{"report_id":"59ae7461-fee6-4ac9-acf5-6a7b5e36c226","version":6,"status":"done","tags":[],"date":"2026-01-14T15:17:10Z","url":{"schema":"https","addr":"sat52.ru","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":0,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"title":"Общество с ограниченной ответственностью «САРОВАТОМТЕХ»","dom":{"size":75490,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7224)","md5":"f362f3fcfe47d2c6b1af9abdee149fb1","sha1":"b4c6aff8358bde7aafee2fd2b46ae8d32e11d079","sha256":"09e872697af24d1a1d716b78c5fe07a16307e5e8ce5cf66e25e35ec64fbaa087","sha512":"8d35e2773eb05088f8fb51883f3c8e675fb0ed1bc332541e0cf143463efde650523ce184194ba010781a25d39ce9590ebc28a28d324e2d16efc39ccf3b645f8c","ssdeep":"1536:MihV+yJVmv0M1gLgi+jvedM7j9mrZpBVUlUM:MihV+RS0P7ed4j9mrZpBVUlz","tlshash":"f7733e31c090a53b02275adaf9207f1a76e7d6afdb27094537fc4ba62fd2e51ce02116","dom_hash":"domhash55c5819f212a182125a2b6b30919df14","first_seen":"2026-01-14T15:17:21.863073Z","last_seen":"2026-01-14T15:17:21.863073Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sat52.ru","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":0,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T15:17:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sat52.ru","ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-04-03","domain_rank":0,"first_seen":"2026-01-05T00:37:52.426325Z","last_seen":"2026-01-14T14:25:24.355067Z","alert_count":93,"request_count":93,"received_data":21380838,"sent_data":51701,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sat52.ru/bitrix/cache/js/s1/concept_kraken_s1/template_626b56a2766ed0c5e6c3f5c0ccce211a/template_626b56a2766ed0c5e6c3f5c0ccce211a_v1.js?1767012272401959","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"69dab9ddeb82b1614534b18ab6156522","sha1":"1df4b701f12c02df7020f68fb94eb790946d3392","sha256":"2b7a1aad03a3a0017d14c1fff09f39ad559f1a028309e9992703659fdd13b31c","sha512":"44cdb2f5b168d371abbb37c8e0feb98cf57a743376dabdd869a043ddd5d256360d6eba488b45b362ea9ac2fcb4d55727d9b2e99433a2ccbfc832362f27af57ce","ssdeep":"6144:3RzEOA2+zNa98Hrc9OAK4WeBnrlGI2R7H+e4yMibroAXJATbFOQWY:OO9+zETWY","tlshash":"f8843b4db1a0326242fb31b951ef410a7336957ba4048868b4adc5e47fb4c5962fbfbc","size":401959,"data":"","first_seen":"2026-01-05T12:37:28.332799Z","last_seen":"2026-01-14T15:17:21.944274Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee01f36a4440877527951af6b20ed320","sha1":"3e9d5ad72ef416bea0696faef4f1b8f71c56cded","sha256":"13409e2331a06f23cf3d9f784b32dd9f8fc9e4fe11089c19d7efa06ab611e7f5","sha512":"750568b943d16fb3ad6e7a24251685fcc0f65784538fbe1574ee684b2d2b537a1f07691cfc574fe66ddbb7946c348edc8bb6069b716c98ff01f86ea898359708","ssdeep":"","tlshash":"cc0147921a1770eb4757b41fda2a6b0d20e1867fad169dc385260f9ce2a00fd433d314","size":737,"data":"","first_seen":"2026-01-05T12:37:28.474758Z","last_seen":"2026-01-14T15:17:22.017655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f94dd214d89d974b95bb96a53b07a8a0","sha1":"38b8132854bb60b35f874d87d39d40a1cb0eb137","sha256":"bdbf2f057aa847596f3c9bac16881298f9c571053f2aab995601e585e83b9060","sha512":"6b6e9799a2f205aed3e79da319c98b1979fad8f145f9bee00301f37683f259ed30471af3984e4df6150c65b199aec59966092d164152674e786f4bf64664161d","ssdeep":"","tlshash":"1511242de11c8eef5be000fa345abc076486bad5fe4dc76058150b78e52bd66af0f068","size":993,"data":"","first_seen":"2023-03-07T15:03:28Z","last_seen":"2026-07-31T18:40:31.180556Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"989f0da418116b64681c4d5fc4d41918","sha1":"7947d366f464fb7e54077e2f5986714fb86bb165","sha256":"10adaf6098c9dcdf697f08456519d7adb8763189c055d0d9c3eb98ba44b6c1e4","sha512":"ffe35fb1370534eb8bdfe160b280a4601ea8c5250f7a5f449aef53bf6339bb7fcd27bf023c7649f6d6d8a96e97047f7c4d90835df07b810c9baca74761a9115c","ssdeep":"","tlshash":"86e020116c8105382b109c6b2eb3b0a3bddf20183512c6c4272e00205f7d4165f23717","size":333,"data":"","first_seen":"2026-01-14T15:17:22.021206Z","last_seen":"2026-01-14T15:17:22.021206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"46e24c652d932b530c46e94be3decdde","sha1":"258500912a7e0497bea2d73ccc68a21652da7ceb","sha256":"aa2af4c65763f1d093657393a8105e5929bd48e8e667e4a9ad50babeffbecd5f","sha512":"18e72599462efb56c79c95d87540f03249c8b6ba2a3916ec9540fb36b239a8f69eec7bb779b14e4ac05133f14ce0dbddd8cf92fd01b4b39e1727f616f58ab85b","ssdeep":"","tlshash":"a3213729c1259f6f43f51539fd6733ab457270c4bfddf06384c11b34b56690aa26c188","size":1361,"data":"","first_seen":"2026-01-05T12:37:28.477415Z","last_seen":"2026-01-14T15:17:22.024204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"60cdf316db09d413c080b65616f8aa02","sha1":"30dc5794b6e2964c7e118eed3496ae8b1acae3f5","sha256":"4a47182d259b4abdcb636577a4045e1098b90c4025021c80fd0ad786f3b476d6","sha512":"ff2fac251966ab4a57a7928f126609db1f9a14815dbd82442a602ab2f84a7aebafdb820e42bc15e0feaad0165e6f2ad49615ad283934326ec75a2f0d72e310e4","ssdeep":"","tlshash":"f9219215c224d36e83e6393afd2f33679672b440be6d507390d65738719580e62bc2c9","size":1119,"data":"","first_seen":"2026-01-05T12:37:28.478434Z","last_seen":"2026-01-14T15:17:22.026515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1eb4f24b078a094c22292d79458ee33","sha1":"c3f36b6641ab1cb7e38510797b03420ab38fbf30","sha256":"d2571b713a7594730821948c3b629a05a779b2d24cdadb5c276f8d3396295f3a","sha512":"1188b3f68192b7b96784a8760e296b278f2f3cd784af87239e72ef51f4512aea76889110a90c235fefd4fa5b736f670a78e3700446afd54ad3bc787e11e138b6","ssdeep":"","tlshash":"f1e02b0cf3dc19ca9332372a7b3a07d83c31646331c24c08a8bc82703594c6a59eadb6","size":403,"data":"","first_seen":"2026-01-05T12:37:28.47946Z","last_seen":"2026-01-14T15:17:22.028234Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8e853c5aa7f183c9e295bba3a14dce7","sha1":"65a2c9ae67205364969c9566666c50548603d89d","sha256":"ab44f0794e2f4ea76fbcbba69a2c3d70f59153cc9d028ab7e972071529b34a2f","sha512":"5d06765f8bbe91117a86659907d8411e6308bd6f33282aaba5fb6a62a96f7359aa0c13b283a4aa808281d10086b5dab9e5f531af1828839d2cd2aa872e136add","ssdeep":"","tlshash":"7cd08c1833580142abf7a02c7bdb94003da3831b42d218013c2c2ec33fc0608829bf9e","size":202,"data":"","first_seen":"2025-10-18T21:48:53.246381Z","last_seen":"2026-03-08T19:07:19.845005Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"309b022e11cf62b4883b69257d122991","sha1":"5f2a1defe018c4ba9bed354c94d8653b50b60d13","sha256":"137621c3a65870e3263ea441d9b093b421302cde9d2c0f831c53d2523e49d5c4","sha512":"3681301ddfab74c8335d27d490921a60ac4fe1559620c0a5b5ae72e145d3cbfe1f6149bb5c4be48b6d094d0423609146ca81d07d64f850e4888e36b78cc2d20d","ssdeep":"","tlshash":"b9c02208b22a200c803f302c2c2b32202e0a880b00a2ec8038eef0800f0ac88000aa0e","size":130,"data":"","first_seen":"2023-11-07T06:17:33Z","last_seen":"2026-01-14T15:17:22.031169Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/cache/js/s1/concept_kraken_s1/kernel_main/kernel_main_v1.js?1767012497148865","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b76f1ef0781f32fe02d7510fe0325a5d","sha1":"7c84cd3d82ce8e2349fd8e0bd8c5c3e72239afd3","sha256":"d27bce3f822cc9104cf65c380b2ca05cbeea195cef69b4cae891ce8072389ef0","sha512":"193ece46bb17d44bac8dee98bb0ba7a088936991798121ef2ffbf33510d671380362d705d04d7fae69a229d5f29437954cdeb261d69ca5adcd0be04290d8ecc0","ssdeep":"3072:DSfUsMmm0MuAt3q9T7O9T3BoVxQtNZwg+EssH7H:CUsYp0T7O9YeNZCsH7H","tlshash":"c3e3e709b162313e93f6d179112b430972358518ea4a485cb978edf9acf8d0631bffb6","size":148865,"data":"","first_seen":"2026-01-05T12:37:28.38013Z","last_seen":"2026-01-14T15:17:21.922543Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/cache/js/s1/concept_kraken_s1/default_922bb7eacd1f0f9ae69d64eccb736442/default_922bb7eacd1f0f9ae69d64eccb736442_v1.js?17670122727136","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d2cc74a71ba65de914c5cfe9441b225","sha1":"b65f6e45927c85e24086027f68a53aa2783b1a6a","sha256":"7423bce100833ef167251b81efad651d31d60122fdb466ce0d5762884a0856e4","sha512":"e8b067e78b770ba19f850d2b345b1005c2b3dc7838329be3637c79782091e567b39ef27a213efaf37943e70147ed125c1cd3827b4fc6e127e6b9e24abb9c54e9","ssdeep":"96:3RGwwRvm+vHILJhikbmBtsf9yeE7ya0oTg5LF28kKxepVfuWWrebDdQJuAvbre:3RGdpIJskbmByf9ZEFfuw7HfutKDKTre","tlshash":"d4e10c983643b072a2ee56bbb2af834672315014740f5415a269dc90bc7cef7e35be9c","size":7136,"data":"","first_seen":"2026-01-05T12:37:28.439235Z","last_seen":"2026-01-14T15:17:21.95905Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/js/main/core/core.js?1572603809497696","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc4b0475beea759c6e58b7b7abd5f14d","sha1":"54383457e88578a63ea9ffde721c30de2832ec4c","sha256":"50b55f8100caea556d77799da287dfa11bae5313ca7e6c0af78f9adb3eca7c96","sha512":"28c0f30935a0b3eadb7185cdce41d8d9d5258bd5579ac4f6549e31e09e296f9112008572f174cbb999bd76b26fa0edcdb8a0dab3c59cb3d352ab4bc65ebdef73","ssdeep":"6144:DowAPsKASFTBiJfc6VMAkPzspRCuM7bhcMpZYky0zZ0OgTkpFOHmDTR2ve48WWfB:aBoGfkXbbY1","tlshash":"3db49589ffdd6056f626326d4f5f900db23c44335948cc90bc5cd6a47fa092982eaee9","size":497696,"data":"","first_seen":"2025-11-06T02:54:13.230128Z","last_seen":"2026-01-24T23:26:16.818306Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/0a8/0a820ef9847b42626f666681322dd693.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/0a8/0a820ef9847b42626f666681322dd693.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10187\r\nlast-modified: Fri, 06 Mar 2020 11:56:06 GMT\r\netag: \"5e623a56-27cb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c0cbe19d9114cfeb820bc11115c13448","sha1":"bb31112e0fa0a11a1afa664c76083916f32e86a1","sha256":"615acfbee26d39a7286df0888c6454aaf29634042fb725fdd9517ea2d1646a95","sha512":"6cce6a56e6241fd160f1ca21f0a30cb1251f27e693cb679d727b6b838a2788ce8b417bf9b3b493d938e58c8d8597ed30e921e024446af12b357b796b3ee9714d","ssdeep":"192:ISDS0tKg9E05T/usMwIUfyir2tlJMlG92dqFW7pFrq7gLVdpUaxLoVVX9xGwFG:PJXE05jDM3OyO25MlG9zKO7yvpv4qwU","tlshash":"6522b09fe840c14e994d75370ccb56af33d9a2659b252b786219b0fe508451d2f1247d","first_seen":"2026-01-05T12:37:28.45782Z","last_seen":"2026-01-14T15:17:21.866047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/113/580_280_2/113b7c875e5efb9c77a33456d401ebe8.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/113/580_280_2/113b7c875e5efb9c77a33456d401ebe8.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 279464\r\nlast-modified: Mon, 29 Dec 2025 12:43:42 GMT\r\netag: \"6952777e-443a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":279464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 280, 8-bit/color RGBA, non-interlaced","md5":"8f4551102168da46ed90ccd378ff1f45","sha1":"b48d53ea9a67c041f36e9dca2de8e8dab1de8037","sha256":"2c50baab3ae1df354e0fda0cd4f2588799db3a1a364a06e609bc5f8827aa2780","sha512":"07002ecf905e0dbe277da86e6df44210cd77178c491338667e45556980b11e664d2bf392016d0d977a6342c07ecda55ce418b5c7cab85b2c6b3760761dd54bdc","ssdeep":"6144:P8G2ccbjSolJ0NLoxD7WeLsZEC2B3GPHn9UAN3aDNayvIr6hg3/N:Pvcbx7tMEnU6AN3awzXvN","tlshash":"5b54232b5d23a621dbf40e9f2557097d3ac6627b004cc3d2e4ad84ad0b1ceb4de64f56","first_seen":"2026-01-05T12:37:28.421234Z","last_seen":"2026-01-14T15:17:21.868406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/2ad/580_280_2/2adcf7d759ae6459707f63c2c60f3912.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/2ad/580_280_2/2adcf7d759ae6459707f63c2c60f3912.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 233030\r\nlast-modified: Fri, 06 Mar 2020 10:30:05 GMT\r\netag: \"5e62262d-38e46\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 280, 8-bit/color RGBA, non-interlaced","md5":"afcbc92066b8c590c82ebb4d32e7b7ab","sha1":"648c067500391803014d45a1f1601eb2d080912c","sha256":"8a41281e34872896d347e2df6940cb2e589c04e9813bad0f0ed0677e498bf993","sha512":"e13131bea2409bc35801a095bf495cc539c9b1efe27380c41893e119c00465afc8d0032c7eb85110a731df6f236533f12e296a0b1043f882be4c3bf9b4644b7c","ssdeep":"6144:cLmf8eZ+EeeLAxe4gLjoB5f6mex4B1lgEZCi9:0mfzYvrxe4cY5isrlgEQu","tlshash":"483423c2909c841fad3329006837db988b58b5cefe6fa6d407a067bcd4046fbd751b86","first_seen":"2026-01-05T12:37:28.449869Z","last_seen":"2026-01-14T15:17:21.870968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/ic_open_list_contacts.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/ic_open_list_contacts.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 952\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-3b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 7 x 4, 8-bit/color RGBA, non-interlaced","md5":"314492ab998bd9adb8165f29a53a7c91","sha1":"6f88d3c5e16915ad1db9c9ffe91ca0d7af88f35a","sha256":"774bad4d857468f4cf021193ca67f96f41e35e293282b566f597cc32aea52cf3","sha512":"fc8face85e29ddf1e69b563081591434b716c89a039481f671c8d2f9ee23a16f192e530670d1f6809c3404c396120cf6324611b5e6b29bb3fc6d1a5f018e3e70","ssdeep":"","tlshash":"e81144a9fe5178217195dcc324fb8023cc768940d5d0e0a2b8cfe86b5d262f9459aacf","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-07-15T18:12:44.706328Z","times_seen":62,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T15:16:47.