{"report_id":"75e618da-341b-4e91-bae3-09414dd13a89","version":6,"status":"done","tags":[],"date":"2026-02-26T14:43:01Z","url":{"schema":"http","addr":"woodcraft-meb.ru","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"woodcraft-meb.ru/","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"title":"woodcraft-meb.ru/","dom":{"size":30543,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15892)","md5":"6077a7a8b7db434e478cf29c398373a6","sha1":"ec9c7869d5efd1beea552a96b099a775eec68330","sha256":"85906011287ff0190b1639bdc3ead49492b02ba9581307ea80c2f9cbee8c0e06","sha512":"0791ba967f4a780673185a79b5ef09fce85e157b1e1412f4679efaf5f8c13dd14816e5cda9a5e2a82b723008a86c9ec79aad6a6eb4819c22a639bd96a1bcb0f8","ssdeep":"384:2o1lnlai8dP2wfpfg1GVgVqcuFHCU5CwsrEzDLArsxg9lguKuFntXkq9PHRuW4NX:2o1yD+iVgoaYFQNrmHylguKuFXXd1a","tlshash":"74d29e77a483203b2600909099667f0dae694a7be99f9c9177dce1e82fdfd90c91731c","dom_hash":"domhash39185a69bc3f2424dfb332d1210f27dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"woodcraft-meb.ru","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-02T14:43:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc","ip":{"addr":"104.21.17.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-27","domain_rank":0,"first_seen":"2026-02-25T00:54:55.480171Z","last_seen":"2026-02-25T00:54:55.480171Z","alert_count":0,"request_count":1,"received_data":1673,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"woodcraft-meb.ru","ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-02-26T14:43:02.031613Z","last_seen":"2026-02-26T14:43:02.031613Z","alert_count":20,"request_count":20,"received_data":1135201,"sent_data":11862,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"woodcraft-meb.ru/","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb01e94d1a80847550cc58743d82784b","sha1":"d7fe2458326b0b69446612903862b9eb961a8fe8","sha256":"a849b3c76d4508fc90aacbc43143427204a8fe07963908d591510ebaff4e5421","sha512":"0ca26b0f44a7d83a8d83ceff608e8dede53e90ab55969882b7162349b46b8d8874169eb2cac017c0f0e1b9d9fc714d2b2126da6a3529e7a0f8250757707985c8","ssdeep":"","tlshash":"37f005953cdd44288377016527fb9148743965292c0afd15f54d84412f59eec14fb54c","size":538,"data":"","first_seen":"2026-02-26T14:43:05.945221Z","last_seen":"2026-02-26T15:43:04.390289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebdb6da2c5b8bbe3f6ba066ba975895b","sha1":"a9b8dfc03f2451b67a35e46705ef80d07d7a120c","sha256":"1c40d9038ba32e18774f2dcb68a01bfb378e89f069d53b8d43fbb579e8f45ed6","sha512":"91d744f19ac9692aedc821a19042a43fdf9a9891afb9c86b2d91a979145e41b7b1446808a7f2cb0d1e384a4ece85120c69ff812282377a1d4b4377c622ee19bb","ssdeep":"","tlshash":"58600033300c0003cc0c0c0300c00c0000c0003c000ccc303000f00c0f0000fc30c3c0","size":15,"data":"","first_seen":"2025-11-07T18:36:06.466308Z","last_seen":"2026-03-19T12:19:34.895414Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d76434440217651dbfe53beeb2be350","sha1":"fddcc91b4ad719494a039ae028a7760024d9fdbd","sha256":"b02eac6ed7442daddbe9d8358341d39a4a5042c30cc9af42b253ce4db78fedbf","sha512":"0fcfc094c4a9d99329dad04bd28d5d05806fbc95f91aefd960d02a57767bab11eddc7c8eb9a0041983beae313bf4137cf396cb1dc4701a0864b5108ff1e41e51","ssdeep":"","tlshash":"e111d4b9724474616e96a069576bd08ddabf23120cde4d1049036a948b34b2acfd5e68","size":939,"data":"","first_seen":"2026-02-25T00:54:58.632673Z","last_seen":"2026-03-19T12:19:34.896201Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"woodcraft-meb.ru/templates/KRAKEN_CAP/styles/style.css","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/styles/style.css HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1E9iBuAULs7NfK5X; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\netag: W/2130473794\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"e64a2c9536d74438497f49d7546dd238","sha1":"72f60e5616ce747a758e77056b1e9f35d5caf1fb","sha256":"b5f2f5b8acc41af5d1e493354718795990ecd36bfa05e02471546976c4c71b7e","sha512":"6fbb19853c1eea122f4ed7bffa1fbb138179897b343006a20c328f18cad24803381d10d62103218977a67154fb4f8bd0c133718729230d7ff54e7d41f31d95b4","ssdeep":"192:hVvIgYSG+I1dzTMsD7eLJu5f7wJCs52obc1pfutK:v+fP","tlshash":"2ee1bc49a6052005a2b3a97cbbb20b14eb6544635b8b91f979ec9348cff907942a1fdc","first_seen":"2023-07-05T20:50:20Z","last_seen":"2026-03-19T12:19:34.881959Z","times_seen":746,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/66096521101_blacksprut-ssylka-dlja-tor-brauzera.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/66096521101_blacksprut-ssylka-dlja-tor-brauzera.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Uz6YAgryx3fmf6Da; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:41 GMT\r\ncontent-type: image/jpeg\r\netag: W/1975127653\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":48170,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"85a1d9a9a1c735554259f455d63c6389","sha1":"c779a631431dbcaca53eb27926db3684c6059dc5","sha256":"add1e0f5579c8075a7d00b206975fcb61cf1b578a4f72f0eff50451bcd6cca8e","sha512":"86486be0e7221bc7e84964cb4b8c275a83275fffb5de626d56edf8dd96f929434632137507224459dfadb778e71128f873ea6c1cccddfc6daae6be9024090522","ssdeep":"768:SBHbykDUvztoRX8BXu7wxGZg+omdqgXFE5TUqA5j2bkitzdFc24qa0JN2:SNy9tSwe7EF+JHF8R+2Aitzk24t0f2","tlshash":"f623f1e3df18ab4aa5bc8b327d044c101705788a36463b6cf872dde97b26015edcca6d","first_seen":"2026-02-26T14:43:05.926528Z","last_seen":"2026-02-27T19:05:32.589786Z","times_seen":4,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/3303832dda9212dfb4458936f3e9dae7464e6cda.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/3303832dda9212dfb4458936f3e9dae7464e6cda.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p6z5HSt2C0Ea82Qc; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 25 Feb 2026 06:20:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 May 2022 22:19:42 GMT\r\netag: \"627d87fe-5113d\"\r\nreferer: https://woodcraft-meb.ru/\r\nage: 116515\r\ncontent-length: 332093\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":332093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1600x1200, components 3","md5":"6880a6766c10a4608856fbf6adf4cb01","sha1":"3303832dda9212dfb4458936f3e9dae7464e6cda","sha256":"926aa375db9c43702755533b185ffb7b2af2708ccd03fbcc98ce148833ea1c03","sha512":"2a90c377947723ef8f21d7b9e0aeeecf956bd7d6a9ed8761292b4ee3154c0bb11fcb1e76dca51667bdc9cc246566c119c742be527d93302b8c2c503fa0e10c1b","ssdeep":"6144:9yYNdLIVMHXwH2yd6VzjPYfQbg+2qXl05+ejixLgqVOeoQ+SAZog:9yqdL4M3wH741PYfQbo5qYvzjx","tlshash":"4264233483b56788779f1dd025caffc5f364f3e64469f7a08abaecf846a0b106a41112","first_seen":"2026-02-26T14:43:05.928099Z","last_seen":"2026-02-26T15:43:04.389136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/29450666611_ssylka-na-mega-tor-oficialno.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/29450666611_ssylka-na-mega-tor-oficialno.