c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","size":249149,"data":"","first_seen":"2026-09-14T07:39:08.750816Z","last_seen":"2026-09-23T06:15:46.107806Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/flash/modules/global/js/integration.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c40ce5b4ba556b298fa6c3fba55b3a85","sha1":"82d1ec246c1994705606578047f515d0e93be03a","sha256":"a2c3b9eedba096c8f82af30a81a0c67af571bf0e5495b66cc25fe2de78493c8c","sha512":"648f80af3269e336554534af71381d6168d16abb52f2a73b409ccc184a9d013065dce6d27295c3970f2705ae9d0a73d39fb5b44c1bf699014bf47d2d6ca84b5c","ssdeep":"","tlshash":"dd11bd08a2b164cb08ae4154da3d1a5c5d5745b36dda4c14af0c40d96e217e377ea8f0","size":969,"data":"","first_seen":"2023-03-25T23:10:10Z","last_seen":"2026-09-22T18:49:59.445473Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/9f811e58494ec57b.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f89012026317711ae6cf110140271db","sha1":"f260295dbee0d01e71c54941a9db339d4e549545","sha256":"3f4ffec82f4d23794c84be1bbae0b4966b3b587ade230c2b98f4af4e929e2885","sha512":"fdbfb0f4e59e424382970d996b56bed8ace64b874a90687e1bcae6823dd5c86346dc77c9b7b063a453f7796c9d63d6862f4a89d243b337f03c1d4afa02dfc211","ssdeep":"768:/S8S2XuKTeA/l0OjtCCMWZb//IQpgFZmrm0ZrdzS8Hkh28HSndPfjCaunAbCGRC9:6ay0ZJ33HTS4+nAvKCw","tlshash":"f103b58db1e1f0a14697a0b0813f210ff37b6895a81d9440f765e4e16cba99f6073f6d","size":38375,"data":"","first_seen":"2026-09-21T07:52:55.720596Z","last_seen":"2026-09-23T06:15:46.11899Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"library.se/js/buttons/css/social-colors.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.797Z","timestamp":1790102941797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/buttons/css/social-colors.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-14c3f\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85055,"size_decoded":6135,"mime_type":"text/css","magic":"ASCII text, with very long lines (732)","md5":"45e197f7e0903ccd2df2fb4b43edbe94","sha1":"55697653004173438c03b851085181b91666ab1e","sha256":"c97876f86e848aaa788a8b35b8cef01e6669417ad7964fdfd8204edbec126ace","sha512":"effc44d3d637b17bd16204e582bb2a59e8df24327fa97e9ca68331bb2f3e34f1768da51ebfe19331878a058df2427505065f601f49248c54f194db242fa45b7b","ssdeep":"1536:dkDZTn8ShCFzeaNblsFLbxm8RIVvxr1E+GmPgGGgb02GoQbK5:P","tlshash":"c483e2b94191570c3a13820d0f11f927b76e5981e849be3f3a2be0a8f3fb5d1d49a563","first_seen":"2023-04-16T05:59:00Z","last_seen":"2026-09-22T18:49:59.414569Z","times_seen":5,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/jquery-2.1.3.min.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.568Z","timestamp":1790102941568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/jquery-2.1.3.min.js HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-14960\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84320,"size_decoded":29896,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32180)","md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T05:53:00.237195Z","times_seen":16848,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/12.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.935Z","timestamp":1790102941935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/12.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 1177\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-499\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1177,"size_decoded":1490,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit/color RGBA, non-interlaced","md5":"a0b910a73cdc3c2564a64c2fb00ffc81","sha1":"447275e50b1cf4f688f438970c5a4285be34609e","sha256":"4efcba221c06b5053e988e01316da8f335c3214f190a3bc33d922482455dac31","sha512":"c1f9efc94d3614e10a18713bc199c8a2033acf88868eb99d6ff671b15e7675627d4ec464b3393f4cd8df23eb3e51f7dbeadf38124c1054a35d17cab10bb73dc6","ssdeep":"","tlshash":"8421d732521e9075296507784902d8213e7f3182f44216aaadc059eda337a044bc82a6","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.417609Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/ee.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.948Z","timestamp":1790102941948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/ee.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 429\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-1ad\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429,"size_decoded":741,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"1cdfaaa10ff170ce19ed46339efe3af6","sha1":"93d76618cdf7b85876ec35a231ff74dddd4375b2","sha256":"6ebe8f7e33db530652a0b1c6394ec4f50a2fcc0b4a31d1ab33db65d6815dd087","sha512":"43b69a60fc37e3fea6aaeaa082659d94ae69fd10969e0e6b7e9731001b0efa098fa74c475561073e1b532247e504c8000a6f4eb076faac4d7660674996b2aebf","ssdeep":"","tlshash":"50e02b84b91094398032322b982782d9e5ba09b033030ae8bc84887e9c2a21085daf87","first_seen":"2023-05-10T00:06:02Z","last_seen":"2026-09-22T18:49:59.418726Z","times_seen":441,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":102,"dns":1,"connect":41,"send":0,"wait":38,"receive":0,"ssl":337},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/rss/rssbox/virtualpaginate.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.571Z","timestamp":1790102941571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /rss/rssbox/virtualpaginate.js HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 13 Dec 2020 21:23:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd68662-1ff0\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8176,"size_decoded":2645,"mime_type":"application/x-javascript","magic":"ASCII text, with CRLF line terminators","md5":"b3511970bf1ad80fa0bb3c1962012e5e","sha1":"f5c8c9cb686a855698c05f8a4850f9a84d8da8e2","sha256":"71676b78e6beeadda879aa9b9f361347964596cdddd506f036fe7207692db230","sha512":"d36ac8b499daebd22f73f8a986fc4284cc9f177bf653bbe8b9e7ce560527a18e2c26b1382ee8fe30714db195776485a059c3a9bcc1ff08baa48677b507a4909c","ssdeep":"192:A2zucKVhs3Cho8iyIozOiGxvVsMi/67P8ck+b6yUR4XeIWki6wXSNB:A2zucKVhs3/8iyIo6igi/6pXb6yUKOIf","tlshash":"53f141125dd06278a31bc1776459231efe355839bf16ce4db0acc2a06e9086c26bdb3e","first_seen":"2023-04-16T05:58:58Z","last_seen":"2026-09-22T18:49:59.419515Z","times_seen":10,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/themes/dark/theme.min.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.789Z","timestamp":1790102941789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/themes/dark/theme.min.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-2015\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8213,"size_decoded":1673,"mime_type":"text/css","magic":"ASCII text, with very long lines (7946), with CRLF line terminators","md5":"888934f7e905359584ab8b523c2360b6","sha1":"cfaf46cca18a4fb50302065bdd71213d670f2c0a","sha256":"3dbb7943e88ba768421d9e8a327213438cb1b310f203cbbabe38539d364bf3b3","sha512":"210f59c42b62d2238d407f87e3167db0a23a1be8c4f728823faff0f21da34db4ac0013628da574401fd55093392f0c5174ea0a575c85fa87939c8950dcc0973a","ssdeep":"192:uIdIsmITbNhTh3hhhgh3CLgu3Kxxaz9uz90z9Az95z9vz9uz90z9Az95z9Xz93o1:Lv3Kb","tlshash":"72029c3ca4432d65b32a46519d2ea9ceb1b498528203d91be77fb5f0fb616edc03f121","first_seen":"2026-03-08T19:34:19.716598Z","last_seen":"2026-09-22T18:49:59.420756Z","times_seen":4,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/modules/boonex/avatar/data/images/130i.jpg","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.183Z","timestamp":1790102942183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /modules/boonex/avatar/data/images/130i.jpg HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3043\r\nlast-modified: Sun, 13 Dec 2020 16:08:54 GMT\r\netag: \"5fd63c96-be3\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3043,"size_decoded":3357,"mime_type":"image/jpeg","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"82e67504a3202fb6cf2cf5840f2884f4","sha1":"e6aae968ea7a99c5b89d0a4ec2d48f9f3b99c401","sha256":"bc23db928b9fe8e00846f3b1e178e578ddbe2ec0b0d9e5a93813738984cc1a67","sha512":"82b39d1132d9d27c0f6c3b9a85a96793bfe6ceee874fd7424d0ae1a499a8128bb066112797c3b64f277106c1930309dd135905dc0a6bf2e428a121809d4c7933","ssdeep":"","tlshash":"9b513c5066f351a6b08e46271b3f45ecb972db8a0bb523a60d5424f097e06ddd2ac2c3","first_seen":"2026-09-22T18:36:28.962125Z","last_seen":"2026-09-22T18:49:59.421971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/js/alert.min.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.790Z","timestamp":1790102941790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/js/alert.min.js HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-849c\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.0.6","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33948,"size_decoded":9371,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31291), with CRLF line terminators","md5":"f8fd2629e09a80a823f3ca71ddb5788b","sha1":"1cab959b6ccfe4c02b9a666879ad555e3d73ff66","sha256":"ed30a5a5db68b36f0cd13c7668725914667e23e5f9d2e7f156894f4e8a4bc5d2","sha512":"19decf394397388d9ee3a5fd03f902adbb1d86c0184b57586e2e8199367456f833d87b2f10a499c3fa3015208fe7e13b945b09c6942f88c8e2e6c28b5a183a3c","ssdeep":"768:7VBqFYv236fHR4itmoXY01iDkITip/dhq2AXI4wC+lP4m:7gDAMDkITip/22AXljm","tlshash":"b0e2e455721134fa57ef2329e28f1208a163b15a4703a49070acedf42bf5e746b6bf4e","first_seen":"2023-04-16T05:58:58Z","last_seen":"2026-09-22T18:49:59.422814Z","times_seen":13,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/buttons/css/animate.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.794Z","timestamp":1790102941794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/buttons/css/animate.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-e923\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59683,"size_decoded":4852,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"937ad040180f2b1f9870e89223aefa03","sha1":"45c6e24dfc6a738423f57b359fcd7933bbb923f4","sha256":"c7bdbfe659a00bb5c850be597b3b23466194c780d01c5772cae345f39e11d8a3","sha512":"26dcfec67b38f2ea7f1c318e619cb49f87be373c828a09095aaaeaff9683d306d9f4a96702f601aceba079d5e35862b4fe0351a666dd7b133a7933281cdddb9b","ssdeep":"192:xIQHnfwf2T/awfDZUiduG+MONjPscYODkcWFFLbimZbHMxymDSVbyPiVEzfukrWy:xIWdGyC","tlshash":"eb43d8692da1104466370a1587df9e78663ce2a31866ecfeb3d2548bcf41fac23cd617","first_seen":"2023-04-16T05:59:00Z","last_seen":"2026-09-22T18:49:59.423563Z","times_seen":96,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/se.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.129Z","timestamp":1790102942129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/se.