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache/2\r\np3p: policyref=\"/bitrix/p3p.xml\", CP=\"NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA\"\r\nx-powered-cms: Bitrix Site Manager (DEMO)\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nset-cookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524; path=/; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89989,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4056), with CRLF, LF line terminators","md5":"85c49b25b1c3381a1f071eb96e8f7ac7","sha1":"291ef4fc096a7dd4d26172ba4fb4f3b0672d2274","sha256":"dffa532d503b2067d8a0380f16ca1b97b1978113b1c0d7f410b4be9b3e4a490b","sha512":"bf45e23bcf18f5c97e82fedd18fa729bdaaa06800a82a0e6cd4ae1c534dc2a7d9ba86d7948c1f709b4f65e5a8ff8a60e11ea7b5c01a90433d749054c7943cf0b","ssdeep":"768:O6ih0f7Pn65TGBLJV8q57mkM6UmIVk4DN/7WwJreKNj5JROwovBBE9P4s:pih0+oJVPdmkMVk4DN/7WwJrtN9IBBEH","tlshash":"88933e31c490b97b02275aeae8316b0e76e7926fdb270d4577fc87a62fd2e41ce41016","first_seen":"2026-01-14T15:17:21.874577Z","last_seen":"2026-01-14T15:17:21.874577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":97,"dns":1,"connect":28,"send":0,"wait":189,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/kraken/20e/500_90_1/20e3d7cdcaca9dd9048305b5b7cfc230.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/kraken/20e/500_90_1/20e3d7cdcaca9dd9048305b5b7cfc230.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 14024\r\nlast-modified: Fri, 10 Apr 2020 12:14:04 GMT\r\netag: \"5e90630c-36c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 90, 8-bit/color RGBA, non-interlaced","md5":"c7bee3ac677d9a9398e4c5cc583369a3","sha1":"bbc6e084b24a043573b0e60980f4190a76bf3390","sha256":"c72d236004471c346be8b004eb9ad3601fa178d28ba3e815a0df91e6fc236747","sha512":"1b27b04a4bf689729c30881e2131dcd20ec7e17d075a106045ec1c672609ad657cb55980e402e6d7fbccdd16c46a754c408ea248133415e00da8f9a959987cab","ssdeep":"384:VdDkYmpf0Upm+0MMWL/yScA1qITs32Shk8PO:VcBU+0KLDc+hTspeV","tlshash":"b852b034ab47129077d415bdf4099dd67aa33f011178aa6342ee30a339e48f2f9e7b61","first_seen":"2026-01-05T12:37:28.272608Z","last_seen":"2026-01-14T15:17:21.877424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/0fd/0fdff661f3a320f28114406cceb09490.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/0fd/0fdff661f3a320f28114406cceb09490.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 11088\r\nlast-modified: Fri, 06 Mar 2020 11:56:06 GMT\r\netag: \"5e623a56-2b50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"855084667dd2b4f347f50f2b804b486b","sha1":"3a2d8a51051d6e42fa6694b382817af0796e365f","sha256":"1673b91ac5c7f490bee8282ba1c34fa880e8ef500dc5896766592caf5cd07243","sha512":"b578977e6787e6020698f1f48ef888550ede3e8f23bab27144e978a6102fb79d9d30e66a2f2f27e551c16e0ddcb677731d43a7261d4da2aaf4aa57b96b4cb9e5","ssdeep":"192:ISDS0tKg9E05TenymwwAuYZYM3V7pRq8ZUGCpdAi/Nkkl:PJXE05rmxApFdUJx/Nkkl","tlshash":"ab32b0dbe5fa244d8554bc5a08dc06e6d30ab3848797b72db451b78d481681f6b0b4f8","first_seen":"2026-01-05T12:37:28.46957Z","last_seen":"2026-01-14T15:17:21.879889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/2cf/400_280_2/2cf2c17e4e5fe3a213ae07545442dfb7.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/2cf/400_280_2/2cf2c17e4e5fe3a213ae07545442dfb7.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 162007\r\nlast-modified: Fri, 06 Mar 2020 09:57:45 GMT\r\netag: \"5e621e99-278d7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"83d7c3104cc184138146c216a24fea46","sha1":"1e34b05089a1febbf2d18d19291ff2d0d3f68f43","sha256":"d42482be337d62c0cb1d6dd002a8300a22611b1096568871f7eaeb1c5f1518d6","sha512":"821a802e9146232f5a5cb154cf26e86eb53aff9f43179513fee5d80ff42c4d3c39c5154640decd22a68c98ba74c4143abb02240cda51876f88f53addbaa8bb9e","ssdeep":"3072:Px7/nXhpHXzPIrqd7pQxfHcZ8lWYyJXyKCZhbB8uVd9REgOq0uy:P1xpHsrKyxvc2SghbB8ur9REI0uy","tlshash":"57f3233364c5aae45635b70c4fac7d5953bb08418d1edafd249820b8378b3f4f51a59c","first_seen":"2026-01-05T12:37:28.471783Z","last_seen":"2026-01-14T15:17:21.882332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/js/main/core/css/core.css?15726038093963","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/js/main/core/css/core.css?15726038093963 HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Nov 2019 10:23:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5dbc07a1-f7b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (688)","md5":"8ef298c6c295510068544f022c6fe642","sha1":"9bca19a33410ff4ddf1b1c939b5f91ffea0b2925","sha256":"906159ed7c4e25e4b20f5e7754ff5e4f2f6d848bd0d7ea02581feccc08bdbde3","sha512":"16f5ae014115db3d3d51e3fdde403c0961d64b06fbed7e0dac7c79e2f4256d2ae787a778ad8bd6254fe0ea6c9495942f8cf92cc0ad65c534ff850c5dfda30d3f","ssdeep":"","tlshash":"28810c13fed30254b01ad185896bb7fcbd3f054397038e7a3a617bb41f4a2e7a122a54","first_seen":"2023-04-05T03:42:18Z","last_seen":"2026-08-05T11:08:16.83611Z","times_seen":389,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/699/400_280_2/699cb1b5090af1001f3f7cd0ebc5bff2.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/699/400_280_2/699cb1b5090af1001f3f7cd0ebc5bff2.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 203769\r\nlast-modified: Tue, 30 Dec 2025 05:24:37 GMT\r\netag: \"69536215-31bf9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"69e8e10517042288479a152d65536cca","sha1":"0097cc400fe467cd77a6b74a9c7003d0a9ae1ad8","sha256":"3bdc428aaede2d9e313f34924426e56058067db5d975a27c7c28a2f33b7cb388","sha512":"66003ebef56d018f6baac1f5c1185c5eaf505859d78963d5dc0cfa0d0a50a09931344b3a7c3ba3d4dd8e0602dbf9748bc2f2849ff69fbb1dd111a73b5c6914b2","ssdeep":"6144:cnPUvv5m0FRE8nfJ8VP7kf66f4VQxzmdo0hP:c05m0FGqx8VofVf4VBW0hP","tlshash":"7b1413869024725632aed021e58f50a5fed722da771171b3369a7362f8f205f1f53ec8","first_seen":"2026-01-05T12:37:28.458757Z","last_seen":"2026-01-14T15:17:21.887009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/2ad/400_280_2/2adcf7d759ae6459707f63c2c60f3912.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/2ad/400_280_2/2adcf7d759ae6459707f63c2c60f3912.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 167251\r\nlast-modified: Fri, 06 Mar 2020 10:29:27 GMT\r\netag: \"5e622607-28d53\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"0efb723b4780cd42008ccdb16a28799c","sha1":"79e47ee742c5a0d5eca09daa3600526ce81108eb","sha256":"ac3cee584b6c8117232b1e12576ffb9c38f9b25ac98b443bfe562b290d2ab496","sha512":"16b1c9074d3d73eb6432bb694c096f71c68cb5010816d7f8d96f0d7428415537c9f57ebba2a95992f3639efea148bbe39cb0d82939bd402351af3ab9c0893e3a","ssdeep":"3072:KngSBmsPwJFOfPbg1+C3oijajVKeidcikO9I2Lup/HyV3EkSuI2fLvYnnJH3jv:EgSZPwOfTQl3Zj8VjIc89ImutyV3zS51","tlshash":"47f3124eee5510a098af6ef1517997c6fac022f7bae039813020c7b5909fe448db56e9","first_seen":"2026-01-05T12:37:28.383935Z","last_seen":"2026-01-14T15:17:21.890454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/514/400_280_2/514dd0ae9bef31809f5a2f496cc59a8e.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/514/400_280_2/514dd0ae9bef31809f5a2f496cc59a8e.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 169978\r\nlast-modified: Fri, 06 Mar 2020 10:35:55 GMT\r\netag: \"5e62278b-297fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"0fa267d175068e2bb7c2d560b7b881dc","sha1":"f430a4b6126213f4a059e60dc1ce2f05cd6cf564","sha256":"9ed2e2e8ae9f0739c676402b145f0ea83143794223728f1264917eeafa9f0fe3","sha512":"7ec7744c8e5313530c845dec0e3c0e1a6c902e8fca5c2aa249d4fbf77f1b3a62e5803024e5509d7e2af47ed2ab2e2fbc223edd38b7f75f553450adbb990ceecf","ssdeep":"3072:KvKrTak5bxhex3qVXm+j9Dop58JV7d0X+6DoHiwmmWHXbWVuM:KvmTakZSx3qpm+BsruMNwpWHyVh","tlshash":"c0f31349303a474652cb6e66b1ff31e4cf5e4d81f28c26268a2dea5c34c8c576fab744","first_seen":"2026-01-05T12:37:28.450788Z","last_seen":"2026-01-14T15:17:21.892957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/67d/350_350_2/67d5e0c98aa8e970602479c4ab97c409.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/67d/350_350_2/67d5e0c98aa8e970602479c4ab97c409.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 83203\r\nlast-modified: Fri, 17 Apr 2020 10:48:33 GMT\r\netag: \"5e998981-14503\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83203,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 350x350, components 3","md5":"2f4ec7b82c82af02dfa1ace0cb219a38","sha1":"e68ccab285a143c57de1a4badb2f131b4576ab63","sha256":"00f7d969e4677798b285d28233c665414b52842663ccd70894a54e1458a398a1","sha512":"e59ad48dd0b63767d4ceadcb8e6623c207cff25de02407aa45a6f5a604789eca4b154bc1586a62b8fb40ccd986cffd0849eab68cba7b710fd8e4ccd63d4282c9","ssdeep":"1536:tFbVAd+0l0MyAdebQVW1osEl1e7CovP9P4YsbfvnKHMKOJQPANxapATB94wopXKc:v2d+0mfsebwWGzWxv2LqOJxTapjWk","tlshash":"52830238fc289a6317e431f934e2d08dde45563475dcb889aefa37a84ace30217649f5","first_seen":"2026-01-05T12:37:28.451774Z","last_seen":"2026-01-14T15:17:21.89547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/kraken/4a0/4a0bc1d64e5b4266e63d9825b0b6dbf9.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/kraken/4a0/4a0bc1d64e5b4266e63d9825b0b6dbf9.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 637436\r\nlast-modified: Wed, 26 Nov 2025 05:31:09 GMT\r\netag: \"6926909d-9b9fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":637436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2025:11:12 10:38:31], progressive, precision 8, 1480x190, components 4","md5":"6780f0874a2afe4db714aac19cdd58fe","sha1":"29c0627fbd3f0429316728233197a52133e98e96","sha256":"0206b26e507d6d68eb2e06ddf8318b9ed65c1d3613dfe8c89e8999f0eb800b46","sha512":"83be4b0384f0146f5b30a991f638f276f9c859ee61d8431ffbbb8ceef5040ff8d738a8a63abf7c9f52824f62f7e34751667955d978941b21a1a8d347302f40bf","ssdeep":"6144:gequwWvJEIV13Z1RIw47cteF4o6dfXHB11LT0BoTyNzTQF1CUye/iaPKaMap/oyN:HE0p1RE70zxntT/ylTyaaSMn2fSzfka","tlshash":"13d4010e61d3ccd6db81e33214d6eb3e85e4dd01aca2a65272fe3d5c73f6a809a53125","first_seen":"2026-01-05T12:37:28.330887Z","last_seen":"2026-01-14T15:17:21.898501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/css/fonts/fonts/SegoeUI/SegoeUIBold/SegoeUIBold.woff","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/css/fonts/fonts/SegoeUI/SegoeUIBold/SegoeUIBold.woff HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 273576\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-42ca8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":273576,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 273576, version 5.655","md5":"84a51e4750f7c0f00e2d815d6c4c6812","sha1":"c46bf4164e33c30a2dd74a3a6a93019e78d810db","sha256":"e4353107023cbfbbda8ee39c3e426e1d69abf630c3d4d619c8b9874f731e4aa6","sha512":"f363414b57094a41b3691bb44a34d65e87e6eb064e0cdb1901c31b45b56966e53fb43261740b5b0f68db380f86038e2bc0669f61e2bf22dc4268d41d9adfc6ab","ssdeep":"6144:hwhncWI/vOVRnwjuB6MEPv6fxEwitBo1Y:hwhn3I/vOVNeuNEPVGy","tlshash":"1b4412b53ec9175cfd9c41adb9a0600853e118d246b2cae1d739cb4e707edac736a0b9","first_seen":"2023-04-14T18:21:20Z","last_seen":"2026-07-08T06:08:22.440511Z","times_seen":73,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/12b/280_280_2/12b1d64f1dcc0d9405c4116ae1a5603d.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/12b/280_280_2/12b1d64f1dcc0d9405c4116ae1a5603d.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 130588\r\nlast-modified: Mon, 29 Dec 2025 13:13:15 GMT\r\netag: \"69527e6b-1fe1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"78910bfe9a1a1f7066c2e82357556aca","sha1":"aa88cc2bc0bb644c94da1312763b7e0c443b3791","sha256":"71450466db8f21f3f5bad7574a4b88d1cce01b9291ea6fdf0dbb41e673b1ee6e","sha512":"e167231c2f9f3c66c5fc2756fe59c7e14ee62bf3a318f2e7045c73acc467d77f003d240d1166d690def76fc53690d5c9a830354ab8c703d8da11fc4703aac394","ssdeep":"3072:rwwwnpFsGm3x8InjDA+rp2XxACH3t4ikyai:sXAp3pjUVHSik1i","tlshash":"a1d313a573bc3038935a32b3b8dc38556edf23b5f545a91a311e2754a8d98fa1ca0f4c","first_seen":"2026-01-05T12:37:28.366619Z","last_seen":"2026-01-14T15:17:21.902648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/be8/280_280_2/be800b8dce5c473e88c7f40a0b300aff.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/be8/280_280_2/be800b8dce5c473e88c7f40a0b300aff.