{"report_id":"64b2985f-4155-4de3-a1e5-f29172fb32a6","version":0,"status":"done","tags":[],"date":"2026-10-10T22:01:09Z","url":{"schema":"http","addr":"kaliningrad-itc.ru/","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":0,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"kaliningrad-itc.ru/","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"title":"Калининградский инновационно-технологический центр","dom":{"size":77297,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9291)","md5":"ca5d0550135819c602d3f46304d07630","sha1":"a6f261c6ca80bed39d87faa739e13975e313952e","sha256":"9e3200904d4782074084da37c79e787fd4e1f4d3d3cf57f4a35342b23ad6b18c","sha512":"fcd86221cb5236858df30b7998c4282142ed83627f28a2355c52bb39d3c4e5bbdcbc6de2852577d1d3936d2c1e76f1dd16f9e776efc0c681a6c49ee3df729369","ssdeep":"1536:aYypwftfxmd1npJ6RR0ghNxgefN3MU39DMglNJfXwJ0:a5y7md1npJ6cgeefR9Dt+J0","tlshash":"2173d7f787b4c0f42d9e1baddf327acd650a60b9df4599c0b2bce818c293ed5455aa00","dom_hash":"domhashe606f104ffbc3b53fd9cb5fe9ee6f259","first_seen":"2026-10-10T22:01:15.132693Z","last_seen":"2026-10-10T22:01:15.132693Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kaliningrad-itc.ru/","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":0,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:01:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"kaliningrad-itc.ru","ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-02-03","domain_rank":0,"first_seen":"2025-06-16T17:54:05.577614Z","last_seen":"2025-06-16T17:54:05.577614Z","alert_count":30,"request_count":15,"received_data":583636,"sent_data":7615,"comment":"","tags":null,"fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Twenty Seventeen","description":"Twenty Seventeen is the default WordPress theme for 2017.","website":"https://wordpress.org/themes/twentyseventeen","common_platform_enumeration":"","icon":"WordPress.svg","categories":["WordPress themes"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":15456,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T08:43:36.409518Z","times_seen":1099891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/twentyseventeen-skip-link-focus-fix-js-extra","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4626ef432c46702e47aa8de955dc3f99","sha1":"d8fab86df15138b644834998fa975afba87d6ca3","sha256":"74db3a7bf537a59faa72042e75b1ab6a5978ba3f34d2968b977eda7d17296524","sha512":"94503d5586c969e5af5b6049cf2c0691a98272c1f0f4c44a3a1e71fa042796fed39a2b21c498d1e47c0b106e5d132e85b9a15c2e63e9f7557fa5d1437eb81e53","ssdeep":"","tlshash":"ce1126c0d05c842d2dcb2c77ed32ee7e5459290cccd9cf261ebf5a6bd220540268570d","size":1024,"data":"","first_seen":"2026-10-10T22:01:15.19046Z","last_seen":"2026-10-10T22:01:15.19046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=1.0","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","size":683,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-10-11T06:36:32.021878Z","times_seen":13583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.2","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"16fb1664ddebf663a909c51d40ad7914","sha1":"2308baa783d4f9ba97f18ace350b7033dcc3c2d3","sha256":"d6a2ec240f8adc5052cb9df96a33199c65de4c58457de2aca485120f70e53c89","sha512":"072b6409f806c97f5b783de3cc4381acafea29333e15c815c185e30255f9a9b2e82e9f8854ff040a8cbece4edb4233e1f6ca199fccd227ce6fa2201e7d401135","ssdeep":"96:dN6MzT9jYxQwdlUUgjm4YFFJc3IpOYoxK41zEsg229z12GxFRxogZ0dmhj9kCL:dN6YRjYWwdlUjC4AOYoQ0zEsgNeGxyvq","tlshash":"3ec173d8e79e201f0266647b880f038c667c50f36422d86fbd6c99b828d897d0365fb9","size":5836,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-10-11T00:04:10.111181Z","times_seen":2459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-includes/js/wp-emoji-loader.min.js","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46c93cc89226211ac8dd7d20482547a5","sha1":"4d861778dbff738b96196454328b8ac8