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/gzip_loader.php?file=bx_templ_css_be57568c879c13d8cd8ffc44ac2347c1.css\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 576291\r\nlast-modified: Sat, 26 Dec 2020 12:47:57 GMT\r\netag: \"5fe730fd-8cb23\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":576291,"size_decoded":576608,"mime_type":"image/png","magic":"PNG image data, 1600 x 1200, 8-bit/color RGBA, non-interlaced","md5":"5619e9b8ca79269bdc17957b35c9614e","sha1":"4e4bf6471d618737801d5e861fe7ab37fb3a7d34","sha256":"c81021522cba44a9c9db07019550d1491b34a0d10da5c091cea08852382c4ec4","sha512":"ab11a09aac1c6523416f086edf279f33107ccaf36ea5beecf1b31ed42b9bf4d7b0bf70e1d36caebfd159f9326881ac62064056f3ba9d294fce1691c587d0217d","ssdeep":"12288:DebbcPmyh1K6o83zUoBHT5St1Ws+rMPLOwfd2EimkEjnw4uiofdYDulR:Defpyh1KMtYwrkR/SEjnw4Jouw","tlshash":"32c4221e83f5ca29ecaf213b09149b2a1732704722e115285ba7fdcf356ac3e4535a5f","first_seen":"2026-05-10T21:16:33.978691Z","last_seen":"2026-09-22T18:49:59.424959Z","times_seen":3,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.996Z","timestamp":1790102942996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /safeframe-bundles/0.89/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11893\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Fri, 22 Sep 2056 01:18:59 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\netag: \"2e7b6e3fb8d17570cbabde24df196cc6\"\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 15 Jul 2026 12:02:36 GMT\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 9\r\nx-request-id: 98aa400ede75660a\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49523,"size_decoded":12788,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49523), with no line terminators","md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-09-23T06:15:46.122617Z","times_seen":2136,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/doc.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.791Z","timestamp":1790102941791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/doc.js HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 16 Jan 2022 22:57:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61e4a2d7-1533\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5427,"size_decoded":1971,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1122), with CRLF line terminators","md5":"a997162c05ca6f5e1afaf02b50738589","sha1":"66f68620606e418a9b8938c7e3ece0e976903971","sha256":"3809447705acada0f6aa9d28c7e8c22a063d9d2965371c01c55ab4fda9a43b42","sha512":"d73bbe39b62b57c30670ca5cd9aec71b7c0a31f7660fd1f1e5457a07675ce5ec7a1bab29493e3d16154f56178bbe4d86928fa5240d1dc428723d00f47fd5772e","ssdeep":"96:Pd98AuAhYK20eL4YoXCs0gbyGASt/JK6krb:PdevPK2L4YoX8gbyGASW6kb","tlshash":"d1b199f6c78620061332e74d6612782ccb1240ef96538f8575ae9877ff12da4724daea","first_seen":"2023-04-16T05:58:59Z","last_seen":"2026-09-22T18:49:59.426426Z","times_seen":10,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/buttons/css/color-variations.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.796Z","timestamp":1790102941796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/buttons/css/color-variations.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-378a6\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227494,"size_decoded":13884,"mime_type":"text/css","magic":"ASCII text, with very long lines (732)","md5":"1ff3a273a7416465bd61b0fb4fa38890","sha1":"93b7c369aec2b212b0e532cefb42057913462dbf","sha256":"cbaee5dc818990cdb1c73f1e4b29ee566b2500ffbd919e91e692e3dfd2caf6b0","sha512":"abcf281bb975ae9e95cae27476bb72767d0e9f1d2eb0b5f614717d8895e379a2eca54ab0b5402bea44ab4e6ec34f717bcd35cf9e0519a9992ddf5a17ac31cd00","ssdeep":"1536:yipPIRz1VziEs0RfPlSIkG7Fd3km5sHBwl8CoKtDhuzZihsKcybxRCTVGWBnI1GG:2","tlshash":"c924127a4581570c3517820c0f41fa27bb6e5880a809fe7e3b3be5a8b7fb5d0d49a563","first_seen":"2023-04-16T05:59:00Z","last_seen":"2026-09-22T18:49:59.427202Z","times_seen":5,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/us.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.938Z","timestamp":1790102941938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/us.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 609\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-261\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":609,"size_decoded":921,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"968591e0050981be9fa94bd2597afb48","sha1":"dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43","sha256":"36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585","sha512":"ba8e09654cff264d428b1b3cf6df764699c6a754f2db329643881fb75cc8647a9c2777f05bb8c0d81b9d648d345796ffdb14fd231e2bb1caf71530098d12f219","ssdeep":"","tlshash":"9cf002c1fb856ae9e16a52610d7a16701c07c3a4217640a46c26ded41929f0dc2d8221","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-09-23T05:01:04.141454Z","times_seen":8287,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/media/images/flags/en.gif","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.893Z","timestamp":1790102941893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /media/images/flags/en.gif HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1006\r\nlast-modified: Sun, 13 Dec 2020 16:08:55 GMT\r\netag: \"5fd63c97-3ee\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1006,"size_decoded":1319,"mime_type":"image/gif","magic":"GIF image data, version 89a, 18 x 12","md5":"93cb87bcf85c3b2756f6b296494cbc37","sha1":"14d88657745649cff40766b2f43a0daf75fb955a","sha256":"afd35d185a9c29cdf52a6d00347efb737cfa717cc161635809351a6aa7eca943","sha512":"4ac3a3c19c9bf281d7f42442d6526fd1c5c4c7bc4fa182341fec4a9f9f8411564739963858f2a31a9f36c24b13879cbf661254a37fa11da4b07030e3acfeca7b","ssdeep":"","tlshash":"2f11dc472a0ad418dd09087d58d2be868688f3656abae35730b956fedd5c299080a220","first_seen":"2023-05-04T17:46:50Z","last_seen":"2026-09-22T18:49:59.428912Z","times_seen":196,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/share2/share.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.870Z","timestamp":1790102941870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /share2/share.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Tue, 16 Jun 2026 08:02:05 GMT\r\nexpires: Fri, 25 Sep 2026 06:29:44 GMT\r\ncache-control: public, max-age=216009\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\nx-nginx-request-id: ba85b284a9341fd4\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nvary: Accept-Encoding\r\netag: W/\"8d02cdf84f1b7abb2a5a60c20ee6ef48\"\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 9\r\nx-request-id: fd0201b511ddff47\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146662,"size_decoded":40367,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64803), with no line terminators","md5":"bd93a04426fbdf0c39cc4143f1cd3e2c","sha1":"a8cebe982f25e97f4539e15be448b58fe7adeccb","sha256":"e89ffbfe44f4c9b22bc2c2b4b769316ffda4efeb64c128ff7b72a06f562f8c04","sha512":"cea7ddd3b9e010d8d0b103c532fd24f17f6f0db0728e85b7da58ff55408c24a27788b21411ef525e83e53dbf54f4dd8f124b2b6cce229eff8c58e91d28eec4e8","ssdeep":"1536:+45QpjY2UwOr2zqNxB1D9YYF3VBKbGybr1R3PRjt42DNRdBttVHk:+JWB1+v1bn3PRjt42D7tY","tlshash":"1ee3098d3d90b45e139b9068b51bf00ff2298c15e8e90c91f690c5d8d9f384ddb5abae","first_seen":"2026-06-15T16:10:07.966936Z","last_seen":"2026-09-23T06:13:39.091453Z","times_seen":1861,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":2,"connect":31,"send":0,"wait":34,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Yanone+Kaffeesatz:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.784Z","timestamp":1790102941784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Yanone+Kaffeesatz:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 18:49:02 GMT\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9558,"size_decoded":2181,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0e272d17e3cd4130bb108d9221b11d9c","sha1":"7048d190c8f06a54f196c35cfb97082fc1ea6e4e","sha256":"f5241c70def9cc50d4e00f3a22fb57bd30f571fe6de4158624b0fb7652a44a8b","sha512":"0771eea4b6a40c850e7a49b5c54c6af8144152f37dadd210a5828acc1b62ba04091a2c68f8a3d67662b246936f2a30d86e724234bb505c2803999334c128519f","ssdeep":"192:pqZU4qm4bqGIwV4MpqDkqUZ4q/4bqGIwV4xkqan:sq3qY4XoMqY44","tlshash":"5c120f90001b6001674724e223dd7ab5ef9fa244f440d032f7fd9b4bee9bdaa526476d","first_seen":"2026-07-04T07:58:30.246807Z","last_seen":"2026-09-22T18:49:59.434562Z","times_seen":11,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":39,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/css/alert.min.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.787Z","timestamp":1790102941787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/css/alert.min.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-144f\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5199,"size_decoded":1584,"mime_type":"text/css","magic":"ASCII text, with very long lines (4932), with CRLF line terminators","md5":"5fc509bdcda8d78673ff1f301d6cb7cc","sha1":"4feb276db3de619ef00332e653d2cacc381fe8c1","sha256":"60074e2e1b95f085cbaceaf3e80a9b60a0dcee82bb88c90aa50a7e6643278f9c","sha512":"8ec86c65f61bc47538bc2c3e2c067e984c44acd64fd48e256dd8df175a7c8faff1537166ff90bcfc46dafaed1ee0d9a8d9bf78725407374030258439350ca3cd","ssdeep":"96:uIdIsmcGFbwkM0i5oUF7b22T/EamaO3ZUjzjzq93jNQonGf:uIdIsm3M0oWmG3ZUjzjzq93jNQonGf","tlshash":"e9b1877ea1182ca9c70f8524aafe13c7337461e641a3cc2fb47dad2a97adb54203d443","first_seen":"2026-03-08T19:34:19.549944Z","last_seen":"2026-09-22T18:49:59.435334Z","times_seen":4,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/libmonster/info.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.818Z","timestamp":1790102941818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/libmonster/info.