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 132823\r\nlast-modified: Tue, 30 Dec 2025 07:44:42 GMT\r\netag: \"695382ea-206d7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"e524d39b7accd8ebdcfee5aefce1d66b","sha1":"7a13f28909a8d5e638803c30cb4fa2a81c48ed4e","sha256":"090d9c1e9a3c447629069fa234c5b62c9662aa6a4ed3d554e8c79d0c79588260","sha512":"db28eb8a022956c3d95a5f35a2ce0073368bdfad2d2878c333da1c370f43b07a900312c40204e9c6e651559492fa934952b30a4674d929ec5cb378933ba6d776","ssdeep":"3072:s8moRw+K4eK99Qzcfm1CVf3Bod6pf0dSQNO6JTR5A:KoRwH6HhVf3BodSf0dVRC","tlshash":"ccd31269889052a507adf1fff799140ed762dfb147a8410341f2bea18005de5f4acafa","first_seen":"2026-01-05T12:37:28.44483Z","last_seen":"2026-01-14T15:17:21.904959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/030/350_350_2/0306209610f40fe061e26996e34e0664.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/030/350_350_2/0306209610f40fe061e26996e34e0664.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 181674\r\nlast-modified: Tue, 30 Dec 2025 08:10:21 GMT\r\netag: \"695388ed-2c5aa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"f841a2e38f2a5ae15122b35381ffbe48","sha1":"4f675ecffbca312688c71dd0ffe6fa9fe57f68ca","sha256":"664c4efa72f3f8318063fa5cf31c55ab0d842e8b465f9ec681d1ace10476b771","sha512":"036f559292f64e2a47d3b6edb65a2bd55482b525d6cff8d025f468be73d021f8df5bf0c02ba3a3e36e6002941f32b99c6e5cf88d07bc8508812232eba0a281a6","ssdeep":"3072:NIPf0Dd/EQbXlxJ33HDjAo/e3IEDSoG+nbEcL1OJ26yu18o7TX6hxu0ugngr:gOEclr33jj77EqybVL1OMHuio7L6hx16","tlshash":"550423cec8bff632440b96f427701d76f3b8b7a1c7259a00a24de463ac7e56484ed562","first_seen":"2026-01-05T12:37:28.29042Z","last_seen":"2026-01-14T15:17:21.907762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/2ad/350_350_2/2adcf7d759ae6459707f63c2c60f3912.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/2ad/350_350_2/2adcf7d759ae6459707f63c2c60f3912.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 180748\r\nlast-modified: Fri, 06 Mar 2020 10:29:27 GMT\r\netag: \"5e622607-2c20c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"0fdc7bb1dc61811ed2211b6f43206432","sha1":"83cda9d4781c5ca1113c881c3d725f20b5da92fd","sha256":"c94c05222c7748e7016297703b5f6e011bc0122754f77a3b5e06e33a1838f343","sha512":"b9f2961d5c135e7ae6c027eb25be03358690ac322149a342abeb562f3237fa08d952b6b03255558d54eba9c7855febfe16536cf064d56f0825c69f2931d2872f","ssdeep":"3072:oozYqcwRuRLPmxwVbSho67K4HaK6iELDm8cCQle607NLjvXvgX6sThdtHCYjFa+I:nY9wRuPmu1Co69d6vo07NfvXv0ntHnBa","tlshash":"0704123baac99d0fc1eb7a25581720e193e3b685132761102e5434f52edbbd2b29da07","first_seen":"2026-01-05T12:37:28.293805Z","last_seen":"2026-01-14T15:17:21.910606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/916/400_280_2/916dd32e434bb9349a8324f7497ba9f0.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/916/400_280_2/916dd32e434bb9349a8324f7497ba9f0.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 191242\r\nlast-modified: Fri, 06 Mar 2020 10:41:44 GMT\r\netag: \"5e6228e8-2eb0a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":191242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"7ea899eb429ae9b52180df89ceaf8943","sha1":"8b0c2cd11ff8ff18e5f373af164be4b7fcd36cf8","sha256":"8634aa5e703b9d875924d74ceefd1ae2e5df56da8196ccdebe751e938fa3fcb9","sha512":"7f59b97eec947cff6abad33366283d1e34289af6c654ab264e69ea6ea9d4c1719d76a94e92a1ec25181a33c218276c001a8a78b73ee017dc84165a0371cd2563","ssdeep":"3072:5y1hXJa6fSsCUYX1WvsnoZrSODcvkOmcEK4X6V60TrXJPCtWGGQPPBrWicBTlYIO:obXs6ffCUwWvVrSOIJDg6vTUEQHAicBG","tlshash":"8e1423eec109883c88e7d6d27e38c3792e865fa749c0d59620f1e6b791fc49502b1e6d","first_seen":"2026-01-05T12:37:28.375183Z","last_seen":"2026-01-14T15:17:21.912647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/0f2/0f20382106a970a4d0f23c31f7944a7e.PNG","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/0f2/0f20382106a970a4d0f23c31f7944a7e.PNG HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1589826\r\nlast-modified: Wed, 24 Dec 2025 09:08:54 GMT\r\netag: \"694bada6-184242\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1589826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 675, 8-bit/color RGBA, non-interlaced","md5":"b767a222203898e003aa2f4e622e3309","sha1":"6cd2887e6d9d7baffd74920daf14e4190dbd3a63","sha256":"a8e4a02b65687fad016dbf40609c95366f0e4d53600689055ec3791c399e2a6e","sha512":"039e14b55908b354520aca4ea1e9c50f5139552f9830e01490b3e7a8c4a4a762a356e37e0a1c46010c0b90a04983905613aba2d47d51417bb56262cfc0d53cbf","ssdeep":"12288:vFZVKQJhxn9HC6VlpCCaH5eLI8xq1khpVXyuvuvJmoEb1aLYyKpUvQW2y5JaYxoV:vFvKK3RLkvJmoo1aU7dYxIS4","tlshash":"032523dd382d670f6487405df0a63b1185b7948a0e3cd9a3b1b3975902a37b31faf91a","first_seen":"2026-01-05T12:37:28.352298Z","last_seen":"2026-01-14T15:17:21.914608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":468,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/f8d/f8d946d46aca17a45a9ac11f3b19d1a9.PNG","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/f8d/f8d946d46aca17a45a9ac11f3b19d1a9.PNG HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1085391\r\nlast-modified: Thu, 25 Dec 2025 13:24:21 GMT\r\netag: \"694d3b05-108fcf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1085391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1279 x 853, 8-bit/color RGBA, non-interlaced","md5":"fd9a99726348a3bb2581f0056c107508","sha1":"f6f00aab897b6d29ca06bdc2c2a8024df8eb8ec9","sha256":"e943863540e03c507c6aaf3871959c5bb31de310266245d199503b5fd021de78","sha512":"182a97b445f1e2303d321e48a31dd20a26711520c3f5c091218babd4cbfbd5e0c26f5b459740b8777f538a8929ecfdc9d651b304081eefa44b63e1fc74275e30","ssdeep":"24576:a9XsnglTij4WHzj5BHM7WTxy2kOxiolrZQVG0M:aqLcwzj5B2WTkDCQE","tlshash":"ad2523e326f197668d9adccb961874a5ef37288298c864725387d8f420fd1b702c2d77","first_seen":"2026-01-05T12:37:28.407558Z","last_seen":"2026-01-14T15:17:21.916524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/233/23351c2af5c5ee854724232dee784534.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/233/23351c2af5c5ee854724232dee784534.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2651027\r\nlast-modified: Mon, 29 Dec 2025 10:28:12 GMT\r\netag: \"695257bc-287393\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2651027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, manufacturer=HONOR, model=REA-NX9, GPS-Data], baseline, precision 8, 2709x4064, components 3","md5":"7126eecfa58746ed7bd82a7da3bf1520","sha1":"10ac9644407cd23b1b866f1bc3c9a1b1feac0fa3","sha256":"912405461bcb7586faf2ba476152959516fc2e4d582e182e21c9a655c48786aa","sha512":"be82745b25eafa7790624ef409a974b99db29a88196347e62ead49d270277d381334b8789114760ac4b08321186d0569856a03db1ef7454467cdec33c61aa7f3","ssdeep":"24576:CLuYR7scJwPSAJolF1U4qbQO/Ol+q6p5LkiveenXpvageA:CLuYlFwPSkoS4qbQu5Lvve8ggP","tlshash":"9525336096214358c97b8f351cf4e7db0aa6db30d299a46872bc4be44f6bc4e233d265","first_seen":"2026-01-05T12:37:28.276857Z","last_seen":"2026-01-14T15:17:21.918419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":537,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/st24.06.2014_2].jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/st24.06.2014_2].jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 102359\r\nlast-modified: Thu, 09 Apr 2020 14:07:18 GMT\r\netag: \"5e8f2c16-18fd7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=533, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=940], baseline, precision 8, 780x533, components 3","md5":"d95b061ee10742ad33b540babdc26304","sha1":"5cb4ac11aff39df0874abf05a563543622280517","sha256":"dc1ad3e057304708ea0c2cae79da58c64230b52c3cf1a6383eb63ee952f3bd5b","sha512":"bd1d392ab18657b7af6dce8372a76001a99168cf7d93b861912e3dc8028c17763d3ce12a5df163cc4a65e0adca9812b0fad4c9755ee12438dfa300d4cdfe16fb","ssdeep":"1536:E7yvWyveehqdDAxmpRzSDuCKzQZI2r/sDwjJv1338pk3hQf3Rgc4xV818OYZ8UhJ:OyvWyv+dE2uiNzQZIc/sMn2qB2pJw","tlshash":"89a30127a7ad5c17e9d48cb7b8b4d683a1261c2027e38b9ab84c6505fff5dc14a6c312","first_seen":"2026-01-05T12:37:28.335253Z","last_seen":"2026-01-14T15:17:21.920146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/js/main/core/core.js?1572603809497696","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/js/main/core/core.js?1572603809497696 HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Nov 2019 10:23:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5dbc07a1-79820\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":497696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fc4b0475beea759c6e58b7b7abd5f14d","sha1":"54383457e88578a63ea9ffde721c30de2832ec4c","sha256":"50b55f8100caea556d77799da287dfa11bae5313ca7e6c0af78f9adb3eca7c96","sha512":"28c0f30935a0b3eadb7185cdce41d8d9d5258bd5579ac4f6549e31e09e296f9112008572f174cbb999bd76b26fa0edcdb8a0dab3c59cb3d352ab4bc65ebdef73","ssdeep":"6144:DowAPsKASFTBiJfc6VMAkPzspRCuM7bhcMpZYky0zZ0OgTkpFOHmDTR2ve48WWfB:aBoGfkXbbY1","tlshash":"3db49589ffdd6056f626326d4f5f900db23c44335948cc90bc5cd6a47fa092982eaee9","first_seen":"2025-11-06T02:54:13.230128Z","last_seen":"2026-01-24T23:26:16.818306Z","times_seen":5,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/cache/js/s1/concept_kraken_s1/kernel_main/kernel_main_v1.js?1767012497148865","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/cache/js/s1/concept_kraken_s1/kernel_main/kernel_main_v1.js?1767012497148865 HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 12:48:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69527891-24581\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52210)","md5":"b76f1ef0781f32fe02d7510fe0325a5d","sha1":"7c84cd3d82ce8e2349fd8e0bd8c5c3e72239afd3","sha256":"d27bce3f822cc9104cf65c380b2ca05cbeea195cef69b4cae891ce8072389ef0","sha512":"193ece46bb17d44bac8dee98bb0ba7a088936991798121ef2ffbf33510d671380362d705d04d7fae69a229d5f29437954cdeb261d69ca5adcd0be04290d8ecc0","ssdeep":"3072:DSfUsMmm0MuAt3q9T7O9T3BoVxQtNZwg+EssH7H:CUsYp0T7O9YeNZCsH7H","tlshash":"c3e3e709b162313e93f6d179112b430972358518ea4a485cb978edf9acf8d0631bffb6","first_seen":"2026-01-05T12:37:28.38013Z","last_seen":"2026-01-14T15:17:21.922543Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/61b/400_280_2/61b72455dc4cd84d88da80d9c944ee52.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/61b/400_280_2/61b72455dc4cd84d88da80d9c944ee52.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 194060\r\nlast-modified: Tue, 30 Dec 2025 08:40:03 GMT\r\netag: \"69538fe3-2f60c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"ba52c4478811dcbe9c12bb6b7ac663ba","sha1":"21a2310b7cd51df8afd4afc37ade09a3afb466e5","sha256":"6fa620fa9a1afdbd25bb3bd9aa5bdfbc9dc4eb4cca3e254c8b3dbe14b465e216","sha512":"61ae26dbb5dcd6cff618d7e0ea91c7c483293abbbca8164b3312a21df076ee447bb1fe2a5771b4ea45ca52ee84314c26255b33845419d24893f53c55d8a8b2b9","ssdeep":"3072:LE5os8tGqt59g4Y6izjw9CIChTo24FAAkjaysYNH4852X24e2coS1l1WbP4+SbvN:oIGq59g3r5v02NAk7s84K2q7owlM74Vh","tlshash":"5114236dff6ec378b140a5b37b7630987d12b8af0bc1e7948e90f2f5566d0d84809626","first_seen":"2026-01-05T12:37:28.440219Z","last_seen":"2026-01-14T15:17:21.924217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/064/280_280_2/06429872adfd0ad77dfe84fd5f532d00.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/064/280_280_2/06429872adfd0ad77dfe84fd5f532d00.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 113639\r\nlast-modified: Mon, 29 Dec 2025 13:01:07 GMT\r\netag: \"69527b93-1bbe7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"44015232b82d98d3bfd164f61a3e6da9","sha1":"01a8aece4f71834f25a3666cbddb48eba297a48b","sha256":"a37434b378f21aa4281b6b823e8d360741fd98306fca3d8f75f44be4feab5dd0","sha512":"003529927919347a2de24195fe8c5492ae428752ab324bfeb7be8f989e2712188fe8997d459bfd9beba7ba5a547ad0a8eced0c43274f2991014ae830b8804e65","ssdeep":"3072:2LB7kFeR8nAvWFImQogGDobP1816N8t2HvSL:VFI8AvmYGD018y8tx","tlshash":"cfb312fa9785e13d9ec71f98330c7111afe9130fb72abc50562e7a81b76ea08184534a","first_seen":"2026-01-05T12:37:28.370178Z","last_seen":"2026-01-14T15:17:21.92581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/cf0/400_280_2/cf0cf01001da1376fa09dfe50f45fc7a.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/cf0/400_280_2/cf0cf01001da1376fa09dfe50f45fc7a.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 182495\r\nlast-modified: Tue, 30 Dec 2025 08:21:32 GMT\r\netag: \"69538b8c-2c8df\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"afc858be56acb3588b85fc6f61464a92","sha1":"df6e9dcf85fec31f3a873421224d74f87131481b","sha256":"3b7a295f630f3009534b73b61adef7d161bbd2160f78cc92a52b0b6324fb6ff4","sha512":"46cf48345bf1dd565260163d9e9e57e52f9065f1684341e3f9d862806bd9d024aaab8100bdb7c99005886ec989e91936148639942d24f25c15e296df1721ec9d","ssdeep":"3072:f3fMtdfTG3Fs1YvrYMCC90pypokPMFwIQ8hhMq8khnm/8TQuVIT3Y4QnVu7TXpfd:HMtNTGV1Eu90qJxQh+ktm/8pVI8V85fd","tlshash":"860422aa95bfa095f209ba1064be3767b5f0b8b1172d8c35c15f4c35902ceecee72191","first_seen":"2026-01-05T12:37:28.382376Z","last_seen":"2026-01-14T15:17:21.927454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/2cf/350_350_2/2cf2c17e4e5fe3a213ae07545442dfb7.