192a6946","sha256":"625618d254d0dacdd2bce7c4d740cf088acf6cd4f98318d693adb51dd74a7242","sha512":"05a3873758c046dc2f8e015c19afe11e983a8f48a85d3f6b11f1b89d132bf37c00db8d77526e1ae76843d27eab417212a8f0d88a4fdc3c99e0c1bc6d4bab2ef9","ssdeep":"","tlshash":"e561a799eb7538df33fa01f3653a4d47eb614436e784d038c9ae631414b1893c375a16","size":3252,"data":"","first_seen":"2026-10-10T22:01:15.193078Z","last_seen":"2026-10-10T22:01:15.193078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-10-11T08:42:43.081807Z","times_seen":53283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28b0cb4377e859ba82f9835096b85a2","sha1":"ea8806998f457870b68bb568fb0c9c7a4247bf12","sha256":"1ee5de4aab474b4ec5b5aaccd6ffa61cfe0ce364aa130877cc9d1742b80c79ca","sha512":"81b2ee572f7cb6ded32b5a1ce9cea23eb0d8b6d9c61d1d66da1335a4c1994df28d0e078e97601bb73cc1629a3e9330da02c82f213620d21fcd106b30bd7092e6","ssdeep":"","tlshash":"6b0126c0905c842d2dcb2c47ed32ee7e5459290cccd9cf261ebf1a6bd220540268570d","size":839,"data":"","first_seen":"2026-06-10T19:52:33.240473Z","last_seen":"2026-10-10T22:01:15.19788Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T08:43:28.079087Z","times_seen":1004126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/navigation.js?ver=1.0","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1b6700f33c6b26416732e62b04e173d","sha1":"6b7ad6755ad1ebbaffdc03d742d260a1e5758669","sha256":"b5dc8a0ea6886f4daba8c6e6b722071a21796725c2c59ea0ce264d0d7019de52","sha512":"8c6ba3ee2e01632f754278c7c790698919603d0f67d93b916299a7453b48226d48341536b2f58de87adc1206a5a85ddd8aaea23356039ce34129980e54d5b085","ssdeep":"","tlshash":"18714696b76f7733447630ea8b2bc076363e4927e00634127dc769b539c410a0366e7d","size":3754,"data":"","first_seen":"2023-03-07T01:35:28Z","last_seen":"2026-10-10T22:01:15.172106Z","times_seen":1271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/global.js?ver=1.0","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebbcd62ce678e0337cafc1e2d66c0cda","sha1":"ca1ecb4faebca10faab8c747d48ef3c1926fb1e8","sha256":"c6d9599b5f75bd2619299f87d5b979f14955c35d2dd34050ff13ab0609297d7c","sha512":"f8d980b94a38d6895e774aae6c06673c42bf49ece20cb6310a654de34bf74634d6edbe05301ed55db5e5400d7e6fd1a0b27abf93d8ab20494dbbdfe54f70efa3","ssdeep":"192://jSi6ld0+tsqhiBJOzJU2AzP+I63xOc8eNpXRxQCtQ:/bSlWmsuiBJOzJU2AzdcXNpLQR","tlshash":"3ff187e4d3bc3655817b31778a2b8298b63e853190002957dcef667c04e9a3da2f7f58","size":7754,"data":"","first_seen":"2023-03-07T01:35:28Z","last_seen":"2026-10-10T22:01:15.173284Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T08:42:43.065719Z","times_seen":80838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://kaliningrad-itc.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=1.1","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.804Z","timestamp":1791669636804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/twentyseventeen/assets/css/blocks.css?ver=1.1 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"27df-588e775b25e40-gzip\"\r\nlast-modified: Wed, 15 May 2019 06:42:57 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 1862\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10207,"size_decoded":2160,"mime_type":"text/css","magic":"ASCII text","md5":"ba0c834a8479da973f6152865d49224e","sha1":"e6e6d4ceb2609329e81a17ff24a77e268c1cfcd0","sha256":"97201fbb633fdbc1a8bbf2dfd7f1f0ac5fa8ada2c481b3fcb8e6bab9754d6fdb","sha512":"6fc33ea9355d01e5d43f7900b424fe5e55d2c9c2975e47159f93c69b88622f6b0fd02406be5a57fc3096a36118d69da91a11f26c90a9735738e4d42380f11f03","ssdeep":"192:+ylq2Q5nmmEiwkiiM4qxQhZDQ7TqxQ4HTTYunPyd/SJ:RM2Q5nc0","tlshash":"062221605fe25dd632afc7088daefb01d65e06a1dd5d6be9b011d4a8638c34908edf0e","first_seen":"2023-04-05T03:23:27Z","last_seen":"2026-10-10T22:01:15.135049Z","times_seen":743,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/uploads/2019/03/cropped-cropped-Old_cathedral_of_Kaliningrad_in_Russia-1-1-1536x921.jpg","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.809Z","timestamp":1791669636809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/cropped-cropped-Old_cathedral_of_Kaliningrad_in_Russia-1-1-1536x921.jpg HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"380ac-601c90919bd40\"\r\nlast-modified: Mon, 31 Jul 2023 14:13:33 GMT\r\nserver: Apache/2.4.56 (Debian)\r\ncontent-length: 229548\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":229548,"size_decoded":229799,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1536x921, components 3","md5":"2bd2a94104e7c181bea27d3b44ac7d42","sha1":"5ea4259e37daaabcf16e87d7aea39869b41216b3","sha256":"87c01025c46bdd93c09b0fc0c82509a8d00de247fa461460f70abd92d18528d4","sha512":"91ca356794b8e6e4d1817ad43b3c5dada6a8342ce9f2f14fd680161d81cf58e0d8dd8c51be643cc275aad116bcd41413141f2bd1ec2a4adc97f86c772c96b1a7","ssdeep":"6144:HcAN+SW4B/i8ZWx9lnjhytcZi6IEtKkF+gyCoT:8AbNB/iAI1jZi6IAKhhT","tlshash":"b52423ee952c48b3b73adee1883d9045485af41106b31336a73be7dd39ad92d031879e","first_seen":"2025-06-16T17:54:08.306193Z","last_seen":"2026-10-10T22:01:15.137465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/uploads/2019/04/cropped-itc-300x300.png","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:37.055Z","timestamp":1791669637055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/cropped-itc-300x300.png HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:00:37 GMT\r\netag: \"1a27-601c908fb38c0\"\r\nlast-modified: Mon, 31 Jul 2023 14:13:31 GMT\r\nserver: Apache/2.4.56 (Debian)\r\ncontent-length: 6695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":6695,"size_decoded":6942,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"38b8f342d37ef1427caf720fa3c8c48c","sha1":"ba75396a41065476e09b45826265e857ddcc48bb","sha256":"6374d0d49c34210232c199f5389d040b7457cad4479debdf6ba908467671f935","sha512":"ffb6b0f7e16ed5f053f7fe923576cfa958246bd6a9e88a103a851ba49262a695b290b2154159472b90bc3fa4ed9e7e9ffdc7fce95de5b544919d738ed7b2ff04","ssdeep":"192:PgMpkz9TW/zxCnsafRnaBOHawcrF60xqP86v:PZKW/csk4Hwp0qZv","tlshash":"b4d13c5af812654f227d674ea6c4eb03815d439f4248e7b6a56132bec8822f0fdf2948","first_seen":"2025-06-16T17:54:08.292567Z","last_seen":"2026-10-10T22:01:15.141589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/uploads/2019/04/cropped-itc-150x150.png","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:37.057Z","timestamp":1791669637057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/cropped-itc-150x150.png HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:00:37 GMT\r\netag: \"14c1-601c908fb38c0\"\r\nlast-modified: Mon, 31 Jul 2023 14:13:31 GMT\r\nserver: Apache/2.4.56 (Debian)\r\ncontent-length: 5313\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":5313,"size_decoded":5560,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"3adc4662a49816d994d7c2f1ebd106fc","sha1":"7fdeedf17be9723a057e6014ed0dd309d777a3d1","sha256":"5083c8cd443a372bb4a05bf45f28e8e81c08e356940b6e56ea7f50c565ae79bb","sha512":"b0ecc932d536c05e4fcd4677eb5081074955ff81a2e17f5c694879aac3c1256261df685b60c1077c04a5428171517e6484af371c2c1ace8172d5f0b748fa21a7","ssdeep":"96:nNDQfkibniV9T9FzAPafxNtfdYKjNpoj3TpwABf3BBOVpEM:NSbiBKPaJ9YKsXpwaHi","tlshash":"cab18edb41ca44f8c3881f226c0da46d17ee1b51cd68ee808692af736976ad85c524fb","first_seen":"2025-06-16T17:54:08.297081Z","last_seen":"2026-10-10T22:01:15.155299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:37.216Z","timestamp":1791669637216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:00:37 GMT\r\netag: \"58e0-656383e301797-gzip\"\r\nlast-modified: Fri, 10 Jul 2026 02:10:21 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 5386\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5698,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T08:42:43.065719Z","times_seen":80838,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.807Z","timestamp":1791669636807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"15601-6099b8c42cee9-gzip\"\r\nlast-modified: Wed, 08 Nov 2023 03:18:58 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 30368\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30682,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T08:43:36.409518Z","times_seen":1099891,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.808Z","timestamp":1791669636808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"3509-602fa42971161-gzip\"\r\nlast-modified: Tue, 15 Aug 2023 18:22:22 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 4872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5184,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T08:43:28.079087Z","times_seen":1004126,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/navigation.js?ver=1.0","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.812Z","timestamp":1791669636812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/twentyseventeen/assets/js/navigation.js?ver=1.0 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"eaa-588e775b25e40-gzip\"\r\nlast-modified: Wed, 15 May 2019 06:42:57 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 1164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":3754,"size_decoded":1475,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a1b6700f33c6b26416732e62b04e173d","sha1":"6b7ad6755ad1ebbaffdc03d742d260a1e5758669","sha256":"b5dc8a0ea6886f4daba8c6e6b722071a21796725c2c59ea0ce264d0d7019de52","sha512":"8c6ba3ee2e01632f754278c7c790698919603d0f67d93b916299a7453b48226d48341536b2f58de87adc1206a5a85ddd8aaea23356039ce34129980e54d5b085","ssdeep":"","tlshash":"18714696b76f7733447630ea8b2bc076363e4927e00634127dc769b539c410a0366e7d","first_seen":"2023-03-07T01:35:28Z","last_seen":"2026-10-10T22:01:15.172106Z","times_seen":1271,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/global.js?ver=1.0","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.814Z","timestamp":1791669636814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/twentyseventeen/assets/js/global.js?ver=1.0 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"1e4a-588e775b25e40-gzip\"\r\nlast-modified: Wed, 15 May 2019 06:42:57 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 2612\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7754,"size_decoded":2924,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ebbcd62ce678e0337cafc1e2d66c0cda","sha1":"ca1ecb4faebca10faab8c747d48ef3c1926fb1e8","sha256":"c6d9599b5f75bd2619299f87d5b979f14955c35d2dd34050ff13ab0609297d7c","sha512":"f8d980b94a38d6895e774aae6c06673c42bf49ece20cb6310a654de34bf74634d6edbe05301ed55db5e5400d7e6fd1a0b27abf93d8ab20494dbbdfe54f70efa3","ssdeep":"192://jSi6ld0+tsqhiBJOzJU2AzP+I63xOc8eNpXRxQCtQ:/bSlWmsuiBJOzJU2AzdcXNpLQR","tlshash":"3ff187e4d3bc3655817b31778a2b8298b63e853190002957dcef667c04e9a3da2f7f58","first_seen":"2023-03-07T01:35:28Z","last_seen":"2026-10-10T22:01:15.173284Z","times_seen":660,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/minimal-2017/style.css?ver=7.1.3","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.803Z","timestamp":1791669636803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/minimal-2017/style.css?ver=7.1.3 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"1861-58a9491f37e00-gzip\"\r\nlast-modified: Wed, 05 Jun 2019 14:39:52 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 1897\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6241,"size_decoded":2195,"mime_type":"text/css","magic":"ASCII