{"report_id":"662ef249-01e6-4c5f-93d6-504108cd2b9f","version":0,"status":"done","tags":[],"date":"2026-08-05T23:50:25Z","url":{"schema":"http","addr":"newcarderz.ru/","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":0,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"newcarderz.ru/inc/login.php","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"title":"Shops,Auto CVV Shop,Buy CVV Shop CVV Shop general,CC Shop with high balance CC like vbv and non-vbvCCV Fullz Shop - Legit Dumps Shop 2026 - Cloned EMV Chip Card - Gift Card Shop Best Dumps cc cvv2","dom":{"size":7193,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"39b76f1774d67ae740d537cffc80828b","sha1":"a8642805abcdd149b6452b4407739b976d8c5e5e","sha256":"1bfcba8683ea7e3ea5479f82857f9034cd593d6e3dbc053ebcbdac76e09aaaa3","sha512":"e73d6a7e7a148f0277cdab8d21cd4d0a2adc7010109cdddb06f87d30a790a14659334324ff875aa5f34f6df90a9b4eefd222891942fd7527adb46ddfb8d13886","ssdeep":"192:DYaSXex+yGzWQ/vHkjnX+9ngegV9MSWRPhiOTO7:cax+yGzWQ/vHkjnX+9UV9MhRPkOTO7","tlshash":"fae1f130838d4869110bd1a064316b29103ecd37ea0b4dd8b27f266cb7deeca58bb75d","dom_hash":"domhashd5c233298fb3e54455b7f7c15f29983e","first_seen":"2026-08-05T23:50:26.692417Z","last_seen":"2026-08-05T23:50:26.692417Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"newcarderz.ru/","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":0,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-09T23:50:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"newcarderz.ru","ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"domain_registered":"2025-02-04","domain_rank":0,"first_seen":"2026-01-15T09:16:44.767353Z","last_seen":"2026-01-15T09:16:44.767353Z","alert_count":11,"request_count":11,"received_data":2180923,"sent_data":6097,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"newcarderz.ru/","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-05T23:49:48.072Z","timestamp":1785973788072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: PHPSESSID=luuahciqavqr210vm9joal4ut6; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nlocation: inc/login.php\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T01:00:56.500297Z","times_seen":17734268,"resource_available":true,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":498,"connect":27,"send":0,"wait":253,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/login.php","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-05T23:49:48.918Z","timestamp":1785973788918,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/login.php HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1916\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"AngularJS","description":"AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.","website":"https://angularjs.org","common_platform_enumeration":"cpe:2.3:a:angularjs:angular.js:*:*:*:*:*:*:*:*","icon":"AngularJS.svg","categories":["JavaScript frameworks"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7208,"size_decoded":2246,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"e14b7efbcd3f8fe54f94e8b8eb8bc3c3","sha1":"9cc53e40f2750cbd3353216d09f8a2b85319d157","sha256":"5e252de3c57bc2114167e323fa8d71cd48839a883c058446d3be6e28d17ff428","sha512":"f6281537f960e5879f5bea234006ab91795679c07a255c1fc4eeb9f701b1b1a52c26af7737f0eb4b3881a095d46a111262757fe2d24b82faf2a6b0520365001b","ssdeep":"192:UnYaxYex+yGzWQ/vHkjnX+9ngegV9MSWRPhiOTOJ:74x+yGzWQ/vHkjnX+9UV9MhRPkOTOJ","tlshash":"05e1e030838d4869110bd1a064316b19107ecd37ea074dd9b27f266db7ceeca58bb75d","first_seen":"2026-08-05T23:50:26.69573Z","last_seen":"2026-08-05T23:50:26.69573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/favicon.ico","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.512Z","timestamp":1785973789512,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/login.php\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 23 May 2026 18:55:00 GMT\r\nETag: W/\"5b6-65280aeb9d815\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1462,"size_decoded":1041,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d22d6e667d3c1bb8f08f92f02cef319b","sha1":"f5e3d4abb691c957c4239e2756491c8aea7209ad","sha256":"564026d0db0fd5459f41568ef0357e4e5d28b685b1bf349d7f9a6232f6bd3d95","sha512":"42a5dc1b6020bf64851f3962a37d530d68db95bb9870e61c6b83dbde6eb310a2442137ffccfcf88bc7498bd276718c9fb98ea3a281e38bd0764ea2ab5e2ae0de","ssdeep":"","tlshash":"c931639e906201058163c9352bf1b324ed5245cb9243a6edb46c4a56dfdc257b6f73cc","first_seen":"2026-06-02T23:42:27.94669Z","last_seen":"2026-08-05T23:50:26.69764Z","times_seen":49,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/8e43ce2f3ae6bfec5b409c6afff516bdd4c9dbea.svg","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.523Z","timestamp":1785973789523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/8e43ce2f3ae6bfec5b409c6afff516bdd4c9dbea.svg HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/login.php\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 