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/2cf/350_350_2/2cf2c17e4e5fe3a213ae07545442dfb7.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 182476\r\nlast-modified: Fri, 06 Mar 2020 09:57:46 GMT\r\netag: \"5e621e9a-2c8cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"8247933a720a8f3f5616109c50bb91ed","sha1":"c1c8ea3bbd0cbaa6ca7ea43eb9b859717c22cb9f","sha256":"9fa3924ea9ce8c2b112a3bcd09a5b5e84e1e70e6590591cf72e2dcad8a082f56","sha512":"76194850e4eb2d88067b9039c59181b42f3fb3082f80fe2ff7ab0e936518bafc7cc3939656082494f5d3949db99a2e3bbd8cdc4c57716750048ac4f34b0f532c","ssdeep":"3072:6+w56TspRxmAbv034yAwxUd7Yme9m1WFHX3q73defyfFIMJcTJxNK5nxnLJGJbW:XTsXxm8v03aZ7TamSHo3sf6FtcTJxwlV","tlshash":"2b04221de4d004e285742ec3daf7099dfcc258da4abbf038bde6c690a7987374a5819d","first_seen":"2026-01-05T12:37:28.442024Z","last_seen":"2026-01-14T15:17:21.928999Z","times_seen":2,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/67d/400_280_2/67d5e0c98aa8e970602479c4ab97c409.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/67d/400_280_2/67d5e0c98aa8e970602479c4ab97c409.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77083\r\nlast-modified: Fri, 17 Apr 2020 10:48:32 GMT\r\netag: \"5e998980-12d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77083,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 400x280, components 3","md5":"9df1922aab77fa68b6ba404134ae2143","sha1":"5c530044a44ab68d872936c12b762f51c4a66321","sha256":"41016d9cf60c9a8af36a4463d0f044394f2799d896ca67a8f47d105a5d523c36","sha512":"8360b0d4bfdb0ca6bd9f8d934eaf0ef5ac49b47107f7a341c0e2f9924dde8c1d0397103a6efe71803c88c8934368d0eabc7ae96f6e2c2c4f1a9f3e52ea1ce2e3","ssdeep":"1536:pDL/9nMPp5fmVMCrpnUlZDUuqNmu2b9fWXgXS9HpWYz+ck1kGHERPS3Y:Z/9MPH9Ing0kv9fJS9piKGHERqY","tlshash":"c773127ef55101f0ad7cb6adbdad5027a781e908da49b584393e40785d8d4c3b1cf207","first_seen":"2026-01-05T12:37:28.3049Z","last_seen":"2026-01-14T15:17:21.930637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/profilaktika_bezopasnosti_31.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/profilaktika_bezopasnosti_31.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12779\r\nlast-modified: Thu, 09 Apr 2020 10:54:47 GMT\r\netag: \"5e8efef7-31eb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 400x300, components 3","md5":"4f13521ac3f200670005fe9e4a1d4a81","sha1":"f29aaab6a9993e81cc3124509fc14d442c6620f2","sha256":"fae8af9b06660931a67fbc2b92f440fd0ae263ef608c01e1b987b26421f6596f","sha512":"59c9931ae6d810074d3be9a94af9c72baf511adcb317f87f7c4a0ae506ce67fe59d5a754365797cb5f09d0ba25665ec28509a3f6763e75b28d4ff7155a4175e6","ssdeep":"384:3SHtCd86CmZKDPu9otGDjDb3ZjxqYWBZyDy8JK:3Zj9K4jDdRDW8JK","tlshash":"db426a13fc4a6da3f05ed7f5bb4589a42b8e8299f4523afe24220dc67b205230cac075","first_seen":"2026-01-05T12:37:28.288592Z","last_seen":"2026-01-14T15:17:21.93239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/61b/350_350_2/61b72455dc4cd84d88da80d9c944ee52.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/61b/350_350_2/61b72455dc4cd84d88da80d9c944ee52.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 195695\r\nlast-modified: Tue, 30 Dec 2025 08:40:03 GMT\r\netag: \"69538fe3-2fc6f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"0e6eddd7331f8346463ef1655410b3ec","sha1":"dc72655fb409daba1b1aba1583b17b6db4ab3e8e","sha256":"6bfbd5ac44e8fc0eca5d465bb07292de08288c24797ec7b50ac0a1221614c884","sha512":"5afca5412b162abd99538be5a948e20c6ebc117756852b846a6b477f73a284559807850defe551e54b50295e290773137ee4ed5f34eda36724a12edd0a89c6c2","ssdeep":"3072:sdCp6uHQRCknaHK+MaZtaU7hBq/P1klBy738EMAqvQdeH+13dwxh:sdCp6uHQIkOeaH7CU7eqIPt4","tlshash":"9c1423e9c84b2e8795e52332c2e1c993067307e17567cdd95f40ac4b620c3e1f76ab69","first_seen":"2026-01-05T12:37:28.274753Z","last_seen":"2026-01-14T15:17:21.933916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/064/400_280_2/06429872adfd0ad77dfe84fd5f532d00.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/064/400_280_2/06429872adfd0ad77dfe84fd5f532d00.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 163854\r\nlast-modified: Mon, 29 Dec 2025 13:01:08 GMT\r\netag: \"69527b94-2800e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"c6b95b0127a9a8446faa52cf8d87906f","sha1":"74814e5a842c743a8eb318f3f826953207267543","sha256":"a4382292e61dcf386aff66ca2e3b010acb8ac916cc70707292c26873e2a2a9c3","sha512":"71883740c345e0d1f80bb76743eb67b957899873752b4b08aab5233bbf1dc2523ef84223eb62c0943cb2e795bdab77009edd13865f9dcdbe9bea44d3957c44c9","ssdeep":"3072:UROgYPbUNXNsnwrHVhXC55jEeIcn7P0DJ+Akd3hzxQFv8BH24GJCMgh0s3Bnaq6k:GzYDUNXZK5Z7P2Xkzlo3gueBaFk","tlshash":"4cf312764127dca4c82dea2f5786d833f7d4cb980bdc1c98467bdcd62a86e922742f40","first_seen":"2026-01-05T12:37:28.269321Z","last_seen":"2026-01-14T15:17:21.935265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/fb0/400_280_2/fb079159b930748cbf831625fc4ea921.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/fb0/400_280_2/fb079159b930748cbf831625fc4ea921.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 186805\r\nlast-modified: Tue, 30 Dec 2025 07:36:16 GMT\r\netag: \"695380f0-2d9b5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"e775c86d8c649622466eee89854da7db","sha1":"e9370fcf9e0055899a9aa292c6639e300d15115a","sha256":"43a5e65fa4ba35b1255a0d9c8fef2f1dd308a7904d398821804915f1e55dd4a1","sha512":"e9d12653fc54638c6df31fb18fefe1737ff7e91afa625bb3c5fb206a41d5e4307e54e400ab589d6a49d892237c0ebf72fb8d660d2f6ff580d99d7b501aef7c98","ssdeep":"3072:/2g1wbsp0BKEN3PFmejpLRM/h7iAYQUvWmVpPW2veHZMec/mhZN:/2g1zp0BPtHjxyRiDvWmvW2KZMexB","tlshash":"ec041360c2f371df3014e57ea6de89346942ff6c4615e603b908a968a88e64dcc53bf7","first_seen":"2026-01-05T12:37:28.460613Z","last_seen":"2026-01-14T15:17:21.936615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/2cf/280_280_2/2cf2c17e4e5fe3a213ae07545442dfb7.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/2cf/280_280_2/2cf2c17e4e5fe3a213ae07545442dfb7.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 121068\r\nlast-modified: Fri, 06 Mar 2020 09:57:45 GMT\r\netag: \"5e621e99-1d8ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"8be0f63924e362e197b7ac23a89abebb","sha1":"ff24a109c1df8fd64ba9ceada6ce2482281f6e53","sha256":"3adb02b00c2491b16b3cb7af81d51d92c83830be772f2899af3e998a5da952ab","sha512":"d0377f6285f7b64fae0df95484eacda81d856ed715318a32edf4bef2f873295fbbd9d07c2e3db7e8e29ace4ad0b1b18872157f7ee9f54e08e9b9b08497d1d129","ssdeep":"3072:G10iicG86IPmG0ZwLrbq0vrtRRFnvWprRdsgbYTG2:G1DiF8WW7R7no1P2","tlshash":"70c312d7a0673daef92269425c9c7baa8e237cde0318710d10b5478ab2d78dbd127f44","first_seen":"2026-01-05T12:37:28.302565Z","last_seen":"2026-01-14T15:17:21.93792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/3aa/350_350_2/3aa7abb300e9de589804920ef98c3ced.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/3aa/350_350_2/3aa7abb300e9de589804920ef98c3ced.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 221477\r\nlast-modified: Fri, 06 Mar 2020 10:11:38 GMT\r\netag: \"5e6221da-36125\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221477,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"f243d20331144f879a7e1a8059f693b9","sha1":"764ae5994a51226b70b324e72601563627a1bf2b","sha256":"f7870fe6bea64e01875a853306aea579ca52bf9c7aca2807810046c36f7b636a","sha512":"be8263b2a1c5a1a12b42e1d1cfe66ea2d2a3fb8b9590c314d2cc4a15800dfd5cfe89ba4138dd74052e9fd9522b7605d7de8ee8fd57d2da908f5d10107f5f0e4c","ssdeep":"3072:F3ikw5tcPIgVCXYrJCwdeoyiAliyf8DoMlIDC+gmuqPZyrJna2v0Lku0f+T0WEcA:lw5eSXICYltJ/vl4C+9UJrqo+gW7ski9","tlshash":"e3242244030d3c30e1f90b9a9bf573589afb70a37600e939bdf984999d31242d62e97b","first_seen":"2026-01-05T12:37:28.448978Z","last_seen":"2026-01-14T15:17:21.939375Z","times_seen":2,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/e72/350_350_2/e7272b2c7230515407f17ce0977bbe2e.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/e72/350_350_2/e7272b2c7230515407f17ce0977bbe2e.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61419\r\nlast-modified: Fri, 17 Apr 2020 10:51:47 GMT\r\netag: \"5e998a43-efeb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61419,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 350x350, components 3","md5":"ddb1ed36bda70da77da3100d137a4d2a","sha1":"bce044490b5e08644291aa019ad43396f2c77885","sha256":"472bf5a26878ea729b9928bc151747edcdb62d3ed7095a5ffcf349381e23ad62","sha512":"cc86bd0f2da4e50331aed89487af10abae65924aee66fa75d97160162c648908d09d2bc81fdfdf0223c5bb47869dfd400039c6884adb7147a2c4351b22e76168","ssdeep":"1536:tFTemixCTHzKKHs/oj5Sf8kHDRputn+Qczi:TC+TWKHs/w5STjw+ji","tlshash":"fb530292d14417b737ab3bb1af9a210864373ca4f60257d32b3c997243c9cdb0566b6b","first_seen":"2026-01-05T12:37:28.435623Z","last_seen":"2026-01-14T15:17:21.940788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/big-close-menu.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/big-close-menu.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1617\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-651\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"2264292c2d29e5f4b131c223d0c40d6f","sha1":"aaef1ed1fb838b4351d208e02d3382f8f5d42d36","sha256":"d79f1084171b2bf4fea36bcb7fe758019e9dc236e298ff092cb52f6cfe68c33d","sha512":"4a2f38f8ec6cd96a3e0ae90fa9d68d206e6199f668f45e317c9dfac84b05a167a55524ba2be3318dafc61fe48165eb19b81cd261a113e5b5955b7c47daefb72e","ssdeep":"","tlshash":"4a31c869eb933d00fe44e4c714e7842779164a8454fbe9f26dcacc1b68640f64c686cf","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-07-01T18:15:19.952037Z","times_seen":11,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806 HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Dec 2025 12:44:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695277b0-c4bae\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":805806,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65283)","md5":"e925564b2f8ccd707a30ecf184d2caaf","sha1":"c2cb9dce98a01118ef1134be0cb985403058eaf3","sha256":"a34e63d978e9b41c99ebc8dfdce022f81d01ad1812e13e25aaaef9b4a57d18f9","sha512":"b0533ca9b2284d1d58b916c559b24da032ccebff831cc812b41ab95d17225c4356034706270ba15c68c1a2bf01b55252f7c1e60c72448da45ac200fdae74a01f","ssdeep":"24576:YYS2CZGwO1CA5kiDb3CyQ5xrQe/0STjxYRb+ONgzn33RJhV:MGRaONS3RJhV","tlshash":"6a059370812421e5b367c217ebc5bb963236f012ed176d7df25b2a0c8ac6b8712d2b5d","first_seen":"2026-01-05T12:37:28.437157Z","last_seen":"2026-01-14T15:17:21.942781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/cache/js/s1/concept_kraken_s1/template_626b56a2766ed0c5e6c3f5c0ccce211a/template_626b56a2766ed0c5e6c3f5c0ccce211a_v1.js?1767012272401959","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/cache/js/s1/concept_kraken_s1/template_626b56a2766ed0c5e6c3f5c0ccce211a/template_626b56a2766ed0c5e6c3f5c0ccce211a_v1.js?1767012272401959 HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 12:44:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695277b0-62227\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":401959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32029)","md5":"69dab9ddeb82b1614534b18ab6156522","sha1":"1df4b701f12c02df7020f68fb94eb790946d3392","sha256":"2b7a1aad03a3a0017d14c1fff09f39ad559f1a028309e9992703659fdd13b31c","sha512":"44cdb2f5b168d371abbb37c8e0feb98cf57a743376dabdd869a043ddd5d256360d6eba488b45b362ea9ac2fcb4d55727d9b2e99433a2ccbfc832362f27af57ce","ssdeep":"6144:3RzEOA2+zNa98Hrc9OAK4WeBnrlGI2R7H+e4yMibroAXJATbFOQWY:OO9+zETWY","tlshash":"f8843b4db1a0326242fb31b951ef410a7336957ba4048868b4adc5e47fb4c5962fbfbc","first_seen":"2026-01-05T12:37:28.332799Z","last_seen":"2026-01-14T15:17:21.944274Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/ab1/ab12e1274ec985f5e516204334e4cbf7.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/ab1/ab12e1274ec985f5e516204334e4cbf7.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 6534\r\nlast-modified: Fri, 06 Mar 2020 11:56:06 GMT\r\netag: \"5e623a56-1986\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"050607e465a8378dd71e38511b7afdd2","sha1":"97e35285104683c7a38fec8c1ee7203383a55b80","sha256":"13913a0511667dde0af844ecf6a195444e876f3f00f921198ca30d1106c86d95","sha512":"fe75cd74b15723fb74c182b346cf1afedb8cf128e673aae0983d19e0bb3371094b16031779b3d23be6eacf2c78cb7bfa7e56ce341f7daa1dd1d8f2954065776e","ssdeep":"96:ISDZ/I09Da01l+gmkyTt6Hk8nTAKrhkkKVhGRSuOu2jJVND1XMPaA9zzoGcTKgZ7:ISDS0tKg9E05TB/KVdu8Pt1cCUoPR","tlshash":"08d18e8a8632b0c93a997ea21ed9094be77058bcd187217818c297f9240bd1787cb961","first_seen":"2026-01-05T12:37:28.468624Z","last_seen":"2026-01-14T15:17:21.94556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/ic_mail.