text","md5":"baf5667234af7fc72a66e239931ef3c8","sha1":"4895e0552aa28badf5f4caf37cc1e589fe1ba61b","sha256":"039c9c0b428cfdf3659080ffffe82890c82ae2ed282f2e2e188baa1115372462","sha512":"9219ca332ee3cd52a774e1ec8d20e723556eb5c00f572097d061ca963a35361aab1edcae194be11cd7b3a54da9e548c942fbc82cb50d0925c1c74c3ac8016280","ssdeep":"192:A5hshwOzObUJ7tsPo7sPWNaREJP38D4pc5bPeqPeqzeqzQI5bPeqPeqzeqzQQqgM:tCauQYI+kcqgQFkHe","tlshash":"e5d198685ad32f01656e8748fbeffa52fb2d4087d21e0d9b7a499d40cfc536480b2e45","first_seen":"2025-06-16T17:54:08.302435Z","last_seen":"2026-10-10T22:01:15.174322Z","times_seen":2,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/css/colors-dark.css?ver=1.0","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.805Z","timestamp":1791669636805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/twentyseventeen/assets/css/colors-dark.css?ver=1.0 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"472b-588e775b25e40-gzip\"\r\nlast-modified: Wed, 15 May 2019 06:42:57 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 2353\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18219,"size_decoded":2651,"mime_type":"text/css","magic":"ASCII text","md5":"671c059112d7d338228871a36d2aec57","sha1":"8e0bf6f02af16b705d362dd5d44df354b60d11eb","sha256":"da4235ecde852b0212014f97bd3dc7d374d1d2ad883ed7dc68ec2cbfd3c2fcde","sha512":"a9eccfc46226e35478c6a5a0f38b07bcf6306d91bae1834b78406876862ca722a173032abed6b0da3b821e42b6c16b00e3faeca3c8f1ca6bd5841573e9ee9539","ssdeep":"192:AJZxFSxJ+cMLvOWJmogx6TxxTzlnx/oxteejrUciZZxFSxJ+cMLvOWJmogx6TxxS:YDoGDo3AjHn6","tlshash":"1a82ea97d1401d433f63432d398cef804b7d4ebb808e7b8f396749e65a4d90a5626b8e","first_seen":"2025-06-16T17:54:08.304442Z","last_seen":"2026-10-10T22:01:15.17764Z","times_seen":9,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.2","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.815Z","timestamp":1791669636815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/twentyseventeen/assets/js/jquery.scrollTo.js?ver=2.1.2 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"16cc-588e775b25e40-gzip\"\r\nlast-modified: Wed, 15 May 2019 06:42:57 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 2409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5836,"size_decoded":2721,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"16fb1664ddebf663a909c51d40ad7914","sha1":"2308baa783d4f9ba97f18ace350b7033dcc3c2d3","sha256":"d6a2ec240f8adc5052cb9df96a33199c65de4c58457de2aca485120f70e53c89","sha512":"072b6409f806c97f5b783de3cc4381acafea29333e15c815c185e30255f9a9b2e82e9f8854ff040a8cbece4edb4233e1f6ca199fccd227ce6fa2201e7d401135","ssdeep":"96:dN6MzT9jYxQwdlUUgjm4YFFJc3IpOYoxK41zEsg229z12GxFRxogZ0dmhj9kCL:dN6YRjYWwdlUjC4AOYoQ0zEsgNeGxyvq","tlshash":"3ec173d8e79e201f0266647b880f038c667c50f36422d86fbd6c99b828d897d0365fb9","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-10-11T00:04:10.111181Z","times_seen":2459,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/style.css?ver=7.1.3","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.799Z","timestamp":1791669636799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/twentyseventeen/style.css?ver=7.1.3 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"14624-588e775b25e40-gzip\"\r\nlast-modified: Wed, 15 May 2019 06:42:57 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 15777\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":83492,"size_decoded":16077,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"7fa85a54ce580c02fdba17823e44502d","sha1":"608d01a157054d287402dfc00478985738c29618","sha256":"0ee2670ee7ad106dfcc2f493f440df91863eab70732b660434e24696c259fc70","sha512":"b648afca3fe7462a377d20ce7d320def16fdefcddab561132a32729481761938112aa0d926dc56f92a0ec417558cce7a353b6577b959a03da8e1291dfbc282e6","ssdeep":"1536:hs6OOLpNClvNy4yJblQQSyUmKqHM2WmeCX2Neex4Phc:IOlN0DyUmK0+C8","tlshash":"1e83b7a4af002901532fc259ffddffa4c62a4269dd4d5feae141a83893c469406bff46","first_seen":"2023-05-26T13:17:46Z","last_seen":"2026-10-10T22:01:15.182167Z","times_seen":68,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.801Z","timestamp":1791669636801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Oct 2026 22:00:36 