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=e5GRSs1On9tSGpsg; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 25 Feb 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Aug 2023 18:00:43 GMT\r\netag: \"64d7c8cb-9a32\"\r\nreferer: https://woodcraft-meb.ru/\r\nage: 116514\r\ncontent-length: 39474\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":39474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"d72d272366c266bc47400caae3665a40","sha1":"ff6116ffc4fc1a921cb65f2570de6588fd47b04d","sha256":"8471b00bd40b54e66975e2f978ac0c0db9ad2fe85682d3bf1a5c6a333db0f6c5","sha512":"77ffdc829fd3065b49a2f2a693472edfba0a54cf7364777ceef1fa1a1c42f3c9baae5695279bb002c2c54c9a8ce2ebbf306e98bec0ee6cd07481dbe6e6296a39","ssdeep":"768:SS9Lmo+YirvHqPu5COaBT9/Dd5/BgJx6/G5+YEVEJTIWnGjl/h:SSkbYizm7l9/DNgJx75+YEVEqh/h","tlshash":"1b03bf071c11db97a92ceec0bf232e416e92534259e578ae41a74d8f3ff49d388e905e","first_seen":"2026-02-26T14:43:05.929203Z","last_seen":"2026-02-26T15:43:04.379953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":39,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/templates/KRAKEN_CAP/img/favicon.ico","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:42.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/img/favicon.ico HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=4tN03OzmvFe4qqFS; __ddg10_=1772116962; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ur2C5hayJJyki8YX; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg10_=1772116962; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:43 GMT\r\ncontent-type: image/x-icon\r\netag: W/3404418428\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"8b49caf1ff0717a2b01e3da803e2ef2a","sha1":"90b0e92c2251150d6b5d1038842208f9ceeb407f","sha256":"2c195444f7cb1c9023cf1ca7c0d52cb6d116d22b4c96453b12ca356daf77cb65","sha512":"0c9066de2f26a1e9b35a117ab625f00a832d075d4b9683706566a9798633fa9de6f1c33763db4df550597d194af1b9dd0e6bfff798514e39faf97862d758743a","ssdeep":"","tlshash":"b32197cdbb20dc1de54ad0728086c2a2123a7859862a100ff0cd793b3b550585fa2e49","first_seen":"2023-07-10T11:55:36Z","last_seen":"2026-03-19T12:19:34.893621Z","times_seen":107,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/36302527071_rabochaja-zerkalo-gidry.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/36302527071_rabochaja-zerkalo-gidry.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XhBIACSmTJr4o1nz; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 25 Feb 2026 06:20:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 30 Nov 2022 20:02:54 GMT\r\netag: \"6387b6ee-a6cd\"\r\nreferer: https://woodcraft-meb.ru/\r\nage: 116514\r\ncontent-length: 42701\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":42701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"d99258c2d2cd547bf4d5633895aa5114","sha1":"adcd8b91287d390a9d9e5c0f5e20a382387e6d6a","sha256":"5fa739858e5be8207543e44b0e0845057e58e8fbffedb26dfb9f15342fa0cea0","sha512":"d271851529b51fb17406199dbbe50bee22f95732362715e1c690fb704824c2378551760a7f313e92ae1227e3c09cbc1f6e848b47c7989679fa6e833b34979240","ssdeep":"768:SCIYGsiI82l2iCx0Ra+uWC9fbvzmwwxgo6aZ5JzCxwQ21uIudAmd4wx6f0sM:SChGQCxIa+4f1HaTNSF6uIudQwcf0sM","tlshash":"1113e1950e45c333896de2f61b46217121ba7e586745a99c2e330842b7aead3ce4728f","first_seen":"2026-02-26T14:43:05.930593Z","last_seen":"2026-02-26T15:43:04.387262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":187,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/18369581861_kraken-zerkalo-ssylka-krmp-ccgroup.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/18369581861_kraken-zerkalo-ssylka-krmp-ccgroup.