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/ic_mail.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1119\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-45f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 11, 8-bit/color RGBA, non-interlaced","md5":"00023a903f6a4c0769f6a0f7a9c120b7","sha1":"d147819f8bfcc22b30348c516a24295b803694eb","sha256":"40359d9a6766db39e9e3184458286d0bb374899b7f523e8fb3dc025191f45ff8","sha512":"9cab9549075057a97096a15eede45614dd5d0689968f157c8eff41af7e2ef5894eea86cdc0a6d8dc53fcc292247e525eeb6e15ee22c7f68f3d90bbd491dd58f3","ssdeep":"","tlshash":"23218616da947a41614df28128f280739ab3188098e9f565eecfcc3e5f700fa99dd6c7","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-06-19T07:27:58.55554Z","times_seen":20,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/acb/acbc0446f410e5dfe80007a227635025.PNG","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/acb/acbc0446f410e5dfe80007a227635025.PNG HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 951153\r\nlast-modified: Wed, 24 Dec 2025 09:12:30 GMT\r\netag: \"694bae7e-e8371\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":951153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1191 x 672, 8-bit/color RGBA, non-interlaced","md5":"3e52da6e79fbbee2b5ae7c943d8ece0c","sha1":"451ff71632d40183743b2cb0ccca318f53731e4e","sha256":"02ba7fbdefb90690944e612cc58c949ac48030c7d0fa823b51526a79ad9c0178","sha512":"341be0d0862cf549f2a5b0a2c6eb65d015b5b4d93d62cb970fc852889021e586cb3fc321872e0fbb8da5f1b1279fc69dd29a97c2995a6a6f851f1fca450f7946","ssdeep":"24576:3Rl0tqJjxg6mOW0/6gKyVK/FJJBoD9Vrible1wBkuCa:3RlDqlOWTgZgFPBobO4CRv","tlshash":"331533e1d9045e897f622b71e6fa5904cc60aef03aa3f67f752afc4e31441db881065b","first_seen":"2026-01-05T12:37:28.467279Z","last_seen":"2026-01-14T15:17:21.947424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/css/fonts/fontawesome/fontawesome-webfont.woff2?v=4.7.0","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/css/fonts/fontawesome/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 77160\r\nvary: Accept-Encoding\r\nserver: Apache/2\r\nlast-modified: Tue, 09 Jun 2020 07:06:30 GMT\r\netag: \"3a420fa-12d68-5a7a15ddea980\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 11534.4","md5":"8be1c8f32747c80cb7774b29ec81beef","sha1":"0240c2c024ff55c02a213159bc8937007babed30","sha256":"26611d99cced0a9dfbbc4f47818921a0ebe247d9d4eb2eccac697da36f89a0eb","sha512":"2bdfcbe54dd175b1cefec1d84b1839d7813b9a341fa3c7bbf1b311d98e2cff830f9d13e9e5302753e9eed2380b6d820857d658536c8555f5de01b63c4a351c2b","ssdeep":"3072:PWGmiOeFF7zjktPaEV2k07DURADtJXhlZePWJeyEKAuDSt:PWGmiOCQPK7DUevhHePye/4c","tlshash":"3db3f1068385f3e0d2fb89f994961ae4a3064b95dbc37990c724c3712dca21873efc96","first_seen":"2023-04-09T23:40:01Z","last_seen":"2026-08-05T23:37:17.638254Z","times_seen":2979,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/upp.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/upp.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 8644\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-21c4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"14db9406029c5af567bc79b5b8bb4fda","sha1":"bbae83dd10308878318032d369aa530ac5648704","sha256":"01fe81d2b6f125fc25a850cc875f510969979bb9b3997a4b9d4b5d37c2691235","sha512":"a051d58f8d2f6bec7faa27e6d74a4cd8a275dc870fd608ebd8d6c3f27c319a7f9726f5836901fa1ce4b9828b7d1d070ac47b1fbc0ed237facb6e0138267a5b69","ssdeep":"192:whGGCTIHlxOwsgk47O1Y38bIjBf73El4eKtwUPICF2ej:wScFLjdHMkjd73Rerm4a","tlshash":"8302c1fdeb8459bfa54006d407138a83d8fb03b5a85db8c00bf174211f2d62bdb6018e","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-07-17T08:01:12.500833Z","times_seen":67,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/kraken/b91/500_90_1/b91a31f72bdbda0bae4ce8acb6f89ab9.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/kraken/b91/500_90_1/b91a31f72bdbda0bae4ce8acb6f89ab9.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 8113\r\nlast-modified: Mon, 13 Apr 2020 08:53:17 GMT\r\netag: \"5e94287d-1fb1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 90, 8-bit/color RGBA, non-interlaced","md5":"206faf35f3c50402b707667a4753ad70","sha1":"eb32018c4264f0c193675b74cf80ee64faa52d3b","sha256":"c8c3780e711868d01afb8bcc01724f9cb3d791d659978fe65684c0bef4dd948f","sha512":"0aeb9084825c810e190f0c720b848448f8b979044d7f077872518f0b0725e384bb0957e92fa642b9f146542affe16f1838caa36948bb3ae2eb824737733a6c2e","ssdeep":"192:gmpSmGhk/MrhgoETWUxguz8VHzHUO4b1xxd86uK+6:ggEuzz8VHUOKxd816","tlshash":"5ff1bf8c2c44508f6c64dd2ca44c0e7a7b0b929a5167af7d22de1044bee1878df2c07b","first_seen":"2026-01-05T12:37:28.308597Z","last_seen":"2026-01-14T15:17:21.95003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/cf0/350_350_2/cf0cf01001da1376fa09dfe50f45fc7a.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/cf0/350_350_2/cf0cf01001da1376fa09dfe50f45fc7a.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 186046\r\nlast-modified: Tue, 30 Dec 2025 08:21:33 GMT\r\netag: \"69538b8d-2d6be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"8996aec22f65fa08356a0878c8676f03","sha1":"f3e2ea745035f3b592ba97ee8c92701d79336bea","sha256":"6ec3e31433d3f64f3f86c966ac44df96041c0f1900ba8e4c4fcead5a52e11dbb","sha512":"7950c8df206f1b8f7575bf4a60c088009d4a15c2370379ff24f3c78599bb74c51d320124c0d998312734c58b85c435e51d4937d28a652d938edcff68e38afbce","ssdeep":"3072:cS9iU36u7ii1qZHQtrBT23G/jVgSzL6pXsn7f7+3yGpSs4PsAWBk0v7nUsrDYtSq:T91q5YXL6pXSrCyOqWi0vDUKXno","tlshash":"54041292716e64694062f40813c61ef84cb4bf89c929fc69f014d1de5d6a2e7faa09f8","first_seen":"2026-01-05T12:37:28.280976Z","last_seen":"2026-01-14T15:17:21.951386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/3aa/400_280_2/3aa7abb300e9de589804920ef98c3ced.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/3aa/400_280_2/3aa7abb300e9de589804920ef98c3ced.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 195642\r\nlast-modified: Fri, 06 Mar 2020 10:11:38 GMT\r\netag: \"5e6221da-2fc3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"670b532652f1e15fdace6fed6be670a0","sha1":"f2c42a322364c64f606e8a9e716efad73400b749","sha256":"63011404dc63669d6ffd24761d9e171fa58f66c1858349514b760211add58cda","sha512":"10ca855a64932cf91b340dde55804bed4fe12cc59f9fbd527e73407893b6ed404aeac038bee1778da1971cc00ba38531792e9e84a5b74c3a2ee4ceb6383f7250","ssdeep":"3072:NkgWyx8j35Uz5qSu9eE4Wuqs3b/2L7RkCAGAFT+OK9pwHmAaIdgz7g19cEgVagRG:Nl8DG8SQ3uqsr/2L7tGd+D9Pbj3gM1aZ","tlshash":"6d1412c35a4ee81fc423dfc2de874e64dd2790d22ea797a5ea5ce0095acc7e23191521","first_seen":"2026-01-05T12:37:28.408996Z","last_seen":"2026-01-14T15:17:21.952803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/514/580_280_2/514dd0ae9bef31809f5a2f496cc59a8e.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/514/580_280_2/514dd0ae9bef31809f5a2f496cc59a8e.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 214994\r\nlast-modified: Fri, 06 Mar 2020 10:35:55 GMT\r\netag: \"5e62278b-347d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 280, 8-bit/color RGBA, non-interlaced","md5":"fd98d50b1bc88ca25c8f3ec4d14ac9ea","sha1":"6ab711d5f4392f8c60c7a2abd819467afc955ec0","sha256":"7337fd568fec0182a49c9ee551f1516ea9b42b57ef3b690cb2e34f7686703656","sha512":"bea21a556760b5fc36f38caf3cbbc8a922b5f3cad354ac89148e9e2691764812d91bdbbe0eb413b0a03a5d6a22416fcb9d02ebdac7d1fbcc27b04612dff574fc","ssdeep":"6144:+kvsxXq634/dO1us0/poD2wNQqdfuT9zv:+T34Susmo6LqgT9zv","tlshash":"f92412c2787524f9bcd2e231afa5f4a98dd177e8d2fe932e392439e8550e920b4d05c4","first_seen":"2026-01-05T12:37:28.385313Z","last_seen":"2026-01-14T15:17:21.954117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/514/514dd0ae9bef31809f5a2f496cc59a8e.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/514/514dd0ae9bef31809f5a2f496cc59a8e.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 117666\r\nlast-modified: Fri, 06 Mar 2020 10:35:53 GMT\r\netag: \"5e622789-1cba2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 252 x 323, 8-bit/color RGB, non-interlaced","md5":"0fc1b553fd1a8a54e20d8fcdc2db5d7c","sha1":"513630eb2db9fede8bdb173834a26ccdf4a9dffd","sha256":"c918ee5277616d3bbfb5811d1209130f8b312f70326cfcd7890112966a15b934","sha512":"36b8a07a40bee786d4719f2db1c11a5e8a5f072b983aa77140c2e4123135087989b1e304be748c9152a3b134963ba67aee2fdd79b2e8bdf2d3200146060b2b1e","ssdeep":"3072:Vd6/sHwRcVCTmdNfawVy+n9rXZGvsXpIpxZUNRo:Vo/GwRMjaUdGvy8","tlshash":"6db312fb4f302e4e3da52f80363272593fab363b94e7951c64c959e22f46d729089492","first_seen":"2026-01-05T12:37:28.286392Z","last_seen":"2026-01-14T15:17:21.955327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/menocom_logo_white1.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/menocom_logo_white1.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 7110\r\nlast-modified: Fri, 06 Mar 2020 13:16:20 GMT\r\netag: \"5e624d24-1bc6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 60, 8-bit/color RGBA, non-interlaced","md5":"f1c8c96a7a5b562ac1b01152a156a27f","sha1":"dcc00bdd396f77a9d3d6d992ac482a9427958a58","sha256":"c9501512ba8ec62d44f1dfba0545caaafd2e69dcb90c5e50178731e12abbea5e","sha512":"41f6136ee533373af41ac7a8e8145635b54b6593acaa3e56f7586d97496c117332019436cee2bc77211f0d897b5df1cb38f4dea1ca68702228e5ba740cadbf10","ssdeep":"192:yS0tKg9E05TCFCUB1t3Jz/JBhj1KhRbLz:mXE052CUR5NBTKH","tlshash":"72e1bf098530641fe8ed3d100e0a1965a77c782c3f2226799ade34df04b3d86eb6607c","first_seen":"2025-11-06T07:51:50.263415Z","last_seen":"2026-01-14T15:17:21.956613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/css/fonts/fonts/SegoeUI/SegoeUILight/SegoeUILight.woff","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/css/fonts/fonts/SegoeUI/SegoeUILight/SegoeUILight.woff HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 174536\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-2a9c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174536,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 174536, version 5.0","md5":"2c46fb947181ebc3cc3a72cb41084dfa","sha1":"993b5bd44967093ed9dadbe57069ecbac3c3704c","sha256":"29499abec2da7ce2cf64b8da2712cf4287d4ae8f388fbb0dbdd33b6d905f12a9","sha512":"2526e3cd0dd8d82a423cebf6d7b5b8e7661605676b41db70854918b3e9504e87e00aae23272b8a3a71ec0a48f4de4ec34d03111312d0f0fa1cb3b6ebacec278f","ssdeep":"3072:KPHpSKFEewlqfxu/gDspVEGO6Lp0ooWttJB7IvpGfpBWhg3H6ztVcx:QpxNp6gDspVEGO663Vv0fph32t4","tlshash":"f60412eb53f61aee6320b16ef8e5e708225da72b0603d42627f56143d2521a437dc87b","first_seen":"2023-07-20T09:15:06Z","last_seen":"2026-07-12T08:43:25.406958Z","times_seen":47,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/kraken/eca/180_180_2/ecab99102df3d65d0a4bacf693ea86bf.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/kraken/eca/180_180_2/ecab99102df3d65d0a4bacf693ea86bf.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 26525\r\nlast-modified: Thu, 09 Apr 2020 13:23:39 GMT\r\netag: \"5e8f21db-679d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"00cc32b80e9e34d491ecd250cc81d22b","sha1":"851faf76645d4546f6c14a72fd25bb8148b85d5f","sha256":"25343ee4b1601b24231e1847a607aaf5143e190a880610b6bf98f80c1a9340de","sha512":"73a433b0241b1a72ff6e287e98dfbd94405ef9ef7c59ed4fef3fd85e913b1f8f0bf6edb8860ea8e9a5aef2fd2ed6eed5f2db53a69c12014acc6fb9bdbf002119","ssdeep":"768:cUA4sFaoBn1i+SaQVzAe/M2oQoNzjUl0Jzb8qP:jAbaO1i+SaQhAEj0tPP","tlshash":"15c2f241dbf7ce25b33f02137249719d436a376282f42a8253156af9e42ae388a13797","first_seen":"2026-01-05T12:37:28.459664Z","last_seen":"2026-01-14T15:17:21.957857Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/cache/js/s1/concept_kraken_s1/default_922bb7eacd1f0f9ae69d64eccb736442/default_922bb7eacd1f0f9ae69d64eccb736442_v1.js?17670122727136","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/cache/js/s1/concept_kraken_s1/default_922bb7eacd1f0f9ae69d64eccb736442/default_922bb7eacd1f0f9ae69d64eccb736442_v1.js?17670122727136 HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Dec 2025 12:44:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695277b0-1be0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7136,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6827)","md5":"7d2cc74a71ba65de914c5cfe9441b225","sha1":"b65f6e45927c85e24086027f68a53aa2783b1a6a","sha256":"7423bce100833ef167251b81efad651d31d60122fdb466ce0d5762884a0856e4","sha512":"e8b067e78b770ba19f850d2b345b1005c2b3dc7838329be3637c79782091e567b39ef27a213efaf37943e70147ed125c1cd3827b4fc6e127e6b9e24abb9c54e9","ssdeep":"96:3RGwwRvm+vHILJhikbmBtsf9yeE7ya0oTg5LF28kKxepVfuWWrebDdQJuAvbre:3RGdpIJskbmByf9ZEFfuw7HfutKDKTre","tlshash":"d4e10c983643b072a2ee56bbb2af834672315014740f5415a269dc90bc7cef7e35be9c","first_seen":"2026-01-05T12:37:28.439235Z","last_seen":"2026-01-14T15:17:21.95905Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/61b/580_280_2/61b72455dc4cd84d88da80d9c944ee52.