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 1852\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-73c\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1852,"size_decoded":2165,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"f0989f9ba916d7a89267c0c94eec8812","sha1":"e94f0fb008bdd454be3c51d23877a6beb3119acd","sha256":"cf74fd846a81f1790337011059200f0c2c9455b82c9281c3dc725e6078137c9b","sha512":"1525e7fdeb117d4cff5187501ca6adfa6cc2dd9601dee10e3394e839d4e0938a4407e54bd2f46ef6a6c931db3a51cf32bc03d8eefdb78dc6747404d32ad997c6","ssdeep":"","tlshash":"5e311bb7f2a3710c0c832fe118d66580e847c3c6da4f85590c5556dd05ab70a94c9b9a","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.436463Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T18:49:00.600Z","timestamp":1790102940600,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: text/html\r\ncontent-length: 274\r\nlast-modified: Wed, 25 Nov 2020 03:39:45 GMT\r\netag: \"5fbdd201-112\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/m/photos/get_image/browse/e111f112ae2d2e565614991a1a305841.jpg","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.831Z","timestamp":1790102941831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /m/photos/get_image/browse/e111f112ae2d2e565614991a1a305841.jpg HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10134\r\nx-powered-by: PHP/5.6.40\r\ncache-control: must-revalidate, post-check=0, pre-check=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10134,"size_decoded":10372,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 140x140, components 3","md5":"7fb508397eba87c8e4fa4e49c86217d9","sha1":"66fe50faa46a05e59cbc4d807810ee3be97659a0","sha256":"47f0fc5d523fcd8d68adb26e7c676ff50b8fcba6c8c6320efd0d228c1d2c4a40","sha512":"e55057de3de9096c9a59df7d351e18362f5925bd97b6cc912bae12075011f15b4a577c82501c2e39501abda53fd07b554372ae291f4d4eda789062aa3ab6b0f6","ssdeep":"192:/l3Cx+LTR/r1/1/2fWzPoDvijJIrmwETkUhgtrleuUiyaebXsTr7t:/Vy+pB/1e64F8kUhgtJ8ATrJ","tlshash":"c122cf7e421adfed36a448d08f69acf67bf0351d247756072cfc601364ddc361228626","first_seen":"2026-09-22T18:36:28.898761Z","last_seen":"2026-09-22T18:49:59.438245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/favicon.ico","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.597Z","timestamp":1790102942597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-47e\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":1466,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"7e5fc14ea1f2f4974feb71284bc42a4d","sha1":"d4dbdfa03168f57abda40841d9b8c3c885cfcca5","sha256":"c7d3fe4dbab48b055bdabc425233650f728ac4c395ec21a85aef1fd96d578d3a","sha512":"94170fa2296752dec5cff9b172447b84f6ef4a770ce01e53e3311180db386183c6bace7463131bcb9409f231652307a5873b607badc35e845db1226f1b58d703","ssdeep":"","tlshash":"602144c1113c3ca8ffb319b3d0e28398102959755b602f4676576dd5d91fa28a8a71c7","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.439531Z","times_seen":6,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/rusb.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.824Z","timestamp":1790102941824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/rusb.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 863\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-35f\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":863,"size_decoded":1175,"mime_type":"image/png","magic":"PNG image data, 13 x 25, 8-bit/color RGBA, non-interlaced","md5":"37f418c15c0bd2ab51ace80d5eee6971","sha1":"ce0ad17c7ee9d2d258ab890ba98d506530d45fa7","sha256":"ffb482342343b263776ced8af550a6ab385c76ef16bf41992633d453e79bb5ce","sha512":"f2b440841b2783ce2568a10b61018434f961f583f74fabc35ae52a9dbb3b7fc8bfd072e5dc6ac84ee06f91f757c0981d88114c11e7fbed0696f3121acd6de765","ssdeep":"","tlshash":"0411dad43069cc04f4a54700647b13e14ce7c31d097d81803d5de46b1b8537b4d17ec0","first_seen":"2026-09-22T18:36:28.915293Z","last_seen":"2026-09-22T18:49:59.440593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/filetypes/pdf.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.888Z","timestamp":1790102941888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/filetypes/pdf.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 29395\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-72d3\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29395,"size_decoded":29710,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2c2da9ab2ccce861bd825e86fe6b5d20","sha1":"4fe9ccc5bc7ab57efa8ef7e28baf9590ccbe9b02","sha256":"8524f8d01f9dcded34dfeef43973320caf2cdb6ac16b99c8cacd74451eaa8e33","sha512":"4bedbb653d91d1726bca7e9381073ac2860d69437c2a3a9ab784e57bb050d58a6e70766c01c19de8cec599ff3377f6ccd4878edea20bb1529955a4e4b570d84b","ssdeep":"768:dOgJtp0SN8Wcv6dztSHuFHDYnVBuLxmznU/+oZ7mQ3Ha:dOgimxJRSHS0VgmY2m6","tlshash":"33d2e1efd9aa905110ad0f75f1d080c2b9cfd51814dabd547a54cffc25a416836c0eee","first_seen":"2026-03-08T19:34:19.588613Z","last_seen":"2026-09-22T18:49:59.441493Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/mapping.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.936Z","timestamp":1790102941936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/mapping.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 5566\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-15be\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5566,"size_decoded":5880,"mime_type":"image/png","magic":"PNG image data, 75 x 31, 8-bit/color RGBA, non-interlaced","md5":"71f9029de7e117c01ff5d62bc0ebe7cd","sha1":"5054c78ebabfe30c592f3f9925c47ea37445a5cf","sha256":"7f244ef1165be0620c2b94da11e1f814d47a05b3048cd2e5cc334bb40be1b3e8","sha512":"5c9e4d1ed3476d24ea2a543f7f431ea4bbd9e443326081f9b17df9c06be569ac05d2b50130b504aff9e65df41f38d1770965b66a02d2d7befdeb7a1274040fc1","ssdeep":"96:Eq8udDq+Mx24NEmuYGsc+Z0tyhluoO7krbQ7gFvbM3d5Kdbl6U:ERudDqTxP4YG4Zpf8gFzY8l6U","tlshash":"63b18e7106c90990fdab3f5f5052a8d42d6f4b5f410c2cc6290ab64dad925b42d9a5fc","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.442306Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-53c35c90.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.994Z","timestamp":1790102942994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs_render-53c35c90.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 45196\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Fri, 22 Sep 2056 01:15:37 GMT\r\netag: \"21b05e290f44e86c1e8f9e80278eab04\"\r\ncache-control: public, max-age=946708560\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 12 Sep 2026 05:07:47 GMT\r\nx-strm-log-split: 4\r\nx-request-id: 3dde172dddcd0ed7\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249149,"size_decoded":46091,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65499)","md5":"870d7e19e4d083901f771244ec27bd64","sha1":"ff89b9b0b771e974879ed4263f23f40c63dec373","sha256":"b48e95a8a6dbe23303674f5f13e1c1d35148a93143393c5674a6ce1f61d08a9c","sha512":"664ed512bcb3fb3d9c554a5a30c95a5de40b3a5e238a8aacfc3c97e2751b616e5578c20331998a59665c79b5ce2c739312157c5062b798b29137de6f97c69b15","ssdeep":"1536:GBD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0Z:I5SGX7g8BYlyp2z2BWoy5Xi6","tlshash":"c034c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","first_seen":"2026-09-14T07:39:08.750816Z","last_seen":"2026-09-23T06:15:46.107806Z","times_seen":289,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/m/photos/get_image/browse/4456064bc20cfcdef7a72f6aa47b04f8.jpg","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.830Z","timestamp":1790102941830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /m/photos/get_image/browse/4456064bc20cfcdef7a72f6aa47b04f8.jpg HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9418\r\nx-powered-by: PHP/5.6.40\r\ncache-control: must-revalidate, post-check=0, pre-check=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":9418,"size_decoded":9655,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 140x83, components 3","md5":"ec87be57b7612ab25812689450a326f0","sha1":"11b363a655f4c5c9e65403935b1b46d54aa9110d","sha256":"5815547e4a0752c5bd9838e16c068eec49e30f5e69c01b86301601612bab2009","sha512":"474965db3dc4abd98d09de621eafd283449cfa4771d66d1bb6fa3599165b2b52c8db0f8ca6491baea6f1011e3dce42e86bbb4e1d58be4fa8f7fea8e1082a82be","ssdeep":"192:oZRGQyfnYqVcoZDq6Bs9JbWIFNRv8Jrh4933R4mc5E:o8gqlg6a9fDRWr4VcS","tlshash":"6612adb68b4e43f2b45684714cc11d09c2ede702bfb0b7743dc8ea57d15435b22299c9","first_seen":"2026-09-22T18:36:28.888561Z","last_seen":"2026-09-22T18:49:59.443856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Condensed:700\u0026subset=cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.782Z","timestamp":1790102941782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Roboto+Condensed:700\u0026subset=cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 18:49:01 GMT\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2569,"size_decoded":1318,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b97797cff78c465b077030e85f7ff659","sha1":"1d1281671aaf9cf12e7e47a1be0d3de8d7136424","sha256":"9bf3280e8f6b94549d1ccaa6d7d07191080a15d36a7bba17af48f89ec89fcaff","sha512":"1a102ff4d7ed4d31a71a05ce0d810c5f674f22423a3c508e48b0868d1ba7004fc24e153abec3eae94b6a8fe777b8447c3a18b3b212eee53f3525b3da11fbea90","ssdeep":"","tlshash":"4d518f51482ea404eb931cc52bdb3e3add4e12057095c666dbfd1c6d9cf6e26236438f","first_seen":"2025-09-16T02:56:37.944877Z","last_seen":"2026-09-22T18:49:59.444757Z","times_seen":194,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/flash/modules/global/js/integration.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.867Z","timestamp":1790102941867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /flash/modules/global/js/integration.js HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 13 Dec 2020 16:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c94-3c9\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":969,"size_decoded":854,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (315)","md5":"c40ce5b4ba556b298fa6c3fba55b3a85","sha1":"82d1ec246c1994705606578047f515d0e93be03a","sha256":"a2c3b9eedba096c8f82af30a81a0c67af571bf0e5495b66cc25fe2de78493c8c","sha512":"648f80af3269e336554534af71381d6168d16abb52f2a73b409ccc184a9d013065dce6d27295c3970f2705ae9d0a73d39fb5b44c1bf699014bf47d2d6ca84b5c","ssdeep":"","tlshash":"dd11bd08a2b164cb08ae4154da3d1a5c5d5745b36dda4c14af0c40d96e217e377ea8f0","first_seen":"2023-03-25T23:10:10Z","last_seen":"2026-09-22T18:49:59.445473Z","times_seen":17,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/templates/base/images/icons/man_small.gif","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.185Z","timestamp":1790102942185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /templates/base/images/icons/man_small.gif HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1300\r\nlast-modified: Sun, 13 Dec 2020 16:08:53 GMT\r\netag: \"5fd63c95-514\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1300,"size_decoded":1613,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"f66c8c56096ef442c73b55a06ac73fa6","sha1":"37cf75c0c45cbe967bbd91caae94511c334642bc","sha256":"5edf000cad86f66c05f90a834b5738c945126ad91cff191985eabae6c1a5576b","sha512":"1790af2c810b2e9f367a88da55651d3266c61de023765ee5a87986a0cd959d1446e3b7360b254f0b2d8c7deee2a84b825ee48cfc552f4b65bd256b24169493f0","ssdeep":"","tlshash":"d521d854d19ce0a2fe2801605c5f4c995c4c3a48aa099e4c31dbd861b3c8fa014c4bd7","first_seen":"2025-05-06T07:59:56.869886Z","last_seen":"2026-09-22T18:49:59.446367Z","times_seen":4,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/themes/dark/img/info.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.379Z","timestamp":1790102942379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/themes/dark/img/info.