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=W9r71A6We9PFSsiV; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:42 GMT\r\ncontent-type: image/jpeg\r\netag: W/3381808523\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":50792,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"2627afeaae59023a9fcbab96a5d9810b","sha1":"bb4e53ea28791ec452d36223d808338aaef5b25a","sha256":"12a27ace762a0606ffe04330bf96d5f95c63c9a27f20c48d9fed988b8466587c","sha512":"23df322ec161ea35340682ae86ce2c8627824ccf50c75ba5f7ea030e8370ef634a28c8ba5db4eef249f126201f133e65ecaf4caa9b80ceecd13fb1ade4b85824","ssdeep":"768:SGzJ389nTAqQJgJMRIOQiPl0sZJTdsgbMg+DdStYPr/+ABqWz/Qojbevoev:Sq+TJQkzOQalTZlOPXDoiJkWwvB","tlshash":"2033f1adb35a2321ac2f0bbae4d175730ef13ed903179c39c21900d1f3696a463dca49","first_seen":"2026-02-03T03:54:27.528052Z","last_seen":"2026-02-26T15:43:04.376206Z","times_seen":4,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/42049082591_bleksprut-magazin-momentalnyh-pokupok.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/42049082591_bleksprut-magazin-momentalnyh-pokupok.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HU0Mk6BkVdiOg1sQ; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:41 GMT\r\ncontent-type: image/jpeg\r\netag: W/1396459814\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":51304,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"7edc4dcf229c1effd970c404da327514","sha1":"5fa1562568ed3225bcf377eac73d67c3d6aea27b","sha256":"fa685968891ee7275543250f0fa56bd7d095d41458a47dd1cad3eb3f53135484","sha512":"0bf533b72d086895fa8360401efa8690b43384b9768922590c666b9b917f22f6660cd2f15b4c40416eec9eacc0a69c87cd286206ad03d18889b2d975a6ea91c6","ssdeep":"768:SAihviZTuOQDg13GIU6y42lYZBntOw5ci+iUFtoZSYTOTpdzKD/6Mgww9d0JXdR:SAihvSu+12H6y4BGxQK7e6J9dUtR","tlshash":"8e33f1d7a8c049844d0c12aef6091f605ba93b5c83d15369db50ac78676dd3b0faa3ed","first_seen":"2026-02-26T14:43:05.932013Z","last_seen":"2026-02-26T15:43:04.385603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/10819426081_proverennye-ssylki-na-ramp-ramppchela-com.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/10819426081_proverennye-ssylki-na-ramp-ramppchela-com.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2CnbejewOwgDJzyz; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:41 GMT\r\ncontent-type: image/jpeg\r\netag: W/2216648190\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":35229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"4ae0b8de1a60aa36667944ceaff41199","sha1":"4571e9d7b33a2e1a991db743eaee9c14ca93a2d7","sha256":"ec4081feda0ac966c2fed33b5e2318b38ae8d7961aedc6e73949bdef6c20efcb","sha512":"18e58876593fbda9a68c8a2210ba5821e448bf9134e92368c9fc419df60d19f1757e668aee6c5414ea5baefd3c444dc13122de5cfd56543ef089bc935eba5a32","ssdeep":"768:SIL7sf4u5QNyD0V0itKL8BlOXFiw9dCBHwpY9h:ScoPWkwBk1hDCpwpih","tlshash":"2ef2d08761bb4841dc8d12fea7057c29275d3d9ab765b14b87f1af0affd9881085c838","first_seen":"2026-02-26T14:43:05.933237Z","last_seen":"2026-02-26T15:43:04.374038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/22635087831_poslednjaja-ssylka-na-kraken.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/22635087831_poslednjaja-ssylka-na-kraken.