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/61b/580_280_2/61b72455dc4cd84d88da80d9c944ee52.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 279379\r\nlast-modified: Tue, 30 Dec 2025 08:40:03 GMT\r\netag: \"69538fe3-44353\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":279379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 280, 8-bit/color RGBA, non-interlaced","md5":"4425a8bcf5b4aed46b68ab6eb17ca37d","sha1":"212e7e42837dea77cbd4379bda95c051869648c4","sha256":"7ce015b0a552a40fdf8690dcfb6fc7496a42ca4e244fa74a8005c0098f18bb35","sha512":"3855b1e5a492d85f00dec9a24a1e73b5e40c7825449c120f6a0e45471cec7b6b1ddc3b7704a807dc03268c3d777166e392265e5d77239e79a3a8b3957db4a55c","ssdeep":"6144:ZOxrmZY2nTYD0iYcIhn94e4Lfbfd4e7ho8/XEIzOq8ucMkWPjEkqh:ZsrshqIhnef/fdwmrzOqQIqh","tlshash":"3a54232d892fcb2fa3592212773884e509d7fddb17413a2b29f6cde62c3fd841969604","first_seen":"2026-01-05T12:37:28.410511Z","last_seen":"2026-01-14T15:17:21.960513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/064/350_350_2/06429872adfd0ad77dfe84fd5f532d00.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/064/350_350_2/06429872adfd0ad77dfe84fd5f532d00.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 169837\r\nlast-modified: Mon, 29 Dec 2025 13:01:08 GMT\r\netag: \"69527b94-2976d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"d5f30fe7dbac98ef82dded6bf7bb3270","sha1":"89297c3a0c7051fafa2295e61bd70e1dba67511a","sha256":"9108170c9061dc8d691836daf2f3a6a1536bc53f1db338e61c5709a2ab5e8e46","sha512":"8dee67f194851f8616ff800d2d4258cc0886e184cac779f58a54bbf117a534c079d06bee1f5bde1176f418353cec3b2b1be6d704ea740b640c7a796848751a17","ssdeep":"3072:0xkGYwrnzlzSFY8ecgPoFN5RI3FKbGcQdPdJM/gp4beS3y4P4g:0KGZtSReNPoj5RJdFYA","tlshash":"4cf313dc898c54d4199e86f40847379a4cf07650dd37ca032c369ae8ceb9eb6ca35d4e","first_seen":"2026-01-05T12:37:28.307109Z","last_seen":"2026-01-14T15:17:21.962075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/fb0/350_350_2/fb079159b930748cbf831625fc4ea921.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/fb0/350_350_2/fb079159b930748cbf831625fc4ea921.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 196613\r\nlast-modified: Tue, 30 Dec 2025 07:36:16 GMT\r\netag: \"695380f0-30005\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"a54d18fe5c86c14df7552d571c91fef5","sha1":"5c890bd05056e7e81a44354347fc37551ba326a9","sha256":"cc95f8d4b09bc75b9684923c556e020971f995642337fb65f388f4dbb973d8dd","sha512":"0fe07ebca441a0b9bffc83283b8432990ef55b4a42500dee8bf5cd9f9a711eff047a9dad0a7aa576a91d6739a77869d6f7d4c5e83db429c8864f809ee9dd7381","ssdeep":"3072:SuiziVhumN38vRF7OzwQpmN9ra/TCKl3/+tGhHj39nJSPOTB1ECC5vJ14ZLlZQIx:P7umCJh7QpsgTComirQioCZ5CI0/da1","tlshash":"9c1412dc504b7aa3c11dab3cf177acce91e3ac48aae818431c67dc44a76c5bc56c495e","first_seen":"2026-01-05T12:37:28.473827Z","last_seen":"2026-01-14T15:17:21.963339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/cf0/280_280_2/cf0cf01001da1376fa09dfe50f45fc7a.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/cf0/280_280_2/cf0cf01001da1376fa09dfe50f45fc7a.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 127320\r\nlast-modified: Tue, 30 Dec 2025 08:21:32 GMT\r\netag: \"69538b8c-1f158\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"54fe12979cb6d33de2a42772aa169d89","sha1":"3e0bb6ef75ad3bc1022747f3aa4b09df60452282","sha256":"5eea89ff58d4a06d78a50827d8cb2c70823a5e86e248aa5904c998693544597f","sha512":"6786a93d6bcc1756ce4710fd0ab9af4d57399b115e82aeed9f2e1ba5dc5269371d6f19f57e3c6a32c243f87d7befc17f0e99553e9273a3213f3d987da4dca519","ssdeep":"3072:IsKpT9b5Bvs9/lQ5lr8KNQubwRNImIN+f76TVxRR:gpTNzv+ev2ubKlWlZt","tlshash":"e7c3125fdab454337e336eba4a2f9d31b9057c0f47cc016621167bc9a68284ab640ff9","first_seen":"2026-01-05T12:37:28.372705Z","last_seen":"2026-01-14T15:17:21.964872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/ic_phone.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/ic_phone.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1187\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-4a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced","md5":"ea9449c7a63a0f582b513cbce88e098e","sha1":"6ee62eed2e94497935be30ec14a2902bd599ac80","sha256":"3383104564808e3849555454d176916fa19b5c8c7f9954059832ca246e5acd8f","sha512":"8282c5d90f8aecd3958683bc8cda456c73da3e331df42ac760eeeed2a6432d940fcdf07e1d8318d8fd35aae49c072fb351cc35f6e1e61ebcc0c30b664454e5ce","ssdeep":"","tlshash":"ed2144c6fa5198c2d044c88214ef5233ac624840c5d5e174fdcde86a4ea81f9c5aa3c3","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-07-01T18:15:19.94627Z","times_seen":21,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/f6c/f6c27007d0e76e80a9eac7ed854d0d14.PNG","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/f6c/f6c27007d0e76e80a9eac7ed854d0d14.PNG HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 796405\r\nlast-modified: Thu, 25 Dec 2025 11:18:28 GMT\r\netag: \"694d1d84-c26f5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":796405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 978 x 652, 8-bit/color RGBA, non-interlaced","md5":"9be01858a87b827c5fd37ea0c24352d0","sha1":"2f02f7eb84ca9e56842ad1c15c6dfbc102e92c96","sha256":"40a095b8a803349afe38261edbd09fd3cc339815f827d4a4786d28b6446393a8","sha512":"d38144d67208a385c2ad9e48a5203e284ee5f2a357cd961486cec5e0fe6b3e3daa6bf898ddaa10d055c171cfdab2aaa2829d46095727b6636de448c0ed4cfb70","ssdeep":"12288:CDxWemkF7nMWadyMv+VIErcDWWtv6WOBeAFTKrA3n6sZ6MVj/NTloZR:Cw4Szdhc6DWWVbadO26sQMVgz","tlshash":"fc0523640ace4791e0e9c4e097a9d2539fbe6b85010ec4f51ed2796685b637023cfae3","first_seen":"2026-01-05T12:37:28.378193Z","last_seen":"2026-01-14T15:17:21.96679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/699/350_350_2/699cb1b5090af1001f3f7cd0ebc5bff2.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/699/350_350_2/699cb1b5090af1001f3f7cd0ebc5bff2.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 209953\r\nlast-modified: Tue, 30 Dec 2025 05:24:37 GMT\r\netag: \"69536215-33421\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"b152ecd9a4ecba43529c229d8f68545c","sha1":"d15a2b5d9d41abfd082de802d78668543abdbe42","sha256":"8216f7ee4085438db81d69ae092fa8c2fc254a16b09b5923ef4739fc46acd9ba","sha512":"1b1e99130e96c3e4e2239b1ec8dbf73b5ae198c7b1a652d8f288d107b3162ea37588d3494100a3bba9cc7cd081de67748bae76b986e66c86775929783cead5e4","ssdeep":"3072:gbXm+zAMLv+ID9awNpe0lwl5BiYZ26RhwFJMtv9EqBiU4UfYLz1kEhL3mtlJEz5L:ga+zSR0i5gYjyzW9Eo0LRhLWtlQh25IR","tlshash":"4f2422eccd30ace4fc6aa5a0105259dee471617a97428bca253c51dac47e46ccab1fcf","first_seen":"2026-01-05T12:37:28.411623Z","last_seen":"2026-01-14T15:17:21.968112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/fb0/280_280_2/fb079159b930748cbf831625fc4ea921.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/fb0/280_280_2/fb079159b930748cbf831625fc4ea921.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 133988\r\nlast-modified: Tue, 30 Dec 2025 07:36:16 GMT\r\netag: \"695380f0-20b64\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133988,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"c23e70a1e8ecfbb7c0c3a48c914ab906","sha1":"e66f5080678e3527cfc645a2c103215b044c1fe0","sha256":"fb3e519d6c6890b079654d38f6b67e569f86a559dec20deef4c6bae4e48b9510","sha512":"773cb6453e112cbda2291efc2872862ed18e0791f77aa11752169c67fc889a4c8d2f3598525d43a71401e483c61ecb599988c91e34fea72a48d564d85b7311b4","ssdeep":"3072:NmIh1j4nkZG7ah2qoH67LIySeKMGvqOqRlAHcz2+CGMzPK0m:NFh1j4nWz2VHkfSexGSOqnAHcz2pm","tlshash":"fbd313072aeb8b5700006d33553d73a37a7589b8d12b760edc78ecc4b6b5db5688d2c2","first_seen":"2026-01-05T12:37:28.298426Z","last_seen":"2026-01-14T15:17:21.96937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/115/280_280_2/1153dbc0e0586440c46614b71d794690.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/115/280_280_2/1153dbc0e0586440c46614b71d794690.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 116091\r\nlast-modified: Tue, 30 Dec 2025 06:18:07 GMT\r\netag: \"69536e9f-1c57b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"e48387f6c54f20275b9e682ece8e5fce","sha1":"a44195dcc958bed1629a390c81806d00c2d3cbc5","sha256":"bda7c028c7c3c17bf3e94122f0bad55c4a862d85896461ef75e0c01552829595","sha512":"e116a9d01f8db5797a291f90e8a1f11101e7a36e1878a0bd5d6e92047aeec5b6d93b6deb7154c1a5befad426b7c303903b404cd0f1cd90b7d511fd8150460c3e","ssdeep":"3072:9letX8UKyM0OTD6o1mF7ljxk5sIpMEoBWTGYMBom1bqQYqymJ9bDl8:POsRJRDalisIpM5WTGYMukjYkDb58","tlshash":"dcb3120813c236a87547dfcdcb320ae593f936d13f60855b951d7cbb368a9a24214af3","first_seen":"2026-01-05T12:37:28.337508Z","last_seen":"2026-01-14T15:17:21.970703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/113/400_280_2/113b7c875e5efb9c77a33456d401ebe8.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/113/400_280_2/113b7c875e5efb9c77a33456d401ebe8.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 196902\r\nlast-modified: Mon, 29 Dec 2025 12:43:42 GMT\r\netag: \"6952777e-30126\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"cf23e7057df530eceef18c2bb5803094","sha1":"d0b71a3da8fb68922eea89b088c86b7b7a0d4ebc","sha256":"51be04cea044d5b0a7a42d7aa30522de43c43812c69d0536e85a5b64c6bbadea","sha512":"3d92231927c5d7ab61eef9a4b7d67359067ac2d03a8e6eaddcc1162ebebe71d7efbf156c95da9fc5ee9370bfd16103ce13740093d8d46cf8b6451286765c27f8","ssdeep":"6144:ICiR/IaJIAp/mBNO8i5wyr4C2RZvM7I8r+2Y:ICIgaLA3u4RXRiY","tlshash":"3a142297487dd92ab84df8316536d46ec0b7de0a042aa6dfeb7edbe4314c8e0c479910","first_seen":"2026-01-05T12:37:28.426582Z","last_seen":"2026-01-14T15:17:21.972139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":335,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/small-shadow.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/small-shadow.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2045\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-7fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 199, 8-bit/color RGBA, non-interlaced","md5":"1ca16b53302651b234cd2133eb47b61d","sha1":"1e82437048d9a6edc255cba5291651972b94b08b","sha256":"13615f23fc1747fcd1f2a83d528e3049ab222347478e060d170037ea5116d2e8","sha512":"ba2a7409907b5e3dea595a332e4312e5963edc5d35d26a747d59df0b4c6d8ae86a13671d03af96351c805f8de9eb591d59a68f364a117f91ad520b944bb131ec","ssdeep":"","tlshash":"4f411a0eed418980e348f9d538f1a46b496b0c40eaf0ef607dcbf06a19b92b95c485c7","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-06-16T14:14:12.037506Z","times_seen":29,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/91b/91b4ccfe2a2ea86c61dae7888083bdc2.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/91b/91b4ccfe2a2ea86c61dae7888083bdc2.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 168086\r\nlast-modified: Tue, 25 Nov 2025 10:43:02 GMT\r\netag: \"69258836-29096\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168086,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 1400x788, components 3","md5":"7b6f23cee09a4918b8f926bc3e6cf1d0","sha1":"a2b2b81e8c4ec63c90e46235a6fe1fd89f4a6758","sha256":"f29460e129d9a7a6d01d18b50974e99011d9862f836292c47b4a880e69e54112","sha512":"925f5cf4b8790ca6baa4e7196343e2f355cd5f66c0ce955a3ce4e67d3d31bc864032a7b3ab51e626b36bc4d39d4de4788d7772812fb14c9d535e3af43b1dd605","ssdeep":"3072:5w+pZhFXs+BUP3XTjMWpkjd5SrkkiMU1iGI1zqk66cKKtVtlzRV3KjzGiNncd37:3bht3WPj4WpedwrGMUiqNlzCjzGiNncJ","tlshash":"96f31313de3285ec9b4260a163b73e9f5293f80af898b3ec65b5e4185210f167d3f165","first_seen":"2026-01-05T12:37:28.296825Z","last_seen":"2026-01-14T15:17:21.973985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/css/fonts/fonts/SegoeUI/SegoeUIRegular/SegoeUIRegular.woff","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/css/fonts/fonts/SegoeUI/SegoeUIRegular/SegoeUIRegular.woff HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 281536\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-44bc0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":281536,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 281536, version 5.655","md5":"890e7212643c25ad929d75fdc18e293c","sha1":"99bdc6ac21964783732600a14508ddec72ac5f07","sha256":"ca237ccd4bfd5cbc632986f1cb82fb4e73717d8b82b003553ee97045af9a1cfa","sha512":"01e5735041343e181f4f96bf916e3690a92c7f4da79aa875f41c5e6ac82bc27d1ab34a28180453806bf58be83aedeb7840b3fbec1c61850e8844818caeca459d","ssdeep":"6144:GRXdgBWRB9DvHZ+yaTwVeSEOST9I5i2x4MTWH1TPkYnrmWtiixUV:GdgERB9rNwSEOSgSH5P/ZiixC","tlshash":"ed5412f1ec9d9375026ca13b72b222726dcbb1a10d1750a217eea27c9aff6097014d5f","first_seen":"2023-04-10T14:00:51Z","last_seen":"2026-07-12T08:43:25.40811Z","times_seen":109,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/115/400_280_2/1153dbc0e0586440c46614b71d794690.