GMT\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14772,"size_decoded":1468,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4a6d9780cb6207d9745123e842e6a466","sha1":"35c4d260c5a4cc72eca2d6fdda9f09a31be433b6","sha256":"e61b10a301abf5835da8b435a4c5488b2956aa8cc5546eb39d3687ac3e54aebf","sha512":"01803deefe197a169de2e7093e44bbe9669309889f1fd321e59e37be15c90f9d3fbb50c54894e3f370c7f16b796d00b722aa21544615f8a68e7197fca89621e3","ssdeep":"384:2FGG37XksGF3qS7SG33UcxwG53Gu6jeMNGRYM:v","tlshash":"7262dd936817a080a3ab1cc263cf7e368e4f61487046d575dffd1a989cbad266325f1c","first_seen":"2026-10-06T05:30:20.421465Z","last_seen":"2026-10-10T22:01:15.185036Z","times_seen":20,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=1.0","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kaliningrad-itc.ru/","date":"2026-10-10T22:00:36.811Z","timestamp":1791669636811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET /wp-content/themes/twentyseventeen/assets/js/skip-link-focus-fix.js?ver=1.0 HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kaliningrad-itc.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\netag: \"2ab-588e775b25e40-gzip\"\r\nlast-modified: Wed, 15 May 2019 06:42:57 GMT\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\ncontent-length: 416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":683,"size_decoded":726,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-10-11T06:36:32.021878Z","times_seen":13583,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kaliningrad-itc.ru/","fqdn":"kaliningrad-itc.ru","domain":"kaliningrad-itc.ru","tld":"ru"},"ip":{"addr":"212.118.54.131","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:00:36.030Z","timestamp":1791669636030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kaliningrad-itc.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 14:41:45 GMT","end":"Mon, 07 Dec 2026 14:41:44 GMT"},"fingerprint":{"sha1":"65:AF:09:63:49:57:DD:78:2E:9E:1F:E0:DB:8D:7E:AB:88:4C:3B:9E","sha256":"D2:76:4D:EE:3D:7E:B8:00:59:CC:6F:C5:34:2F:48:FA:BF:46:76:17:CA:B5:9D:30:FD:A5:2B:A4:64:A4:B3:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kaliningrad-itc.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 10 Oct 2026 22:00:36 GMT\r\nlink: \u003chttps://kaliningrad-itc.ru/index.php?rest_route=/\u003e; rel=\"https://api.w.org/\", \u003chttps://kaliningrad-itc.ru/index.php?rest_route=/wp/v2/pages/35\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://kaliningrad-itc.ru/\u003e; rel=shortlink\r\nserver: Apache/2.4.56 (Debian)\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.0.30\r\ncontent-length: 23626\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Twenty Seventeen","description":"Twenty Seventeen is the default WordPress theme for 2017.","website":"https://wordpress.org/themes/twentyseventeen","common_platform_enumeration":"","icon":"WordPress.svg","categories":["WordPress themes"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server:2.4.56","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":77396,"size_decoded":24120,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"b23b747416a739cc56310b7387659942","sha1":"2e044f0d71623cfdf18adb89c424a537268a78cb","sha256":"407f6a73821736a80fb381e080bd425b8d62ac2487ba57df72dad0271d3a3e8e","sha512":"41f2c954512e2eacfbf326fb0c40126d7d95f81cef4e5f312bb2414746f14421f25d2e37b09862c829b2b9ac631d8a55d7e98ed3a7dea5351c4fb7c0f8a0ae27","ssdeep":"1536:HYypxRvfKmF1npJ6RR0ghNxgefN3MU39DMglNJfXwJ0:H5z0mF1npJ6cgeefR9Dt+J0","tlshash":"1f73d7f787b4c0f42d9e1baddf327acd650a60b9df4599c0b2bce818c293ed5455aa00","first_seen":"2026-10-10T22:01:15.187499Z","last_seen":"2026-10-10T22:01:15.187499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":77,"connect":27,"send":0,"wait":103,"receive":27,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"kaliningrad-itc.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}