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VSn1d22cfXcifmpe; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 25 Feb 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 13 Aug 2023 09:56:55 GMT\r\netag: \"64d8a8e7-e7c4\"\r\nreferer: https://woodcraft-meb.ru/\r\nage: 116514\r\ncontent-length: 59332\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":59332,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"be5a98b2f7796fabd8a1bd2aa94dbd05","sha1":"4d84008cf56a15592d5bfb9dfde684010ade07bb","sha256":"b482f6a057fad382f2adf97835b0a2d300aef609a19fb3fcbdaa8d024fe4ec98","sha512":"8cb06a8c5cf693487a47bf53a1d49c7a52c5a09b92bd2b57c7e11e2fd23859f522eb2d0fee15b97222d7e40db6fcdf8f848eff3e4eca2c655c246f709a402885","ssdeep":"1536:SfsIQhNJ/xyYLoMPrqDL4S3ogN5VxDlNWhSmBhU:PN/N5Pr4fT5jlshJhU","tlshash":"aa43f121c793a026736877e72078a7b6213e85ba8f859dd09b10f7c67fc54d0e5831ae","first_seen":"2025-10-27T22:17:25.926316Z","last_seen":"2026-02-26T15:43:04.379173Z","times_seen":5,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":301,"dns":0,"connect":0,"send":0,"wait":28,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/templates/KRAKEN_CAP/fonts/Montserrat-Regular.ttf","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:42.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/fonts/Montserrat-Regular.ttf HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/templates/KRAKEN_CAP/styles/style.css\r\nCookie: __ddg8_=8gQiVPQGWOhre5RC; __ddg10_=1772116961; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rrCdwlPU40x9Sgye; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg10_=1772116962; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":197976,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", name offset 0x5200016d","md5":"5f72a800c0699be01bf0359713a8b2da","sha1":"fbbda4cd9c07481c558ae9683c927b455892afc9","sha256":"630f8ae712b7b6328e6ddeeddfc6e024a813091840f2021c40b4792fe0595fd4","sha512":"3b8e9fc37a60d784824bf142dd5b8d861a971e2e44292a600ffe52311fbf46d5f1ab6eeea084d3e5cd11a487c03439eff5e27ccde53b929ad0c0a433348cb6e0","ssdeep":"3072:X1lVLYf3EdzoWpiJ0ffmqPHmcmKjtsHhC+of6MuFLBLY7S5dvQFMxzpSKEELaAf:X1lVLYUrc0ffmqdSzvdVpSK1","tlshash":"5f242917fa17075ed5c68ff89ef80790a35cbe9c79148bc9c42e5160d78b9aa314ca8c","first_seen":"2023-07-19T05:17:54Z","last_seen":"2026-05-14T11:41:34.848759Z","times_seen":140,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/23142431201_fejk-sajta-kraken.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/23142431201_fejk-sajta-kraken.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WMxpaZS2sNVW85qU; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 25 Feb 2026 06:20:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 13 Aug 2023 03:37:09 GMT\r\netag: \"64d84fe5-a5eb\"\r\nreferer: https://woodcraft-meb.ru/\r\nage: 116515\r\ncontent-length: 42475\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":42475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"2663ce354bb892e9090c2f25989c3c82","sha1":"4e5afb2a06513e887782aa0d755886117e60b481","sha256":"242ec36583314c44f5f45c2f33deef6a98a4d7adc4dae30928118c0e48d8a88e","sha512":"4d7961fe66622a02e0bb30b5167f0661b422232f0a207b870ac0a993d5f21994b3b43039e862f7732ac2a34c5422324f26ba2b0d784cbc5f9ce93702b0226319","ssdeep":"768:SttQWG93O5qywdC9XCauLhPInpP2mgYemGd6tKw3LSG1yJDTM0JCl:StttD5OdAiLEpPngYem66gULcDTM0Ji","tlshash":"b613f10592c39040464e82745bbe7ee28939a44196edbd7df6b43db1731ac738cda20f","first_seen":"2025-11-03T11:05:28.721246Z","last_seen":"2026-02-26T15:43:04.375429Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/30128858771_bleksprut-anion-zerkalo.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/30128858771_bleksprut-anion-zerkalo.