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 4843\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\netag: \"5fd63c99-12eb\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4843,"size_decoded":5157,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"aa7c62bae746246371079a6e5a0da050","sha1":"d4b18673b11aab5345f1ebaf6e514f666a7489c6","sha256":"203f431b4e73028655fc0bb50428a0a5676c671d2818012a135f8c09d0916a51","sha512":"87c4636177f16957321b4b4ac0be95aa1e20158d3638ad224447c7f6c1cf301936d1e7ea662cc23c08a05fe342460601329c0048aa89963e623545fac183883b","ssdeep":"96:SSMllcHitlIxv9vk7C1+I4wWHLihk/xX+CSyo7v7xB5taoP6:SSHIIHUCD4wapmhto","tlshash":"f3a1af9399814ae7396912523137f8154f15b7d4710c2e4c5fd942ce9f20d047fb2726","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.447165Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.987Z","timestamp":1790102942987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://library.se/\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-nginx-request-id: 21d32ca41b59e3ec\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=31556952\r\nexpires: Thu, 23 Sep 2027 00:29:07 GMT\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\ntiming-allow-origin: *\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 5\r\nx-request-id: adeba536a1570378\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26004,"size_decoded":26903,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-09-23T06:15:46.10705Z","times_seen":30611,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/themes/dark/img/warning.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.381Z","timestamp":1790102942381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/themes/dark/img/warning.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2288\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\netag: \"5fd63c99-8f0\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2288,"size_decoded":2601,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"69972e267219c744693966d7cb6d1ea3","sha1":"cf71678e971136ea862b400e4da2b5c186ffe292","sha256":"f115b3b2b7aefd0f67e3b4645c877a2dc8204243f54e8c2881526e902379e3de","sha512":"6784b28ca8a290489fc506ba561d2328bbd11c2b0276f444d78dcb36e5e416206d60b05ede5c0b51ee479c26a060b91af40f694f67d8af61f5344d05522dd342","ssdeep":"","tlshash":"14414bf88194f0169c35d0e18e7631e3963a561fe1f32468376dc7ca5858ae054073fa","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.44862Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/templates/base/images/spacer.gif","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.827Z","timestamp":1790102941827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /templates/base/images/spacer.gif HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Sun, 13 Dec 2020 16:08:53 GMT\r\netag: \"5fd63c95-2b\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":353,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"18b3b970eb07b30bd8fe644ea2c85f1e","sha1":"57fd207047e80f5c4d9eefcdc62c118c8b016be3","sha256":"481a818ac51c90f5c381440f8033f55481882d8b903feb3b617bcd6ea7d90469","sha512":"ec5ce830691f1274a986784a4ea3f5c47af3dca6925be9d938acc950467a55c625faaf4b498dcd0bb6e4d582ee3a23d6197cab2800ce60a8072c08f75354fc1e","ssdeep":"","tlshash":"14900003ee808002e3abc23c0a0883082b88a0300228030e80fc38aaec3b3a20ca3000","first_seen":"2023-06-14T14:12:07Z","last_seen":"2026-09-22T18:49:59.44953Z","times_seen":44,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/media/images/1391628462.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.820Z","timestamp":1790102941820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /media/images/1391628462.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 13410\r\nlast-modified: Sun, 13 Dec 2020 16:08:54 GMT\r\netag: \"5fd63c96-3462\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13410,"size_decoded":13725,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"949b22fc4d354c7e10ecb5b8cc51ee60","sha1":"dbc85be47e0705db80547b0f84aaf6a126fdeaf8","sha256":"874feb03f0db73f48ecf4ee76a7c3c3f434cec193ddceebabd619bba3475c592","sha512":"29ed41ea3323a35558eea49a17ab998a748ec8031c18b6c8585b343f7f2a0ac5e69de8b18b6d5edf9a9f3816da2afc733ca0c7ccc614fcfd168e9a1bff763fc2","ssdeep":"384:eXHWaVDuPGqsh1+GF8jn5Mf2Cms9l9N97I4rof:eXrVaPK1+RJCmoJR6","tlshash":"fd52d0e8978a4a585d380375a83df8196c425fb0a20455fc4afef9f03b1f72624446fb","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.450319Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/flags/se.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.823Z","timestamp":1790102941823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/flags/se.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 542\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-21e\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":542,"size_decoded":854,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"4c01f06db23324267e2802dcade3572f","sha1":"f3e4cb0b941ff02eb176bab9ba45feff6f544a17","sha256":"dc67a89a0d57005dad961a1213206395e0dfd8c7825249a0611e140bf211e323","sha512":"47d7f06f7f1c3e7d49dcd75e36185a39be94b81c233f6154c200bd3ebcd25b23ce40a25a4c0708051507b9a734beae56c7c66dcd6e2eb006f21c58d7c0044b8a","ssdeep":"","tlshash":"8bf0e19ea24e1033c91f64f31551c256689749df1a41965fa880a02592306aec8a5903","first_seen":"2023-05-08T17:27:13Z","last_seen":"2026-09-22T18:49:59.451148Z","times_seen":686,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/kz.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.944Z","timestamp":1790102941944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/kz.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 616\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-268\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":616,"size_decoded":928,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"6d51066ba152b15fd05d761745333135","sha1":"07c0b6e1b6b80dbd1ee8cc7c274f4755df3e56af","sha256":"b639f1e1e00cf0973f7feaf673326300e13de6e830aad5eb08937bf56ee77c3b","sha512":"ef0852e89527168dfd7b1cdddfabd2f9cd1c5990d28ee7e1e4e3199a01823ee7286bb2418ca6e803b585fcca4b7af1e1507bd16aefb9b2ca4fb2df4f297a4571","ssdeep":"","tlshash":"92f062a426215835c334a1b217f3a130c017c8e42d92227d2d02c11592b75544eeb0e3","first_seen":"2023-05-16T09:48:39Z","last_seen":"2026-09-22T18:49:59.452007Z","times_seen":87,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/md.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.946Z","timestamp":1790102941946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/md.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 566\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-236\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":566,"size_decoded":878,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"e414980c55af38676c5312bd330d6bb9","sha1":"90e3c144fea768b06c01ed7356602b5809163f06","sha256":"0b4e15588de7b1370b9aedb0cd642b53ecb5352bce6c646e06634c79cecf787e","sha512":"17332cfa50c32e7f66dbaa60237a917b23b448dee0f9462e6476b43465f4465a8c3e63a72d5487f8e5b5f774bdef3e87ee89e9ea266cbecf382ad44c36a48245","ssdeep":"","tlshash":"5af09683b344c6d1220144f111ed3120c6b08a47aa32903cc80699716c9e74d46cc91c","first_seen":"2023-05-10T04:36:57Z","last_seen":"2026-09-22T18:49:59.452776Z","times_seen":53,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":104,"dns":1,"connect":41,"send":0,"wait":38,"receive":1,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T18:49:01.016Z","timestamp":1790102941016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: beget=begetok\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/5.6.40\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"VK Pixel","description":"VK is a Russian online social media and social networking service.","website":"https://vk.com/","common_platform_enumeration":"","icon":"vk.svg","categories":["Analytics"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202463,"size_decoded":25972,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1023), with CRLF, LF line terminators","md5":"925f1d92fab53e004fb7e7696fd3e183","sha1":"ec2208a73ef0cacdfb06e44eba89f008fe7c850c","sha256":"612d4981881f2acd093aba7b210f920a9b7c5a3575d24415df08eadb85b6f5dd","sha512":"79169e2c83f1b62d445ef9e8fef47dc98d4426b12ae37a91823d97b570afb5cc54ea51cbd7927cdf22a2dba76e81a0220c6a60101d75744ed08b87c0c206e808","ssdeep":"6144:RAF/pr+De6Zuo7wuJYJediyo4XP/z2hSVhyCCfplG6L73kyKthAYW3ep:s/o","tlshash":"291443f251d2dabb13f3a29a5521f329f5534207ca834954f2fc0b7b6bc6e24986316c","first_seen":"2026-09-22T18:49:59.453558Z","last_seen":"2026-09-22T18:49:59.453558Z","times_seen":1,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/rss/rssbox/rssdisplaybox.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.572Z","timestamp":1790102941572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /rss/rssbox/rssdisplaybox.js HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 13 Dec 2020 21:23:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd68662-2764\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10084,"size_decoded":3427,"mime_type":"application/x-javascript","magic":"ASCII text, with CRLF line terminators","md5":"21133be769bbd522a61a1a4fb6e743c5","sha1":"3eca42f4442c1abbed3874b8ce694067129568d4","sha256":"866718c33644f83605bae22627af65684001f253b43587de84ed3cbf1908189b","sha512":"9383c1f69d7eb6e170b977ee527ea27204c6215c4cc435d31fa6e583ef9c4bb7e8a1fe04c9b7c5803e7c41e602a380bbeb7768da090f33db59a92b445b203f27","ssdeep":"96:bMMLUn5Ad6QAh84aSqf3mU2okS67zLvt0Bp/6i8FcVOpDyfcynnb1weSqXACyY8P:+5AqqvmUNszLm8iG1xynIqyY8fzpc8","tlshash":"5022d68b0d0185326306e9f926095397e730407b9f73ea4c388ee0e4286765d837e77e","first_seen":"2023-04-16T05:58:58Z","last_seen":"2026-09-22T18:49:59.455487Z","times_seen":10,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.779Z","timestamp":1790102941779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 03/15/2026 23:52:32\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b022b8c31848b529bd6a6e997024e728\r\ncdn-cache: HIT\r\nage: 4054824\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3f37cba3c6732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":7896,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-09-23T05:51:42.538084Z","times_seen":317330,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/get_rss_feed.php?ID=1336\u0026member=0","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.339Z","timestamp":1790102942339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /get_rss_feed.php?ID=1336\u0026member=0 HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/xml, text/xml, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/5.6.40\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5021,"size_decoded":1907,"mime_type":"text/xml","magic":"XML 1.0 document, Unicode text, UTF-8 text, with very long lines (5017), with no line terminators","md5":"53edfcdd8f8ea97585b11fa4f207ae53","sha1":"9d90da81e629ae9a8c248d9fde8be357ff481c2a","sha256":"6451e4a20b9b81ef8af0d991cda6f24742f4bec2bdeb5cc8df152cd281a60c3e","sha512":"65c1ea0a4cfbd093cbabf29549a1be1ab3ec55aa11e66308d553f293292117a27678e46ed736fe22b4caf5c24a1c12ee5d81c3b33f57688540461185af8c6146","ssdeep":"96:0iS+HZzoKW2XpGbKo8oAGT/X8WNXcV5gxp2MwKX8oAoSmXNMRfo/gXr9vXYTIX0m:0P+5EKWYpGbKobFWa0q2suhPUGT","tlshash":"8da1ff121a1531e266dba1f08be837bbdd37520ca6f14989fc9c00ea5013da983f27d7","first_seen":"2026-09-22T18:36:28.882973Z","last_seen":"2026-09-22T18:49:59.456914Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.309Z","timestamp":1790102942309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: \"af7ae505a9eed503f8b8e6982036873e\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-cachedat: 08/01/2025 14:01:18\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4f8868b0f428280d393a94fdc84740d1\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nage: 813294\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3f37cbdd90e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":78089,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-23T05:39:51.077077Z","times_seen":543662,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyVVpcBO5Xw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.312Z","timestamp":1790102942312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyVVpcBO5Xw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:21 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:49:22 GMT\r\ncontent-type: font/woff2\r\nage: 96461\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21128,"size_decoded":21940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21128, version 1.0","md5":"d7fa0ca17dfdf8bce28ec40936d47cfc","sha1":"d881c82925d8e85fb8a78b0ff986de0e6fc4b7e6","sha256":"ab74f0c2d7ec37e44e017b9586675dd00c519591207dc3bbc8e003c5628dc9b7","sha512":"96b2c73552a5ff5a9701661d2aed4e26a9c47056aedf8e2677a465a2901528cbdf4bff4806ddbf7a9efc2e1c75a3f1aa1760cbf674a55419f8b10e81882a1bf1","ssdeep":"384:pnSvj7b6H6B0FjESufJEp0mbnPlGCVu35Xfbp9CEyePz1pO2gA5B7nR3a:pnOfb6H7apBbmbPRVu35XzpJz1pZXBno","tlshash":"4e92d1a4fca6889dcdb30e23985f64324ccb35690be13825cd4f6d8d8a35dd229995f3","first_seen":"2025-09-12T14:55:24.865018Z","last_seen":"2026-09-22T18:49:59.459401Z","times_seen":1844,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":34,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/css/libmonster.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.777Z","timestamp":1790102941777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /css/libmonster.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c98-b54\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2900,"size_decoded":1138,"mime_type":"text/css","magic":"ASCII text, with very long lines (437), with CRLF, LF line terminators","md5":"1f1913e1bb7baeb30d92c4e1dd37b6a7","sha1":"eaecbba4c1580e0b33e2d6500b41910850b5ece2","sha256":"a19abce741cd856e7fffd1943b46b3b04576b63c908e51eacf450fa094323648","sha512":"d43866648abd7394d94d7903d919a05815c8a9b1aa54464745a0cbf409842bef3bbcb88561c27607651df361ac28331f301729d956edbb08f1ccf1151e289397","ssdeep":"","tlshash":"b05131f8df07012d7027e13a2db429db28734546d4d713d97229f560c3666ac32dae89","first_seen":"2026-01-14T02:28:54.211321Z","last_seen":"2026-09-22T18:49:59.460307Z","times_seen":5,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/gb.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.937Z","timestamp":1790102941937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/gb.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 599\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-257\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599,"size_decoded":911,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"0894999b108830afc0733ee7b6e08310","sha1":"a98ec259c5e198fffb3116e4cf950e2d8b695880","sha256":"5d72c5a8bef80fca6f99f476e15ec95ce2d5e5f65c6dab9ee8e56348be0d39fc","sha512":"c1d2d29e2c185915a14fd1dca386ae3c71741003a726e8236fea197c9999f60b469e223d28e7c6baa6d9a130cc33d66798a4c01252e41536fcc8b27ed690fe82","ssdeep":"","tlshash":"d3f041c0214bf8f4e5912190fdf27092c8f2329c6a71197ad2238d272f9d2c6f7a800b","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-09-23T01:53:58.61405Z","times_seen":5438,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/gzip_loader.php?file=bx_templ_js_e66c1c4385966e90b8aa3a4cc2e67aab.js","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.786Z","timestamp":1790102941786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /gzip_loader.php?file=bx_templ_js_e66c1c4385966e90b8aa3a4cc2e67aab.js HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/javascript\r\nx-powered-by: PHP/5.6.40\r\nvary: Accept-Encoding\r\nexpires: Fri, 02 Oct 2026 18:49:01 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":218145,"size_decoded":69595,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"a1dff3e7adbbe4496986971fdadb2bd2","sha1":"b9d6c85e60c07e3f411498b04bc33a8f8e092c31","sha256":"b2d4f82992aec74038cadb3ea010195977d20f3bc50ce62ed753617f9e538248","sha512":"f445cf03553e3b30d254ae3b055589e9c15e69cfb9c1ff6bd11f0684d0c2792124239e10be1805411e41f2ee29762fdf74645535df369b0fc7f98d617bcba660","ssdeep":"3072:bGsKXlI2p0WPSbDrstfa5T0MeyKd2/Jrhn6G7/hUGZ:tKP6WgDCy5T0Mwghrhn/1Z","tlshash":"e324389c7396702243bb30b9046f500eb2365467280dc854f56ce8e57fb8a5e92b7fb9","first_seen":"2026-09-22T18:36:28.931364Z","last_seen":"2026-09-22T18:49:59.461896Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/small7.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.822Z","timestamp":1790102941822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/small7.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 2208\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-8a0\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2208,"size_decoded":2521,"mime_type":"image/png","magic":"PNG image data, 35 x 37, 8-bit/color RGBA, non-interlaced","md5":"296fdb1f7661754c68606e601b9dcb34","sha1":"f1f8a61668e5fbabd3aa2c6619f91ac3b85a4eca","sha256":"5c6fa0ca9cccf8bdb3d9d77ac9005fd2a03d603d599f3fb80e8396d6deea222a","sha512":"2a23d4f12a0e0f1884711b5b58a007973aa739a5977cb32fe60a872d99b4464e89dde37349fb1fe5adf94d8203d8e9ba077d76626a747e2499e1a167cf03ee71","ssdeep":"","tlshash":"e4412b6e06350c067c1106ffe8665dee392b5c46bc95460ed463f7d8672fe1c5b21227","first_seen":"2026-03-08T19:34:19.712881Z","last_seen":"2026-09-22T18:49:59.46268Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/modules/modzzz/articles/templates/base/images/no-image-thumb.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.825Z","timestamp":1790102941825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /modules/modzzz/articles/templates/base/images/no-image-thumb.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 16559\r\nlast-modified: Sun, 13 Dec 2020 16:08:54 GMT\r\netag: \"5fd63c96-40af\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16559,"size_decoded":16874,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGB, non-interlaced","md5":"b7b6e513579383fd8e60b267475a9b99","sha1":"f9448dcbff674caac6fe7e2a1fd0309e35742596","sha256":"566f7c0dfa758363f1f7a41209fd8b52c6ff887b504a32d213280bf77f66570c","sha512":"24e1244a66bbfc15698935f29809e44174fdab60db55c5ddb4390f857a2914cf9e8bb7f693bd04ee4882a9f0bed33740019db506a61beee0e8bfd3c4b9c05103","ssdeep":"384:Iz9TI57N3WkQv5y2Gbuz4cEfiaTHsrHZigoqgfBD59LmKvT:wTmWwoPElTHKHUd3LfT","tlshash":"9572d053e654e0d179567ad065ecb15633648c64250383ac17e7c90ffed72eac225b88","first_seen":"2026-03-08T19:34:19.538646Z","last_seen":"2026-09-22T18:49:59.4635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/ua.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.943Z","timestamp":1790102941943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/ua.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 446\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-1be\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446,"size_decoded":758,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"7ef7a6f5def3a4117d5c2f08e37008ff","sha1":"9fd21d733a8d9d551c5880c8f0b6a5e5c6916f57","sha256":"9ae2f204178855c4fdb29ce75a0a1b2588fc3db3a7084d29715876bacd293508","sha512":"ab9d39fedf5a1e0c7fcc8226a4e43a0e241dfe3e08dfb3eeec028dc44a48431c56e7c434d99c75e11024aa36a1c383ca4fb1749126719acc9ff1bc7f7d311d71","ssdeep":"","tlshash":"cef0dcc576105038cea908e245d900609026871a6aa3623f598389eb4614eaaceb8a02","first_seen":"2023-05-04T07:37:06Z","last_seen":"2026-09-22T18:49:59.464309Z","times_seen":445,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":104,"dns":1,"connect":39,"send":0,"wait":38,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/b8699552207dc058.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.986Z","timestamp":1790102942986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306773/b8699552207dc058.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1972\r\ntiming-allow-origin: *\r\nexpires: Fri, 22 Sep 2056 00:59:40 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=946708560\r\netag: \"43ab1864b05382f8d0c1d798069c2c74\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Sep 2026 17:23:28 GMT\r\ncontent-encoding: br\r\nx-strm-log-split: 3\r\nx-request-id: a6977c8af38326d4\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4763,"size_decoded":2866,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4724)","md5":"720277aa22671bc85a4fb66957355927","sha1":"10a13668c4cb20c1eca884b6bfb26269b90f593e","sha256":"13377900a0c17db5f2cb04af4164042af25cf3b0f836264c0f57dfe32965f252","sha512":"5de7601a48733b75a24bd6e229439fe627d1c9450e3e7b9a5b7236834e6e8dc1d076a0eb8290b86ba1c80fb81ced838cfa11ab1f097069f00b3d8f1955506a5e","ssdeep":"96:QnvwRO+264XfrGRP5FdX821dFeFIVC+E4Y1vECxGQ6aXfqXTITv1J0a2qf:QnvCd2oRP53MrIQbs87CWv1JzLf","tlshash":"b8a1e7ee324136b697c605e4c4bfa616f17d0d11ac0da452f04990112cf9fa751efeae","first_seen":"2026-09-21T07:52:55.764877Z","last_seen":"2026-09-23T06:15:46.11382Z","times_seen":63,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/lm.gif","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.891Z","timestamp":1790102941891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/lm.gif HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1269\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-4f5\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1269,"size_decoded":1582,"mime_type":"image/gif","magic":"GIF image data, version 89a, 250 x 40","md5":"d0fbe1265ce41101096d4352fadf3d07","sha1":"c3483eaae2d0698a6f57345aa91f3a8449e71836","sha256":"842d43e8562d5d2e2e4d6898138019a373b4d039d325bc60ad4a2c3e639f1d24","sha512":"843f98668e61b92a45dee20d9bb66fdb670fc03a8900af620ef281d3e0fde2f206543030d388b78eaef932fb5926982961bf94a7e9585a8af5e997b57e1fee5e","ssdeep":"","tlshash":"6a21e781c734f686c344e23d625a6611a168048840ba9b7aa8ec980f1cf2310ba8f97c","first_seen":"2026-03-08T19:34:19.553584Z","last_seen":"2026-09-22T18:49:59.466115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensanscondensed/v24/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuXMRw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.307Z","timestamp":1790102942307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensanscondensed/v24/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuXMRw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:05:26 GMT\r\nexpires: Tue, 21 Sep 2027 16:05:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:03:59 GMT\r\ncontent-type: font/woff2\r\nage: 96216\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15092,"size_decoded":15904,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15092, version 1.0","md5":"39f7335aaa0aec8933686cb9231f1ada","sha1":"d6dfbcf011f68743fe119ffd88f45b00fb2d7fc3","sha256":"b2e4004f49194467b12f5439ad9bcf9d54a838ee97ef9c6ccf0fead92d3fd643","sha512":"ccd5711e102422777681bdd46cb9afaca4038777bc46b2dae1bade0d05314fcaf3c0bed6bca535e549a86b6350dd220165e9375dc507a6cb4fd11a54c3b49c24","ssdeep":"384:qApjGPxK13hLCvSMzKRhFmuNMAFG57IHY2DZz:qAopK1hLUuHTukG5CYQZz","tlshash":"9462cfc382f5d7c5d0a7bd39039d1e1f524d00a2a8ae023ece6590a0c73608563fef99","first_seen":"2025-09-09T09:23:07.934134Z","last_seen":"2026-09-23T00:23:22.324966Z","times_seen":3198,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":28,"connect":31,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/themes/dark/img/confirm.