731\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:47 GMT\r\nETag: \"2db-65322f060225a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":731,"size_decoded":987,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ba449ed7ad7985941cc7db19285a448","sha1":"8e43ce2f3ae6bfec5b409c6afff516bdd4c9dbea","sha256":"85292c6d306b1b6024b28d1783b2003f6af1f154224434c7541bd1fbec4ac1c4","sha512":"b54fc86b0dfa70ccd944a128271c5ee6650370fac7d4e6fdc7f224ee108a653843d631e25fdef09ab4efcc31210f5f7b11f55fa7d83710f26121d1bf23f0c809","ssdeep":"","tlshash":"500165d661f4525cdcc9d56dabf49d4c905f50e459c360d0d7f953d890930027f0e168","first_seen":"2026-02-10T16:56:44.858135Z","last_seen":"2026-08-05T23:50:26.698654Z","times_seen":739,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":162,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/login_img_new.png","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.526Z","timestamp":1785973789526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/login_img_new.png HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/login.php\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 2148786\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:47 GMT\r\nETag: \"20c9b2-65322f06c6707\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2148786,"size_decoded":2149045,"mime_type":"image/png","magic":"PNG image data, 2048 x 1365, 8-bit/color RGBA, non-interlaced","md5":"09be480c5d9392bef81500aa136a443c","sha1":"1dbf4dce6fa3fd19e2fe1605876c0cf0ec521e2c","sha256":"70913528ea22bd21b08f0ae2882de394416f4c9ac6d2c951068df3fcabce03a1","sha512":"51b9cfe35863767d1e35442d13efffa4de3e2b5580e67722e59622497fbb495cf18da3b551144e3a1b49d0d84c8f1ebc3aee3bf6927555d8ed8202dc9907313c","ssdeep":"24576:fwShD/+abBdbWyaZwuL/d5iikuGOq/UXuX2u5irB6BcTyxD:F/HbvWlZwlikuG/UA26cuR","tlshash":"0f2533fe066166838255a9d19c3a542616ff05738bfaa37685cf70202e1beced1c1fa1","first_seen":"2026-02-10T16:56:44.855782Z","last_seen":"2026-08-05T23:50:26.699602Z","times_seen":559,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":231,"receive":802,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/main.css","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.292Z","timestamp":1785973789292,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/main.css HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/login.php\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 2617\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:48 GMT\r\nETag: \"31dc-65322f07be7d8-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12764,"size_decoded":2922,"mime_type":"text/css","magic":"ASCII text, with very long lines (321)","md5":"48929d24936616aa695d7498462bb88b","sha1":"804f87cb69ba281909d8b3b428245386dd042bb7","sha256":"97c564693045d8b696d9fbb09f3eed1025a914ad0bf86a10eb3369ed59a726ff","sha512":"e03a9423bbe6e11fc815642c402be7c747688a384d5f8c892cfbf78ab348c430ea6d13fb87e605043b5635c4161c5ed53e88d2cbb3b1b64d65e4849b3287cdec","ssdeep":"384:uuYEfl5tZAysWs3NhKs3NhEr+4Sqs3Nhvq537oQTpN+GLXDD6FUv8:u9Efl5tZAysWs3NhKs3NhEr+4Sqs3Nhb","tlshash":"364232855b50454af637891a97cf3a252a3c4d53490aecaf73a2305c8fc5aec938333b","first_seen":"2026-02-12T19:33:55.068592Z","last_seen":"2026-08-05T23:50:26.701967Z","times_seen":703,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/style.css","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.294Z","timestamp":1785973789294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/style.css HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/login.php\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 376\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:48 GMT\r\nETag: \"40f-65322f0781f14-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1039,"size_decoded":679,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"d2c5e2f304200bccaccd05a7292e064a","sha1":"6003d9f90f1ffc5486e87909b641b81e2614abcf","sha256":"8df9df99bbe34de8f19ce45e95d18b2776352b38cae56333b222147334c18a04","sha512":"699928b4033922e352c079f935476dda51e50062bab2ba1bb3a34bd721c72fae5d5aa19ddbdc9b7ec3c53548aeace8e8c765ac536eadff1f3c65aba808631fed","ssdeep":"","tlshash":"c6112720c3677612dc12785ea2d16f307f79a464b40bd41b527808bebdb1c6441b3b8b","first_seen":"2026-02-10T16:56:44.850481Z","last_seen":"2026-08-05T23:50:26.702839Z","times_seen":742,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":129,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/bg_detail.png","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.517Z","timestamp":1785973789517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/bg_detail.png HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/main.css\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 932\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:47 GMT\r\nETag: \"3a4-65322f060ed7b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":932,"size_decoded":1184,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"dc31769443842182d22a77cfa512ea7b","sha1":"c72977a4c508694c7c72123f0f6f52b8776d98ef","sha256":"bec95f5f3a0e9084408c3b9bdc589113e2c85d0a41811c0b12b8fc151caf3d60","sha512":"6bf50078707c3e1d455f6e723af5bce2a9494f74b3e88bf2644d85c3f5ee58c965ce83993cdbdb1a4f0a2a32361383356e389a4bb66077a98e9e8c967fa53925","ssdeep":"","tlshash":"05114448f6c01e025519eed124f6501398134c41abe0f569f9dec42329323f944598cb","first_seen":"2026-02-10T16:56:44.851899Z","last_seen":"2026-08-05T23:50:26.703672Z","times_seen":741,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/logo_n3.png","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.519Z","timestamp":1785973789519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/logo_n3.png HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/main.css\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 3892\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:47 GMT\r\nETag: \"f34-65322f06d9f88\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3892,"size_decoded":4145,"mime_type":"image/png","magic":"PNG image data, 175 x 54, 8-bit/color RGBA, non-interlaced","md5":"2474f0f7e479304b67020c4b73113990","sha1":"e3f6f093840583a9904b2fae09e202810032dc29","sha256":"2e18e37559ca2b2b22ea9af196fa67fd84a76c28d8935244165f33e46a6839a9","sha512":"578a8f0b975455114829aa4da76295a7d82e0c65f6a29606ecd04663704684a8603444af2257c1ce296571dcc021eb6d8b0b7a67604fc22e09d6cafd90e9af05","ssdeep":"","tlshash":"7b817ebeba71d44f799d76420dde2000e2e9316cc6962924948185ff50d1d4a7f5e0b2","first_seen":"2026-02-10T16:56:44.85294Z","last_seen":"2026-08-05T23:50:26.704514Z","times_seen":737,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":127,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/0af8dbf374fc9a95c663c125ac5752cc8b06020c.svg","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.525Z","timestamp":1785973789525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/0af8dbf374fc9a95c663c125ac5752cc8b06020c.svg HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/login.php\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 731\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:47 GMT\r\nETag: \"2db-65322f05f37f9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":731,"size_decoded":987,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b22f86b22ca4a25fc77ddd8198b6f68","sha1":"0af8dbf374fc9a95c663c125ac5752cc8b06020c","sha256":"7e5ca63982bba74f2f3ae5f7c7143c2f8cf7b7ec6d4e9aa42ce211213fe1554b","sha512":"3a231b6d8c06391df4d2e6f6476446284b55395003278484aa8b7827dd734a788003a783d01abce4b3b13528f8dccafa2661127d20776359c1958b7d4956c5e1","ssdeep":"","tlshash":"460120d661b0925cdcc5c92da7f499c8905b10a5a9c250d1e7a4939854e7242ae09268","first_seen":"2026-02-10T16:56:44.853972Z","last_seen":"2026-08-05T23:50:26.705325Z","times_seen":739,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":158,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newcarderz.ru/inc/bg_blackout_login.png","fqdn":"newcarderz.ru","domain":"newcarderz.ru","tld":"ru"},"ip":{"addr":"94.232.43.52","port":443,"asn":208091,"as":"Xhost Internet Solutions Lp","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newcarderz.ru/inc/login.php","date":"2026-08-05T23:49:49.527Z","timestamp":1785973789527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newcarderz.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 02:48:39 GMT","end":"Sun, 16 Aug 2026 02:48:38 GMT"},"fingerprint":{"sha1":"F0:86:DB:1F:0D:22:20:4D:56:AD:A9:16:C5:AB:BE:5F:BE:C8:FA:32","sha256":"7D:4E:42:99:9E:3A:6B:5B:33:AF:D9:38:09:8B:70:AC:50:D3:FA:C3:7E:E6:3C:D9:41:EF:AC:5F:FF:F7:4C:62"}}},"request":{"raw":"GET /inc/bg_blackout_login.png HTTP/1.1\r\nHost: newcarderz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newcarderz.ru/inc/login.php\r\nCookie: PHPSESSID=luuahciqavqr210vm9joal4ut6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 05 Aug 2026 23:49:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 245\r\nConnection: keep-alive\r\nLast-Modified: Sun, 31 May 2026 20:29:47 GMT\r\nETag: \"f5-65322f060be9b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":245,"size_decoded":496,"mime_type":"image/png","magic":"PNG image data, 2 x 795, 8-bit/color RGBA, non-interlaced","md5":"61ed7136cdc38010fa76939c2ecb0379","sha1":"924663cbd71d1755624d7169de26e01cdd01f73c","sha256":"6b6bf719bf61584a1fbe6dd4ef49c88188593c7cec38e10def6030bfdec6c494","sha512":"fff405c49350a960a80dab3fac3548688ac78a31a32226cbd6d9845adb03fc1ce986e5372c3b61606b8e5cd67a3da95dd1fe6b97d3ecd4c662cf3bef0a08a9a2","ssdeep":"","tlshash":"15d05bf956506579f1654d76501e490c84671be40663754920ae5429da5278045a1a50","first_seen":"2026-02-10T16:56:44.859089Z","last_seen":"2026-08-05T23:50:26.706105Z","times_seen":740,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-05","alert":"Sinkholed","trigger":"newcarderz.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}