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/115/400_280_2/1153dbc0e0586440c46614b71d794690.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 183818\r\nlast-modified: Tue, 30 Dec 2025 06:18:07 GMT\r\netag: \"69536e9f-2ce0a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"56e77011dd9b1674c422d055f28a1d00","sha1":"400a768596f9884d08f6dac34571233621d392ef","sha256":"0f789cb1e70515ae30010cccbfaa4576b71146d16fe19e09bda8fb3e14468ad5","sha512":"c05e25031f165c23f956d7e8606143c6aedf0808ef9e7c3258aa45bb10d28bb62439c02884d21996bcb67b9418d1cb500626150683ca62342abe03646b38b500","ssdeep":"3072:kbGZIERUHqxYOV1wX77qIP12XxUjzEiAm2ybitVD7LBFrom24OzW5w:kbUIxKx5EpHjwXJybcXb2495w","tlshash":"3b0423cd410f962494da250e2dbfb8eccebb257c3d5b070b7976659f481a206be807c6","first_seen":"2026-01-05T12:37:28.448029Z","last_seen":"2026-01-14T15:17:21.975808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/e72/280_280_2/e7272b2c7230515407f17ce0977bbe2e.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/e72/280_280_2/e7272b2c7230515407f17ce0977bbe2e.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42433\r\nlast-modified: Fri, 17 Apr 2020 10:51:47 GMT\r\netag: \"5e998a43-a5c1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 280x280, components 3","md5":"beaedee99322ccd7a6fbb1025c39d027","sha1":"92bb4b8243afa8d96b58eaa837fe9ac90f0d1c81","sha256":"23c03f10f60eaee5c1d7c537f0f2a3f26d03a056c58ebc909af511ada1b1800b","sha512":"36bc0518caf4e331e078578ab2ec0e686d73ba6395bf59e65bf56962f018101faadcc9ef08a856678908825a9498382f4cfe5a4e4bd9d2c0231c811eca5ead63","ssdeep":"768:xMLoE1YK6W6ze+m5jfWracHL2woMnLZeBCdMLaC6zDyBLCk9hMeZp9ZwUXu/EX:xMLoE1YpW+e+eoac6bMLIAcT6zDyBVMw","tlshash":"0413f2a8d28724820dfdbd71d90f2107aa699443d4bdab745e5ba47f81d3ceaa8cc04d","first_seen":"2026-01-05T12:37:28.434563Z","last_seen":"2026-01-14T15:17:21.977413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/e72/400_280_2/e7272b2c7230515407f17ce0977bbe2e.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/e72/400_280_2/e7272b2c7230515407f17ce0977bbe2e.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61693\r\nlast-modified: Fri, 17 Apr 2020 10:51:47 GMT\r\netag: \"5e998a43-f0fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 400x280, components 3","md5":"d934b7ed7c914a758aeadafbbf2e5699","sha1":"87d5aeb999fdbfa0266d74416565f2182136ae35","sha256":"9af57fd2241ea674f0226f7a3d50b6a121d225bbbe6620610a223e5990c68acb","sha512":"13655abed469bc5092dd6032a6f87c1298f7c8ec781780fabbd504a0666a5f352582e93c5e88896c48763ba6c97edba7676083e8ef4bd760006cab3b213d4d34","ssdeep":"1536:p1NVEsVKY/09XiQZ+waqzhaCHG26ddzvWtQ/qpE:rvsY/09XiQR9XvsdytgqK","tlshash":"cc53025cef894e20f4533ab8f8430294dc4b5ed6e25a54749e28a3709dfcd036c65d8a","first_seen":"2026-01-05T12:37:28.324221Z","last_seen":"2026-01-14T15:17:21.978975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/576/576027cb98f992cfd9d877b94391ee4d.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/576/576027cb98f992cfd9d877b94391ee4d.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 929288\r\nlast-modified: Wed, 12 Nov 2025 05:34:46 GMT\r\netag: \"69141c76-e2e08\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":929288,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2025:11:12 10:31:35], progressive, precision 8, 1480x730, components 4","md5":"a2c44acf11200ea8928a4c988c4adb90","sha1":"bff693a558a2daea50c78edd25b33277d7fad646","sha256":"e5b7d8beefb5ea707b202b53b5f4e64814e671344d1dc938a7f97b970f12d9b4","sha512":"f8fabf2aa7258457e2c138116b70f1651c93f90b67908111c64d05c7814085767d56284a0a9714e8be21a82cd31a84393897d18bbfcb25e570e5b85b723989ad","ssdeep":"12288:ME0p1RE70zxntT/ylTyaaSMn2fSBLAQQ0KLFzYlRy7SnhuJzPkoJiTgtXJOQtJpR:MHyUt7yQaaPXBLmFzYlROJTWAJV/KrsF","tlshash":"a615120e60d38cc1da90d33258e6de7f86e4dc01a962974172fe7e5d73fba809a53225","first_seen":"2026-01-05T12:37:28.444019Z","last_seen":"2026-01-14T15:17:21.980844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/699/280_280_2/699cb1b5090af1001f3f7cd0ebc5bff2.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/699/280_280_2/699cb1b5090af1001f3f7cd0ebc5bff2.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 142102\r\nlast-modified: Tue, 30 Dec 2025 05:24:36 GMT\r\netag: \"69536214-22b16\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"503f77af3365541a50a079b628f116cc","sha1":"80c3a086837d0b7c300287d9995b476ca54bf124","sha256":"6e1abe9a87a36bfb0ddf91ef9b2865f15b3ea30604d0f8c2561bb9458b687355","sha512":"f73e33633308310a536756f6ff516db359bdd8b29b075ef10618a7d2dd991286c1a650b079869b9d953d984eb7ac76cbdf6e15735b9eb22206f007b97e54af95","ssdeep":"3072:mBomF/Bp5TWXE0Z18fwK/H7b79tWot3LFaDuhSj315630s:KomF5KzX4wmH7dt7vM71w3h","tlshash":"88d3128770119a6bb0a3273a3069447916f94ec064b2b0e4bf9451f9dd63b2cadce377","first_seen":"2026-01-05T12:37:28.364202Z","last_seen":"2026-01-14T15:17:21.982396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/3aa/280_280_2/3aa7abb300e9de589804920ef98c3ced.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/3aa/280_280_2/3aa7abb300e9de589804920ef98c3ced.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 149054\r\nlast-modified: Fri, 06 Mar 2020 10:11:38 GMT\r\netag: \"5e6221da-2463e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"480e524346fe24d8ae15ece532419170","sha1":"96fb7353a989bd22151152cc21135872326aa421","sha256":"8d2f52cd2d4f38e677c6ba5961bf0f4ff2d18a02611f02fed58fb07dddce9dc5","sha512":"9b9e6b51efdffdfda736fd1eb5724b165f5da6d7b32775187749ce21c327cb1fd5fdbe03dfd7ce0abbc0c82a6612859c794a84011ec99bf91f7534bac4971cda","ssdeep":"3072:8lz6J8pinDMRXDG84ha9ymPVuRuRyNUMgzmOgS+mDjDqOXT9kg3LSD0mpmwfAn97:8BbiA4vhaM88uRyNUMgTzDv7ZXbSD0mM","tlshash":"19e312a3e18ed1e45e1352043774af0bb18f467d6a9436f8472be2cde1d64eed8b5804","first_seen":"2026-01-05T12:37:28.292017Z","last_seen":"2026-01-14T15:17:21.984101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/916/350_350_2/916dd32e434bb9349a8324f7497ba9f0.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/916/350_350_2/916dd32e434bb9349a8324f7497ba9f0.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 207943\r\nlast-modified: Fri, 06 Mar 2020 10:41:44 GMT\r\netag: \"5e6228e8-32c47\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"06561ad780b56a892bf9b52785ba9b58","sha1":"7895c099385f3f0f1bd2754c3dcb7a53f2619fce","sha256":"e9d9bc2b6fa20ba83fc77180089bc850c3064822df28b111d036bcbfd2a9a43c","sha512":"0339249425d6d338d3612ee2d0c07002d86e96ab21eaaf6a0e02ff674dd92d08c1f1dfd3c9723ab6eb29ff038e3018de405449219ef14444857242aab05e03eb","ssdeep":"6144:KZJhSH2zpeWn59V6NzJLkUwJYQRFzbqMADbGL:KZbBe49V6NZkUwxDPU+","tlshash":"4a1413d4c427bc386aa67e9b5cb0ec8547d35079d4a67898cccf95d030887f7869239d","first_seen":"2026-01-05T12:37:28.295431Z","last_seen":"2026-01-14T15:17:21.985991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/647/400_280_2/647ba912103030cc86e4be01171430d3.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/647/400_280_2/647ba912103030cc86e4be01171430d3.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56992\r\nlast-modified: Fri, 17 Apr 2020 10:50:46 GMT\r\netag: \"5e998a06-dea0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 400x280, components 3","md5":"406bd776b3f54fa091df85c03b7daa31","sha1":"5759c5f8b53b828dec8a02d124b364fd874c3c2f","sha256":"fd93d5eb9ebd561d49d80d6808514f42acddaca54907f791059d0df33d44d83d","sha512":"fe30502ff875ac53da5201ab92141e498a4f13738bd0a88e724cc21f77a8bc6b03d7fb46118beadbf7d7ee7ec2169830438259cc8063e0db6c046a1c8b6fb7bf","ssdeep":"1536:pUOkJT6py3sr8M4OW9cGjv9r1qzOd32mK5:2OIT6py8LNWj10Cjy","tlshash":"cb4302dcd87808d05991907739f50993e7a62fd7037e6cc01ab8369ca8c1cad9a09fbd","first_seen":"2026-01-05T12:37:28.347177Z","last_seen":"2026-01-14T15:17:21.988041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/callback.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/callback.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 875\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-36b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":875,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit colormap, non-interlaced","md5":"754f2fb5ece2751dfd55cd2c45afb7de","sha1":"b40984c0c13f0a2812ace12edee213cf284b420d","sha256":"c9ff98ef13d6090c273be892c3b76a285ef63389e85e5a76b9875eac7951bd86","sha512":"425502916a688dac875691196df935dd4905c6b7185faa42f49bf81a102640eafd81dcb9ff82e34a6957cd5a7890a748e03a0769933b97972bbd058a2c290815","ssdeep":"","tlshash":"bb110e640dea9d298ea54de3622be0a1deaa8d381008516b5156b03d67bfa20058c299","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-07-01T18:15:19.959065Z","times_seen":20,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/iblock/219/2196da9b03b8913f6d3e171cd9729dfd.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/iblock/219/2196da9b03b8913f6d3e171cd9729dfd.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 879283\r\nlast-modified: Wed, 12 Nov 2025 05:39:02 GMT\r\netag: \"69141d76-d6ab3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":879283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2025:11:12 10:37:53], progressive, precision 8, 1480x464, components 4","md5":"1ff96b959d000c92f57c8af34a29572a","sha1":"93b6fc0c2712f3624a0a8f918a230f7868200a6e","sha256":"2d50591097703c2287a6b23f4b192fa998943bb7f5c105003912e10d6fabb764","sha512":"22be82549a3022c71e210ad86dd5f08ff1ecc1479a5ebb56d4b35688b2550527956e52cd363d3b18150722d3a7732ac8ab04afbdfa147e66555c374916119842","ssdeep":"12288:pE0p1RE70zxntT/ylTyaaSMn2fSr0t86kKXYBgbJs+0EADBvtefX:pHyUt7yQaaPX+VZXBbOxJe","tlshash":"0d15120e51d38cc6db91d77618e5db3e84e4cd51ada2ab5232fe3d5c33f6a40aa43224","first_seen":"2026-01-05T12:37:28.326352Z","last_seen":"2026-01-14T15:17:21.990722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/1000x667_IMG_5680_d_850.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/1000x667_IMG_5680_d_850.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 102762\r\nlast-modified: Thu, 09 Apr 2020 10:43:19 GMT\r\netag: \"5e8efc47-1916a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1000x667, components 3","md5":"6e0960d2b84b815cc29ecb4ba6788f76","sha1":"5827e1d972e25d9555b0e2e38d2e86bda84be735","sha256":"770dd1a030e9f524922917f46598577b0eec9d70b148d395a42b220efa3dc433","sha512":"109958a3cdff4207f2edaaf650b29bc4f873e0d82a5a2666c35fd470b26ac5e451c0f5462766a474455bacd500f745343318c3629b0a43d0f5a06ede0802f939","ssdeep":"3072:7luo1M8D8pXPnoN3sodD5WazdCa2RUg7a:7luUAfoVdD5WazdCdKg7a","tlshash":"8fa312bbc57d0927b02e3e7341b90328e8aed2a075d0e4538ef91ad6f29cd235d52167","first_seen":"2026-01-05T12:37:28.355387Z","last_seen":"2026-01-14T15:17:21.992591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/12b/400_280_2/12b1d64f1dcc0d9405c4116ae1a5603d.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/12b/400_280_2/12b1d64f1dcc0d9405c4116ae1a5603d.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 172464\r\nlast-modified: Mon, 29 Dec 2025 13:13:15 GMT\r\netag: \"69527e6b-2a1b0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"8201ec4286b34d3d4cc0861e461952bf","sha1":"95ee4350e307c9f6f01dbc3263ca86a1fefbdc7a","sha256":"1ba06bc6b2e07278e037545bbe0b525ed0bd8d4a5fac650a7ab1fefab0137e6e","sha512":"ac2668e2e6c3064ea932d4234ce2b91a786a0e2be9f1a39c73de73f1e2e753bedbeff8c08798153a6c906c1f4aa54e9c4c641e9c1ce586c2948fd7c30b275d4d","ssdeep":"3072:6/gxuPtG6nCtyD6OLn7HVojHBLI4znWuFaU17DmFMVa6tuqen0:kkuP48ayD5n71YdIruUaH1en0","tlshash":"a3f32348eb2f33dc94a486f1ccb66b987d5803cbd315659b9fd1ed2b21830574a3b622","first_seen":"2026-01-05T12:37:28.319639Z","last_seen":"2026-01-14T15:17:21.994153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/115/350_350_2/1153dbc0e0586440c46614b71d794690.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/115/350_350_2/1153dbc0e0586440c46614b71d794690.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 177967\r\nlast-modified: Tue, 30 Dec 2025 06:18:07 GMT\r\netag: \"69536e9f-2b72f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"74ede6bc65298182a2ed217cbd75c3a1","sha1":"4c889b8380a8d6bf1ff1988383ec4c3d30c7bf6e","sha256":"0ec6ed9256756be7eef0ec06b3a669effd203b88187b5f6ae428d6c816950d0b","sha512":"2e62c53424e837f1350fdcea472cdf3e9c190aca372ade3bc292ccb4e3a4e437cce8719a64eeb6adcefeb943c9af694abf2dcc82747284a88b57e735d2809708","ssdeep":"3072:vn2R2dlWIZbXE4hV0DTSbqt3xfIq9jD1QqAi1UgUIN45ZVcaOzD63UsnMgAZA8Zu:vn20d0IC4hNigCj5QWe75ZmhPsnNAHZu","tlshash":"0c042364b1bc13e8ff351b41b13242e99911bb10911ccbad6bcd68ddf874978c78992b","first_seen":"2026-01-05T12:37:28.470629Z","last_seen":"2026-01-14T15:17:21.995997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/113/350_350_2/113b7c875e5efb9c77a33456d401ebe8.