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.380Z","timestamp":1790102942380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/themes/dark/img/confirm.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2523\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\netag: \"5fd63c99-9db\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2523,"size_decoded":2836,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"8d35deec684a2abf6d5bfb6ed796fb5f","sha1":"e73e98cebf277400be49313cb127f5a1214c8adc","sha256":"bba5ff65e99e555cb20fb8e31127193d793490e53608ab5980acc51a15ca09fb","sha512":"4766b10d9ef387e88543248769c6c49c511867a76f27780fa740461f5217197c0ff10154991c9de5c4816bea8b69ea21e9fc0d99bc6da2e380673b446ac5dcc5","ssdeep":"","tlshash":"a4512ad41c9ee0ae27255361bf493c83e32c4a7aed2b014d5862dd8b002bee4476f079","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.468147Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/cc28082f2a6e35cd.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.995Z","timestamp":1790102942995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306773/cc28082f2a6e35cd.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 138512\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\netag: \"8d31c014ee6b3065bbf6e38cd7ecdfce\"\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Fri, 18 Sep 2026 17:23:28 GMT\r\nexpires: Fri, 22 Sep 2056 00:59:39 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 0\r\nx-request-id: 171ab0a148446b21\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":718502,"size_decoded":139408,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"7c2176ba91c5d48a7e69ad483eebc754","sha1":"d6f091b83acc0f2cf311b42303bbf28fb68c7387","sha256":"91beb8de8093bb181db9c18ba178563f5faa2abde5f7da801516a78e7d5692db","sha512":"bb04a2b6f71614c8a039bf9f9bb59b9c1a9ab5b10d6f6e74295e74f4ba9733487b300cc90908908292ae81379135efb989d1f021ef1a802b9c0a83c611264212","ssdeep":"12288:ALuQexTIRuqk2bZfWFJ/jlaWtycbWBBiwgqON5UWnhBPnzBf:ALunJIRuqk2bBWFJ/jlaWtycbWBBiwgV","tlshash":"80e4d98af5e1b07142e7a0f9803f150ff23a7a15550980a4f62ae8e57eb858e5137f3d","first_seen":"2026-09-21T07:52:55.917102Z","last_seen":"2026-09-23T06:15:46.108481Z","times_seen":62,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/media/images/flags/us.gif","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.892Z","timestamp":1790102941892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /media/images/flags/us.gif HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 367\r\nlast-modified: Sun, 13 Dec 2020 16:08:55 GMT\r\netag: \"5fd63c97-16f\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":367,"size_decoded":679,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 11","md5":"4a0cdce756ed771a5d9a16114179d5e7","sha1":"394d810d687e889bd97a910b1088d97722efa99b","sha256":"b92f4eb6e7e071a728ae3fb103c1dfe56c0b0f1423171c94afd1709ea466fdab","sha512":"4a2f73e9e94438e5256991d43638f03a91ea3ae93357b6eea7d7ea8edf852f0bf90d506e21b27f1af0617c2154b56e036ba63ac275996daa9829798158c804b5","ssdeep":"","tlshash":"61e0c0458230cedfb01580fc52c084f4cdd56ba89790e9129067490882a8d2aad80ff4","first_seen":"2023-05-05T23:36:19Z","last_seen":"2026-09-22T18:49:59.469587Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/se.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.939Z","timestamp":1790102941939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/se.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 542\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-21e\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":542,"size_decoded":854,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"4c01f06db23324267e2802dcade3572f","sha1":"f3e4cb0b941ff02eb176bab9ba45feff6f544a17","sha256":"dc67a89a0d57005dad961a1213206395e0dfd8c7825249a0611e140bf211e323","sha512":"47d7f06f7f1c3e7d49dcd75e36185a39be94b81c233f6154c200bd3ebcd25b23ce40a25a4c0708051507b9a734beae56c7c66dcd6e2eb006f21c58d7c0044b8a","ssdeep":"","tlshash":"8bf0e19ea24e1033c91f64f31551c256689749df1a41965fa880a02592306aec8a5903","first_seen":"2023-05-08T17:27:13Z","last_seen":"2026-09-22T18:49:59.451148Z","times_seen":686,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":104,"dns":1,"connect":40,"send":0,"wait":38,"receive":1,"ssl":338},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/gzip_loader.php?file=bx_templ_css_be57568c879c13d8cd8ffc44ac2347c1.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.569Z","timestamp":1790102941569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /gzip_loader.php?file=bx_templ_css_be57568c879c13d8cd8ffc44ac2347c1.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nx-powered-by: PHP/5.6.40\r\nvary: Accept-Encoding\r\nexpires: Fri, 02 Oct 2026 18:49:01 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":75801,"size_decoded":14424,"mime_type":"text/css","magic":"ASCII text, with very long lines (3019)","md5":"bfa342c4dc50610b65c2e224355fa939","sha1":"22bcd4cdf298114980d5989939114ca1be8b2af0","sha256":"3a4ef2a6517d2a5e283dfd6e2583294f7edfc6c486ac53f318847a9c39be79d6","sha512":"828007eeec7b6f232c407601002d4efde25729511153efb07e18a4ee4acc5a9c3cade982461ef1a5b76e4b900411d96d782a09466192cf1318658780f725a8d5","ssdeep":"1536:GJxh1Y8roWKem+nrBkbSZ8GILfcSdpkHY:i43n","tlshash":"7673d6a0c565715ab33bc16ab6d2b7887232f5a6ce730d7df9562d2ccad048113a1b3c","first_seen":"2026-09-22T18:36:28.965986Z","last_seen":"2026-09-22T18:49:59.470185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/4e3308c2256651d3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.992Z","timestamp":1790102942992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306773/4e3308c2256651d3.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 28102\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nlast-modified: Fri, 18 Sep 2026 17:23:27 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=946708560\r\nexpires: Fri, 22 Sep 2056 00:59:40 GMT\r\netag: \"eb03e003f7a98269f0f9ccf8140d6151\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-strm-log-split: 0\r\nx-request-id: cfef14f9af33e45b\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305380,"size_decoded":28997,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"5bb41d890b53f38ab70a807d68b4bd15","sha1":"7b3388067474319f45976d4c5b957a5e903fe72d","sha256":"e67fd29dfe5e388f0195e485c7c797192e58514d4a14dd79e49343f3905ed1a0","sha512":"6aa7c480a9db1374f4461d9d94fce380525f17520892b4babeab52dbda7aca69a3ce82abe7390a98fcefb18ef39e6d945722d4ad013462399337d508c418726f","ssdeep":"1536:a21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:wN1dfXIQkN+nF/JH9zf6","tlshash":"b25475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","first_seen":"2026-09-21T07:52:55.771036Z","last_seen":"2026-09-23T06:15:46.130096Z","times_seen":62,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/5d6b6305fa2a6f17.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.998Z","timestamp":1790102942998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306773/5d6b6305fa2a6f17.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 31620\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Fri, 22 Sep 2056 00:59:39 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Fri, 18 Sep 2026 17:23:27 GMT\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"21128f58de6a7730d441f75dabe5431c\"\r\nx-strm-log-split: 7\r\nx-request-id: 1f2a71f0519d69fd\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155258,"size_decoded":32515,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"2a75a8ddc92422e9b7c852a17c6b9f1b","sha1":"39c7235c08383e7ca7f3612d80b6bc7d3bf1da97","sha256":"28addecb22f26a40fe7ed7d4f4a1f77c14d76b5bdf151515217ada42558c99f7","sha512":"c64116e2f9732fcdf153813df056551fc1f107955f6bd7df64c709aba0f996d9c3af6fe8954c3f397787f2d8228efb0a92b55f212f72c7ccfa1f43d3a1ed421f","ssdeep":"3072:5IJjYL2W0MQt0Qy1bCiTcZW3hUGWiWB8A2r43HZ5BcZavMdwXR0uchqMJVioJAGS:5IJPW0MQt0Qy1bCiTcZW3hUGWiWB8Nrc","tlshash":"ade3d78db2e1b47142d7a0f5503f6a0bf33a6459a4098494b72de9e16fb898e4137f3c","first_seen":"2026-09-21T07:52:55.873015Z","last_seen":"2026-09-23T06:15:46.123607Z","times_seen":62,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/templates/base/images/loading.gif","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.833Z","timestamp":1790102941833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /templates/base/images/loading.gif HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3264\r\nlast-modified: Sun, 13 Dec 2020 16:08:53 GMT\r\netag: \"5fd63c95-cc0\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3264,"size_decoded":3577,"mime_type":"image/gif","magic":"GIF image data, version 89a, 42 x 42","md5":"648927f5c12c11974574fd1d0f23cf02","sha1":"d3142e8db6adffe639f4811c6c65bbadaad4f41b","sha256":"2db8fb8468ceeffbff3a9789d9cc24405dde7aa96623504e9e20ce979c71f894","sha512":"ee71b50d2197334a1f5a98a9b628092537efd94ddec3d12e2aa2da496b87dd78f07bf01be2d6a56b8d5e9ac81b100c14804fdbf31d7a35a99790edc3965f9390","ssdeep":"","tlshash":"c961fa11d1272e0ff7732872ac1ae24dbb83b9feca01a7522bda7b5b5110470361518b","first_seen":"2026-03-08T19:34:19.710543Z","last_seen":"2026-09-22T18:49:59.474054Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/by.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.942Z","timestamp":1790102941942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/by.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 514\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-202\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":514,"size_decoded":826,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"9e18ac464c49a91d90eaf11ad21357e9","sha1":"c039b85494f35134097d6037da345012f443eccb","sha256":"cc2b61fff898086df311b22f06fcb400e64c4627ef8495755b24e2f7f3e05429","sha512":"98118e7c3e4fe6382324fb2055deabf553a2f44ed0c13fe2b46b60218ff2ceae0225049bc72685f08c0fd68b9a44ef859ff4fd4aa7b5f08dd8170d1a26ccb2c1","ssdeep":"","tlshash":"74f00ef87180197dd67d40b1dbe389e0fbb64e1c1d35863ca8cba10b1c2a809caa1660","first_seen":"2023-05-10T00:06:02Z","last_seen":"2026-09-22T18:49:59.475078Z","times_seen":240,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":104,"dns":1,"connect":41,"send":0,"wait":38,"receive":1,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/ru.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.941Z","timestamp":1790102941941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/ru.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 420\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-1a4\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":732,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"0d31ef75adef220e73f0cb93a84a7422","sha1":"24b172c54d4691a8862403c73624f6b0bf23fc09","sha256":"c6e9489e25e7854a58db93acc5a91b3cc023d33a70c4931dce8d2ef2868b5e94","sha512":"708a416718a8461b26112ae05cea350eb44147ac43df9368280346a071440fec09155d069cf72554debbd6912c795a860cfe999c34a3dfbd588deb9a07db6764","ssdeep":"","tlshash":"abe0f1c4f7d08d7082f5a1fa9c97c0a4a0be6fb9631aa69237034e6ee51a64ad14cd14","first_seen":"2023-04-07T08:06:26Z","last_seen":"2026-09-22T20:08:23.162307Z","times_seen":2365,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/tj.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.947Z","timestamp":1790102941947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/tj.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 496\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-1f0\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":496,"size_decoded":808,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"5cc548d1858d19f336ca7390b381ad07","sha1":"855aff92626ee041880d2508c291ab03c57b7330","sha256":"776630c76b77c04a84aa0edb87decb646643c53d519949df2113a5cac4592095","sha512":"fc2c6582dbd325f36a1cbcd29493aace143f78445623fa060ba999af72e62a2e48b1605cb89a8a07a1bfcab7225aec65b56e3b128c17156427062dd7580db66d","ssdeep":"","tlshash":"b6f075c2339c7110c02e91300150c2856c655e10172c811423a3aba72f25721f0d1e11","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.477005Z","times_seen":21,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":103,"dns":1,"connect":41,"send":0,"wait":38,"receive":0,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libmonster.ru/templates/tmpl_alt/images/clouds.png","fqdn":"libmonster.ru","domain":"libmonster.ru","tld":"ru"},"ip":{"addr":"87.236.16.244","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.179Z","timestamp":1790102942179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"libmonster.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:25:14 GMT","end":"Mon, 02 Nov 2026 13:25:13 GMT"},"fingerprint":{"sha1":"7A:1A:F3:C3:11:CB:F9:04:60:6A:87:58:1D:5C:7C:82:75:D8:91:77","sha256":"CC:9B:D2:A0:45:D3:50:79:8E:12:9D:78:6E:11:92:76:60:99:BB:F0:6C:E2:2E:86:48:F9:11:06:83:58:9C:87"}}},"request":{"raw":"GET /templates/tmpl_alt/images/clouds.png HTTP/1.1\r\nHost: libmonster.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 249219\r\nlast-modified: Fri, 12 Oct 2018 12:29:51 GMT\r\netag: \"5bc093bf-3cd83\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249219,"size_decoded":249536,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"11a2b167684f27994a548b78365cf2e9","sha1":"b34ac88a001e96a29caaa13277fdd551d74dab98","sha256":"652c40c6452042c2a1eaf3c3553e8ac1f6c85e65de1435a23e63c862fbc37e61","sha512":"5ef78238732ef4b0cf6ddb51d1a4b439216948af37ee358122530ac86d8631a2d6dd62025f095441ce67eaa481e974e30c40e3ae66ad9b987343833d1fcebaf8","ssdeep":"6144:S2X7mDBrVaMDY7ejlfAVwa1D90onz2THKxXa:1Lm9rV/+wOVzKHKa","tlshash":"3a3422570b99c62751b792336e5baf7c0f9d20979bc84d9865f2420391e32b8f48f4ac","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.47828Z","times_seen":5,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":79,"connect":41,"send":0,"wait":79,"receive":124,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se//templates/base/fonts/fontawesome-webfont.woff","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.311Z","timestamp":1790102942311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET //templates/base/fonts/fontawesome-webfont.woff HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/gzip_loader.php?file=bx_templ_css_be57568c879c13d8cd8ffc44ac2347c1.css\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 83760\r\nlast-modified: Sun, 13 Dec 2020 16:08:52 GMT\r\netag: \"5fd63c94-14730\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83760,"size_decoded":84088,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 83760, version 1.0","md5":"fdf491ce5ff5b2da02708cd0e9864719","sha1":"7f2f3c55c2de192387c351b995115f6b79e09173","sha256":"66db52b456efe7e29cec11fa09421d03cb09e37ed1b567307ec0444fd605ce31","sha512":"80fdfde7eabd3e7d74ab6df84ab6c8fea4cce1c1ac27acb7cb92b03424ddba642076c464f09111ddd03e59119a165bf4c131a749c724834c07ab599a32aa5863","ssdeep":"1536:ioGcwJ8Nw/KjI0XbEzFg4CwE34IgCjORCiQw42QrHJB0kY1V8QafpMQADLmwnbpR:io1wSw/KjI+o5js4IgCqvQpbrjY1V+GZ","tlshash":"d08312ef9df3769d8e16602ce2628fbc3ddd974118e3c5681b8c92a0f682152df53650","first_seen":"2023-04-05T11:30:37Z","last_seen":"2026-09-22T20:54:33.550543Z","times_seen":10432,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyVVpcBK5XxxKA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.314Z","timestamp":1790102942314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVo2ZhZI2eCN5jzbjEETS9weq8-_d6T_POl0fRJeyVVpcBK5XxxKA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12144\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:54:16 GMT\r\nexpires: Tue, 21 Sep 2027 16:54:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:21 GMT\r\ncontent-type: font/woff2\r\nage: 93286\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12144,"size_decoded":12956,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12144, version 1.0","md5":"4f2b658f15714e36d2f974fbdbd3b67a","sha1":"8da37760253d8153f310e3c7844a54a4aa7df21e","sha256":"7b9ef131039e058b622d4da5cbb6d2e783526d137cbf74738f8984c25c2d3fbf","sha512":"61fff83fd9a210af3c97ec971719f094a3b728afd23f7f810734da79e1528185be1eb284edf45f01da21e28ac548b24036e56c82c2cbc8d43c967245fd744fff","ssdeep":"192:jw6tOIezVR3Evj5YhMZibNGg8Sq1V3+uGf/AksjUVoUp8vsD4n7/n3LwEcxMeFEK:0gOFu5ONGHHXGfB6+eseixxFE3Rl8X","tlshash":"8c42d0a8f567ece6dcac06ba28104b51717b5b2dc5dd67a90e40a0c234cbb13d247bca","first_seen":"2025-10-10T22:46:25.934888Z","last_seen":"2026-09-22T18:49:59.485429Z","times_seen":47,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/buttons/css/web-buttons.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.795Z","timestamp":1790102941795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/buttons/css/web-buttons.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-eef6\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61174,"size_decoded":6108,"mime_type":"text/css","magic":"ASCII text, with very long lines (1064)","md5":"3c49465e28efd099dc6b85fd5ba52703","sha1":"00947d709cbea3976d6467d956fa5e2ed836d9fc","sha256":"95e671eca1a57dfe12ab42b5f08d3cca156348c07a747f48c8208b93dd35da83","sha512":"79367d9706006ba77bc9338a4f7619155ec7c9a5d819e7fc5c5a9b27ae81fd0c9a8fa1c222f8ff227eada2692fcc7a2aec06d3cb332a3a03c6df9da99688e37a","ssdeep":"1536:Hlca5fW0fWine3Q9ypeka/qzv7JEdpB/DYWIttMnz:HlcaQtMnz","tlshash":"26531ef70a902208a327895c8bc6af79677ce6129411dcff7792289e8f45bdc41e9713","first_seen":"2023-11-19T05:41:07Z","last_seen":"2026-09-22T18:49:59.486154Z","times_seen":5,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/media/images/blog/big_blog_3564_0.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.828Z","timestamp":1790102941828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /media/images/blog/big_blog_3564_0.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 13843\r\nlast-modified: Tue, 22 Sep 2026 16:05:32 GMT\r\netag: \"6ab2a74c-3613\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13843,"size_decoded":14158,"mime_type":"image/png","magic":"PNG image data, 110 x 47, 8-bit/color RGBA, non-interlaced","md5":"8a76fe8390bb33e09ca5300bb2d21b47","sha1":"d0fefc99cd31caa482bfef241ba670171305ed8e","sha256":"22a88c4fa8dceb00435b274b28fc6eb0ca7308d640c85fee9055d0e87997d0d4","sha512":"cf0ffdd0e8e01ca7ce766b5b43155cb9fd302c02d1ff7e29071d51806228f9a48586af581162821cedf337e2f3a7fdfc27e7bb409b5492d02e8f5ae73e00d153","ssdeep":"384:F3Xc52W9gmfU/NgcExu8+1WcLW1CQsUvWqsLzvZg:Fnc5x9gmTFYWcLW1/sUvWq6m","tlshash":"3b52c1aa6aff44c45e8beb618581d95e0a2387230bc16f144332915f8cfde61999421f","first_seen":"2026-09-22T18:36:28.970994Z","last_seen":"2026-09-22T18:49:59.486892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans+Condensed:300,700\u0026subset=cyrillic-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.783Z","timestamp":1790102941783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Open+Sans+Condensed:300,700\u0026subset=cyrillic-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 18:49:01 GMT\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5070,"size_decoded":1368,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b6f57f64f3761e47471a455f05a68cfd","sha1":"bdecd39337c2adb951d6b82f3b3425ef926e1561","sha256":"76262165352951577abf4a84761c5f4df736384516c67fef6173c05d5bfbf283","sha512":"267980bb9e2b1459107baa7a10e58ee1bcfa725d1384f240744aa0098b35ad5afb2a62aa44632b306f2446f4ae8eb36a996c8308daf0b9a6b645117b25511563","ssdeep":"96:WOWCmOWGFZzOWzDOWs3bOWwOWnJc+ufOWGNPOC2mOCiFZzOC/DOCo3bOCEOCzJcT:uCe+z7s3zMzMY2qW/fo33knot","tlshash":"08a1ba95093fa400ab47bcc26bcf3d318d4e24517089c6f69ff94d88dd65e2a63a934e","first_seen":"2025-09-09T09:40:11.851371Z","last_seen":"2026-09-22T18:49:59.488373Z","times_seen":1588,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elibrary.com.ua/images/flags/rs.png","fqdn":"elibrary.com.ua","domain":"elibrary.com.ua","tld":"com.ua"},"ip":{"addr":"87.236.16.156","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.940Z","timestamp":1790102941940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elibrary.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:25:35 GMT","end":"Tue, 10 Nov 2026 18:25:34 GMT"},"fingerprint":{"sha1":"C7:A4:FE:8C:7F:7A:BE:00:38:F9:92:5E:E7:02:98:4A:7D:51:95:74","sha256":"76:29:EA:CC:A6:1F:72:FF:F6:80:71:7E:F7:95:2E:45:A5:15:CF:C2:8A:EF:95:94:B3:8D:E1:11:72:75:95:45"}}},"request":{"raw":"GET /images/flags/rs.png HTTP/1.1\r\nHost: elibrary.