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/113/350_350_2/113b7c875e5efb9c77a33456d401ebe8.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 236062\r\nlast-modified: Mon, 29 Dec 2025 12:43:42 GMT\r\netag: \"6952777e-39a1e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236062,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"f9333e8e87589e0836ff06e692ec0ee9","sha1":"2c22556e095b8d92bdbea193fbe4973c1a14f1c3","sha256":"a48e2745ebf548c7ce0c77349396cc4162b15866af72731fb7937bfefa06f4a3","sha512":"7fb08ba84641eaabd9e6d50e15ba48d29751f9e7e27468383c49238fa7638cff2abd14b6083fecb8343eddb728a86a344ae497f1dd1fd5be1e1905a063fa76d6","ssdeep":"6144:FYy4x6j+T/7sysRnQPtWN835Bm3Xk0Kes4:aj6CjonQqA/0Vs4","tlshash":"3a34231fa999713b9cc85f436d5cec9a27a73b13618c3720a5bb241d5a7ebc028035f9","first_seen":"2026-01-05T12:37:28.283688Z","last_seen":"2026-01-14T15:17:21.997691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/647/280_280_2/647ba912103030cc86e4be01171430d3.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/647/280_280_2/647ba912103030cc86e4be01171430d3.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45565\r\nlast-modified: Fri, 17 Apr 2020 10:50:46 GMT\r\netag: \"5e998a06-b1fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45565,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 280x280, components 3","md5":"8e27f55d7727d1eda572aed0525a508a","sha1":"4232379526e86505c2c5d1e41e9cf6cd6c013772","sha256":"8ff9c1ce2d624ebc9e089e31afab3214321d52c1c3539d99ab420bc9a1f6a456","sha512":"7e5f37b1c2f34641f380ce7ad28274520b8892f9989c10e5bab9b4cf3329b3b54e07d121362538584b150e25179bcf31c7a1e5ae19ba5263f5e8229f2fe3bfb4","ssdeep":"768:x2M2w2nPJvTJcGsfxTH9WrX9rUKgD+m8MtMB+xZJKNC5nKjK0gFHt67hQGyK0mYR:x2MKPJvyB9k9rRgJyB+xZUNOKFOHtwhE","tlshash":"f02302ba9341b0de74663e37dde12cba830adc94de85f088988bd175d07f4d583e6059","first_seen":"2026-01-05T12:37:28.264444Z","last_seen":"2026-01-14T15:17:21.999064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/647/350_350_2/647ba912103030cc86e4be01171430d3.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/647/350_350_2/647ba912103030cc86e4be01171430d3.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65049\r\nlast-modified: Fri, 17 Apr 2020 10:50:46 GMT\r\netag: \"5e998a06-fe19\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 350x350, components 3","md5":"c9dae65acc67589c6a06ea39ea401d3a","sha1":"1ea89a5e4a3ecf950555b4ef7d2b019e1643a92d","sha256":"82eb8f3009ba6de52f161b7f635021aee607713d5ab13dafe14a8f88ab224d55","sha512":"215454e4042d91856fbc50bff2c2dd9c1b28b274820adc7ffcdbcf5e12dd339c3c0eb1d3d52f82f1a827a262e368c099846b5fcb4c26d0ad11baa6c4e8a08a37","ssdeep":"1536:txF5Z1aKVo+HmExdsl1hneFLYyp2KfEeBut684L:b9jVo2i8Bp8t6H","tlshash":"ab5302708fe11ee5c837c8b7de97d1d186892ec2fe4109e299918bfd87e8499600d25d","first_seen":"2026-01-05T12:37:28.396792Z","last_seen":"2026-01-14T15:17:22.000548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/images/shad.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/images/shad.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 12055\r\nlast-modified: Fri, 01 Nov 2019 10:32:53 GMT\r\netag: \"5dbc09d5-2f17\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12055,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 481 x 293, 8-bit/color RGBA, non-interlaced","md5":"686c1cdf1e8c9df64993b6c85a541bfd","sha1":"dbd14502e83d1dd3f981dbb38af90d235bd337ae","sha256":"99421e73d9db77fe06509f44f6d32a79a329ac36ce748c19c4f533264710c0eb","sha512":"16c5bee98f535d999cfbb055c3dca1826699d196ad58d9fdaf65c84c8d274a0c8e35f4876672956f1d12b5be9c5f3c5b8b0b9f1cc18bc5dc6c8c42368799cb87","ssdeep":"192:dLsR7bDhW6rZs0/WYLGnewLGL6od05In91l3JbNby4dbrISuJ+DRaO5FOj9s2ynr:dL0lrZs0uYLm0d8I99pd/ISnRaO5FZ3r","tlshash":"c742cf9a28f315070ad99d4b2ab000d14ca720c3cfbab050df9b15ed95828e1e32e3df","first_seen":"2023-05-02T06:25:34Z","last_seen":"2026-07-17T08:01:12.476038Z","times_seen":58,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/12b/350_350_2/12b1d64f1dcc0d9405c4116ae1a5603d.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/12b/350_350_2/12b1d64f1dcc0d9405c4116ae1a5603d.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 197204\r\nlast-modified: Mon, 29 Dec 2025 13:13:15 GMT\r\netag: \"69527e6b-30254\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":197204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"dcca2f15d985e9872089663405b1d690","sha1":"c14ac7abb1a9273a3ad8b18fc0c50616a2c24b6e","sha256":"c261b3298c9348dcaf825c0762d72c222e850c97a8ce9677297ed5c1c121a8bc","sha512":"fe398e0bed301d3f7e853f9d971523d2a8a4d109d00e8073d379ea9ec3ccc26cda9c1e1e22d25b6946f7e018a92a8e913f50c763dc722a7452dc168939d1fde1","ssdeep":"6144:CXe5PrO1BbvOTdV68r/H0oyMWSR49T2NbQooTB9C:hjTu8zdyMpigQooTzC","tlshash":"1a141326fc58e61fdd5810068951ae1bd523483a0e5ea1fa8070fb74f3cca356b65e0e","first_seen":"2026-01-05T12:37:28.32209Z","last_seen":"2026-01-14T15:17:22.003059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/030/400_280_2/0306209610f40fe061e26996e34e0664.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/030/400_280_2/0306209610f40fe061e26996e34e0664.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 173441\r\nlast-modified: Tue, 30 Dec 2025 08:10:21 GMT\r\netag: \"695388ed-2a581\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"3fdc26ae2dd2565f729de4291f6e9138","sha1":"a621fd461366219b8f59840ec050c879aa3f8832","sha256":"8cb5ef1cbe5be62e506a329cc24a66e20404ccb8305ba4a1b194b5b34f1bead8","sha512":"0fe5b7fcdbd6d6ebf9277d9fa96f861f7565b5f1ae23ae77ae1b31558d97b77b6135d26a6601059a753cbb9182607e66d694ae13b707692c20b2a91688ec297c","ssdeep":"3072:1Lw0tdXWwSvsLiPfs7tsyBSwkljJJ3xpGyR0CjKIwkhQbmva1uOLz8bDL/tQnS:100tdXWwHOPE7tpitJRGy6CjKIwkO91y","tlshash":"1f0423368ecf57002b22c52f3d00a2955156d141ab07e19f35b36efda2a9b8f1a6c5f1","first_seen":"2026-01-05T12:37:28.300612Z","last_seen":"2026-01-14T15:17:22.004695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/916/280_280_2/916dd32e434bb9349a8324f7497ba9f0.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/916/280_280_2/916dd32e434bb9349a8324f7497ba9f0.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 138057\r\nlast-modified: Fri, 06 Mar 2020 10:41:43 GMT\r\netag: \"5e6228e7-21b49\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"7e5469c6a48f9ee48e79876e57c81bce","sha1":"99485f693b7472061bb9e559d1a91f811405ec0e","sha256":"096591d39ce67441822fcc46ea16157020642e5651896f4c64541bbeda6537d3","sha512":"6e0fde07fa6444d0354a63c78c82fbe490ef799e44b4ef141f9be097dcc93d4ed89c31048d075e5c0b8e49b60023811a5af0b9ca53cf3ae84f31ffa206b43f9a","ssdeep":"3072:xDtYjWxqIhw6CkfpaYUQrdy6BSbMwo9pJ6VBgoq5Y4qrBbXaDR:xDejWxqx6/fpauDBSw9H6Vy/Y1aDR","tlshash":"8bd312e9b5bc932d46679c3647b1bc94985cae1cc7ff270ec0590f5105a46bac203abd","first_seen":"2026-01-05T12:37:28.461522Z","last_seen":"2026-01-14T15:17:22.006163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/bitrix/templates/concept_kraken_s1/slick/ajax-loader.gif","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:48.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /bitrix/templates/concept_kraken_s1/slick/ajax-loader.gif HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/bitrix/cache/css/s1/concept_kraken_s1/template_7ac00733416be30778cc4ca1187e2540/template_7ac00733416be30778cc4ca1187e2540_v1.css?1767012272805806\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4178\r\nlast-modified: Fri, 01 Nov 2019 10:32:52 GMT\r\netag: \"5dbc09d4-1052\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-08-06T04:31:21.5712Z","times_seen":45657,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/be8/400_280_2/be800b8dce5c473e88c7f40a0b300aff.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/be8/400_280_2/be800b8dce5c473e88c7f40a0b300aff.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 175897\r\nlast-modified: Tue, 30 Dec 2025 07:44:43 GMT\r\netag: \"695382eb-2af19\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175897,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 280, 8-bit/color RGBA, non-interlaced","md5":"f40b63c2a99248198e934aff5fe21c7e","sha1":"e6394b7067bf5507637c6c3ab433122913c9cd2b","sha256":"05735410bf0241edf13e79be7e460aaf53b6e29ba22a4e1c02b46c9c4467f1bc","sha512":"debe20da4d7b5409d5f5ad3b33197b1142b732887e4a915b16bc041e8b4d5c05a7d18c8d15a5ddf0e06cf29bdfe5833ea8c593686f8c93e7540222e385588ead","ssdeep":"3072:6UovLyZdpCtV4FS0QW+i1gUr6jdJ1E8WWqEj6SilzB3nUVCs:vOFoQT2g9jdJ1E8WQiI4s","tlshash":"5904233031a3548a6d6e4a61790f0e8baacfe3cdafe3fb51c745af5074e14572a21b50","first_seen":"2026-01-05T12:37:28.340163Z","last_seen":"2026-01-14T15:17:22.008849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/be8/350_350_2/be800b8dce5c473e88c7f40a0b300aff.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/be8/350_350_2/be800b8dce5c473e88c7f40a0b300aff.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 200935\r\nlast-modified: Tue, 30 Dec 2025 07:44:43 GMT\r\netag: \"695382eb-310e7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"2fe08457db0b72a02e36efede2140d20","sha1":"677481af6914ea7a6b4b216fb85ba066421766ca","sha256":"27b2b93103fca424843f15119ba108f37fa8ca496692ffb5a854b2fea2de8e3d","sha512":"a58560bae9332490c0ea92605e7ea013dd9026446285f6ef086b91faca7c0c9c0b2b546032404811a1415a66130f3dfae5b5ab237ec2806161f952d5208d1dce","ssdeep":"6144:xKNwrAde3YU/ZVXZnJoY/tUAMg9PdPMazRDeai:TrjZVpnOWvLPMapeai","tlshash":"95142292cdd7df2c4a4700c70e628113094410a1a975ad8bd27f499dd2dbef2dea5bec","first_seen":"2026-01-05T12:37:28.261998Z","last_seen":"2026-01-14T15:17:22.010573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/030/280_280_2/0306209610f40fe061e26996e34e0664.png","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/030/280_280_2/0306209610f40fe061e26996e34e0664.png HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 124440\r\nlast-modified: Tue, 30 Dec 2025 08:10:21 GMT\r\netag: \"695388ed-1e618\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"f062e5cafe6f1438ee309e14534da5b3","sha1":"8d02f794e3972b0155d63a6f2bb5eebd4cc464f1","sha256":"caf1d4144c2963db23518a3560560e75691597b9cfedcd9fd454c636af3404cb","sha512":"366e1ffbbe9507e2d336e57a3d43ed42f61dc5441c2d2527d44753dbd71bf83e76493a3c866c578f6c74da4b3b309fb1ab4bcf6a4ef92be7be20afcffc0a199c","ssdeep":"3072:FmoGCGtYv1RX8Gw4RQyXH5bMxAbEw8/n1BgbNEf3:/Z6Ydr3IeE/BgbNQ","tlshash":"89c31235eb2351a799636fa7e011885d64cf30b3359cf26a6d5401809b42fcadeec7e2","first_seen":"2026-01-05T12:37:28.441157Z","last_seen":"2026-01-14T15:17:22.013211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sat52.ru/upload/resize_cache/iblock/67d/280_280_2/67d5e0c98aa8e970602479c4ab97c409.jpg","fqdn":"sat52.ru","domain":"sat52.ru","tld":"ru"},"ip":{"addr":"185.12.92.131","port":443,"asn":210079,"as":"EuroByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sat52.ru/","date":"2026-01-14T15:16:47.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sat52.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 22:11:28 GMT","end":"Mon, 13 Apr 2026 22:11:27 GMT"},"fingerprint":{"sha1":"72:76:48:C2:74:B6:3E:31:29:D9:32:BC:E9:02:7C:67:83:3C:CE:19","sha256":"B9:B6:14:45:22:5C:F7:D0:0E:5F:74:CA:A0:38:4B:15:42:55:0B:16:C1:E2:7E:7F:2A:C8:E2:EB:20:E3:9A:53"}}},"request":{"raw":"GET /upload/resize_cache/iblock/67d/280_280_2/67d5e0c98aa8e970602479c4ab97c409.jpg HTTP/1.1\r\nHost: sat52.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sat52.ru/\r\nCookie: PHPSESSID=9393a577c321268aa04fc7ba3e826524\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 15:16:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56694\r\nlast-modified: Fri, 17 Apr 2020 10:48:32 GMT\r\netag: \"5e998980-dd76\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56694,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 280x280, components 3","md5":"d16e0f47edd57679b2bcb7682dff1589","sha1":"18621c9bceef404992a740bb38e4e820980f4cb0","sha256":"6256cd1bd4f5c9df97fbbc21fef30ad191fd18bb3c77acfe6e669f661e725151","sha512":"0f605a4017967395d07d391c23da40d051b4fb3dca98ac09689678963752d0da8fa38d7ec485d41bb24d021c0373fe236b95488b65576cdeaa9d19428b1f01ad","ssdeep":"1536:xJWNTY/ya7Dasm8iglHQFPbYXkpr+i6uCpVvlo7vHeHadrJPl:PwT8D9FlAYXkci6uCKH+ErJPl","tlshash":"2143021e900fabae4ece6b6d5fdb047228d4d8724d65b11280d66f3cb2a8475a7c1d0f","first_seen":"2026-01-05T12:37:28.39345Z","last_seen":"2026-01-14T15:17:22.01557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"sat52.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}