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 423\r\nlast-modified: Thu, 29 Nov 2018 10:11:47 GMT\r\netag: \"5bffbb63-1a7\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":423,"size_decoded":735,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"5b672e3ee63317614288615ba0774bf7","sha1":"5a33f16641edcd98872e30fcdb30b3cef5f8029f","sha256":"a00b9d05c78c62b3eaee82acb12c2d39cc8f63381ee3563b6b8fc6c285dd4efc","sha512":"1b070bf606ce2ddd173e77a679f8be1bbcc9ad52172d29ccf5a6f7a561517182c393d1be252d2ec94aca42e0d24cb3c9a25d8758694c67f16e001d031455d898","ssdeep":"","tlshash":"f6e0fad2777dd7b2d45051b10587c26bd6781b5056544785c55fc44cff17909b1c0745","first_seen":"2023-05-10T00:06:02Z","last_seen":"2026-09-22T18:49:59.489056Z","times_seen":87,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/themes/dark/img/close.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.378Z","timestamp":1790102942378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/themes/dark/img/close.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 537\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\netag: \"5fd63c99-219\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":537,"size_decoded":849,"mime_type":"image/png","magic":"PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced","md5":"175fabc67761ed295e99ef7bd266cb7a","sha1":"c5877fe4dd278db6f4b36797f4ac827040d2abb8","sha256":"57daf5d1dc46bc87132e749c59b7c3b3494792f146056bf486aac3f667856bd7","sha512":"06b1fc42e5035b9f1e0d26c92834f5e44361eb62069c02ceeb0aecca00f1bf0f68e338b9906bbf30570736c5356ed5aec0e3faeca46cce41f84752f480bb1af0","ssdeep":"","tlshash":"2cf075c3ea8e6cf8a50a65df33d50510b0234e3b0728a9d3f8494c2a2d42d4c6a4bb72","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.489746Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/flags/us.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.821Z","timestamp":1790102941821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/flags/us.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 609\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-261\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":609,"size_decoded":921,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"968591e0050981be9fa94bd2597afb48","sha1":"dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43","sha256":"36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585","sha512":"ba8e09654cff264d428b1b3cf6df764699c6a754f2db329643881fb75cc8647a9c2777f05bb8c0d81b9d648d345796ffdb14fd231e2bb1caf71530098d12f219","ssdeep":"","tlshash":"9cf002c1fb856ae9e16a52610d7a16701c07c3a4217640a46c26ded41929f0dc2d8221","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-09-23T05:01:04.141454Z","times_seen":8287,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/es5-shims/0.0.2/es5-shims.min.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.869Z","timestamp":1790102941869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /es5-shims/0.0.2/es5-shims.min.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: application/x-javascript\r\nx-nginx-request-id: 8bb37f47450efa4b\r\ncache-control: public, max-age=216013\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Thu, 25 Oct 2018 11:27:00 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Fri, 25 Sep 2026 06:26:59 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: W/\"32e3b4f3a8f6048da9934fec1ca08cea\"\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-strm-log-split: 7\r\nx-request-id: 68b63cf7dc3fb8a4\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2703,"size_decoded":2086,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2703), with no line terminators","md5":"32e3b4f3a8f6048da9934fec1ca08cea","sha1":"39852ec495232af465ec59e74f6ab0c51a91390d","sha256":"40f09dcdb226fb60428bfe107e02f6c50db1561694264b0144e0155f9f3e4140","sha512":"ce39cd7c7d9f65a5589b4192ac8ad1aec0fce4c540600525db1effae6920fba6c1c3a9c07766acb5bce9afbb92097136101497e74962a3bd49c1b144cc71b69d","ssdeep":"","tlshash":"6b5136cd749af435c1572a74041f2419f23e9f2c4a9ca880e3c1e4e6ecb1949c2e5f78","first_seen":"2023-03-07T01:17:19Z","last_seen":"2026-09-23T06:13:39.10557Z","times_seen":5415,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":32,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/images/filetypes/doc.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.890Z","timestamp":1790102941890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /images/filetypes/doc.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 5894\r\nlast-modified: Sun, 13 Dec 2020 16:08:56 GMT\r\netag: \"5fd63c98-1706\"\r\nexpires: Thu, 22 Oct 2026 18:49:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5894,"size_decoded":6208,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"bdc291a3ab85df77fb05b95adddcd1b2","sha1":"47d88e94079b022b600467a69e718e96dc14b8b5","sha256":"d355f3cfcd7c468077a474053a1806da637368f446989a19ead070784a5d2d6a","sha512":"02254ce090e8225d2afc3b5206ee6be9175ce5aff8d5cfdac5d72107745520e4bd59cef9181f192f0a29ae8d9d62d29ede3bf01f3daa55433b2a77b4a7a2080f","ssdeep":"96:1T6QFoltgU51+2YCUk9nQ3+hHshhHPRY3EafEHaL0IAwrfAq:1mwoltjtYCZdhMnvRYwa1J","tlshash":"63c17dd25d8fad5f0c53062114cda454ee4f11814da78ab2e6c078c22de7808e6dbb8a","first_seen":"2026-03-08T19:34:19.558546Z","last_seen":"2026-09-22T18:49:59.491557Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306773/9f811e58494ec57b.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.989Z","timestamp":1790102942989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306773/9f811e58494ec57b.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11078\r\nexpires: Fri, 22 Sep 2056 00:59:39 GMT\r\netag: \"32556efd986c3a96b262eee5001f6553\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nlast-modified: Fri, 18 Sep 2026 17:23:28 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-strm-log-split: 0\r\nx-request-id: 4184cc6a5f1d0bb3\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38375,"size_decoded":11973,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38333)","md5":"2f89012026317711ae6cf110140271db","sha1":"f260295dbee0d01e71c54941a9db339d4e549545","sha256":"3f4ffec82f4d23794c84be1bbae0b4966b3b587ade230c2b98f4af4e929e2885","sha512":"fdbfb0f4e59e424382970d996b56bed8ace64b874a90687e1bcae6823dd5c86346dc77c9b7b063a453f7796c9d63d6862f4a89d243b337f03c1d4afa02dfc211","ssdeep":"768:/S8S2XuKTeA/l0OjtCCMWZb//IQpgFZmrm0ZrdzS8Hkh28HSndPfjCaunAbCGRC9:6ay0ZJ33HTS4+nAvKCw","tlshash":"f103b58db1e1f0a14697a0b0813f210ff37b6895a81d9440f765e4e16cba99f6073f6d","first_seen":"2026-09-21T07:52:55.720596Z","last_seen":"2026-09-23T06:15:46.11899Z","times_seen":62,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/alert/themes/dark/img/error.png","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.383Z","timestamp":1790102942383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/alert/themes/dark/img/error.png HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2311\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\netag: \"5fd63c99-907\"\r\nexpires: Thu, 22 Oct 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2311,"size_decoded":2624,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"e8b6e9895ab854483b46a681d17af4fa","sha1":"6f8c4298ffac4b025127b11cccc510321fac3f9c","sha256":"529e491e0ec3072dd29ff085a4038795777d2899bb3facb631dc0a0dbbef4829","sha512":"e3f3986c3e54741b912331c8216a2a9dea96bb3a3df73de7b35b421195bfa81cb8dab4ec358f05945f62a3e3b5c198f57c30a89cb6a364548ee8ffb3d18f775a","ssdeep":"","tlshash":"4b413d4c79e7245f664b71740d0729501bff8d536cd13100a2deb92d5d1bd9e5a44902","first_seen":"2023-11-19T05:41:06Z","last_seen":"2026-09-22T18:49:59.493009Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-53c35c90.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://library.se/","date":"2026-09-22T18:49:02.983Z","timestamp":1790102942983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-53c35c90.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://library.se\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 18:49:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3900\r\netag: \"fc6031940b149804ae2fbd7bede01ad4\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Fri, 22 Sep 2056 00:15:44 GMT\r\ncache-control: public, max-age=946708560\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 12 Sep 2026 05:07:47 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nx-strm-log-split: 0\r\nx-request-id: 7b6c53d5eb5f8a92\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9234,"size_decoded":4794,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9204)","md5":"5f38e75732892165c554961779f79138","sha1":"a5f9efaab095432315549efede70e9f15c2fd4b9","sha256":"de30ed4c5b345d69b642c0e3c090bb5fd65290712aae4bcb20b3e66ee37be63e","sha512":"5e3812a249a341a05ff05c5e9f022d942daf1455537bcbc43eb9912a6d1556f7d272cb515e6e62897ca945c0dac71735c32fd8040c057f0dbaf69fd9712eb8d2","ssdeep":"192:sOiMOSZkremHlX4Wpq18LX157r5NpPlqJYoxpPsYoxXPqqt4ML+9Xb:sOir8Ce8pq1Y1FR9qWgpBgVWMy9Xb","tlshash":"ce12daf932a1b8c412f659c1085f657b01b97e07b90d259b8b22599279244ce50f2fdf","first_seen":"2026-09-14T07:39:08.755167Z","last_seen":"2026-09-23T06:15:46.117317Z","times_seen":290,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"library.se/js/buttons/css/icomoon.css","fqdn":"library.se","domain":"library.se","tld":"se"},"ip":{"addr":"87.236.16.207","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://library.se/","date":"2026-09-22T18:49:01.792Z","timestamp":1790102941792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"library.se","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 08:41:43 GMT","end":"Tue, 17 Nov 2026 08:41:42 GMT"},"fingerprint":{"sha1":"35:A8:AC:52:AD:4A:E1:2F:3B:6A:59:7C:3B:D6:3A:18:D3:A1:B8:E2","sha256":"EA:E7:59:4F:DB:8E:CF:0F:67:A1:33:2E:70:B0:45:02:F0:38:E0:F5:A7:EE:8C:71:67:1F:9A:DC:19:79:F4:2D"}}},"request":{"raw":"GET /js/buttons/css/icomoon.css HTTP/1.1\r\nHost: library.se\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://library.se/\r\nCookie: beget=begetok\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 18:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Dec 2020 16:08:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fd63c99-343\"\r\nexpires: Tue, 29 Sep 2026 18:49:01 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":835,"size_decoded":582,"mime_type":"text/css","magic":"ASCII text","md5":"aa3a2867fa50c117b4548ff4fd1b538a","sha1":"cfe0dd47adf908861aa8dc675a45090aff7be639","sha256":"bb878af47ed0a243312dc6505f3a6441b117b270f9acb15095c6b37655203fee","sha512":"8203b8d887cf0c5d647de0c54953ac47c90d87913d8446f3a4666ab680ba201e9e2d7145c1101c95cac1875a1acc2e3d7c04346dbe32ec9448c4ab6c59d462b7","ssdeep":"","tlshash":"d201c2f987bb0b084b43909e446ae22072e4c389685df8146de61c9de6ca388483f65b","first_seen":"2026-03-08T19:34:19.72997Z","last_seen":"2026-09-22T18:49:59.494556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"library.se","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"library.se","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}