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CSEvcZaSBDmN2SlO; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 25 Feb 2026 06:20:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Aug 2023 19:41:30 GMT\r\netag: \"64d7e06a-9951\"\r\nreferer: https://woodcraft-meb.ru/\r\nage: 116514\r\ncontent-length: 39249\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":39249,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"499f4447688308d77d6b1058ff91c980","sha1":"93fdf133bb7fb171f9d9c20e811a35dc3bd33ccb","sha256":"9ee2014ec4db0c3889dc2579aff42db18f0e1868acda973f1ecbbff55dbcb940","sha512":"76bda06a3f5b4f008348f33809a4a7cdef90dbec2d6ea42ebc6096de985b2eae1a2ad3bcb2ab68adb38de7e630da2997a150ab891d299bd2b124013b30883db3","ssdeep":"768:Sj3wkUQcQ9KqNTTwV2++6oK/g7Cv67/GfwclGqKq8lNfV:SD3rKCwV2+LoKo7ovfVN58zfV","tlshash":"a803c08b8e88a3cb641c87717d473c0d7b050a0cf9d2a6a604429dd73f223b96d5dd6e","first_seen":"2026-02-26T14:43:05.938284Z","last_seen":"2026-02-26T15:43:04.368687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T14:42:39.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WsJiOHBLv1YEtHoB; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:39 GMT\n__ddg10_=1772116959; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:39 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:39 GMT\n__ddg1_=IpEtn6FR0LUMnzxVY37y; Domain=.woodcraft-meb.ru; HttpOnly; Path=/; Expires=Fri, 26-Feb-2027 14:42:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreferer: \r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31089,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15892), with CRLF, LF line terminators","md5":"988bf590f8c5b863e69a96c1d81cee9a","sha1":"e9e22459a22ca4a73ce35506380961f0d2809d51","sha256":"4d699068f82d3fb12b363e37b76868bc8781bfe24c7d533b09e1cc520f5fb2f4","sha512":"4e745564feb0d6dd51f7b6cd862feea581ada781a8577d0ce948bad10a54388a8a2ce296c92f676d622b06e7f53d266d73ff7a5bc905d4c70ab0e03e48e669d0","ssdeep":"384:1x1Znlai8dP2wfpfg1GVgVqcuFHCU5CwsrEzDLArsxg9lgulxcXkaFN17qlC:1x1uD+iVgoaYFQNrmHylgulYh72C","tlshash":"7ed28e22b447282b173081a489666b4cfe5943abeaaf5c5036dc72e71ffbc50c95771c","first_seen":"2026-02-26T14:43:05.939269Z","last_seen":"2026-02-26T14:43:05.939269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1872,"timings":{"blocked":82,"dns":11,"connect":20,"send":0,"wait":1711,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/20880574901_ssylka-na-kraken-zerkalo-onion-top.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/20880574901_ssylka-na-kraken-zerkalo-onion-top.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8gQiVPQGWOhre5RC; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:41 GMT\r\ncontent-type: image/jpeg\r\netag: W/2974388538\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":18951,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"56bee2d4aa7cc5b6a40ecf48b35f77ad","sha1":"8cda760cf1e500e55fad1a5f1f721eca38368077","sha256":"32f7bb258af0f0d8456c3e47215365fb32e67e9a8205bf03a06f2b1138b894cc","sha512":"06be472543969291bcf59fc7543b560cac6f2f8bd58f92b1ff9798417447fafcd2eb09e28723e9302ff3d7dc64b40c9e59495bfa8c872f725c919b0487b43943","ssdeep":"384:Sd6mai6fzzy363aTbmWJgjNs5MH1CZi7Tg5a+UatSsmC:SVIzy3rPmB7H+i7OfUarH","tlshash":"d4828c8b9908c787b42d82e5bc576da86f562749f58a39ff05130edf7a013324c8e09e","first_seen":"2026-02-26T14:43:05.940112Z","last_seen":"2026-02-26T15:43:04.38433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/PARSE/DATA/IMAGES/14129126781_tor-sajt-gidra-hydra-ssylka-onion-com.jpg","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/14129126781_tor-sajt-gidra-hydra-ssylka-onion-com.jpg HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9nlOX7cvHdfe4Flk; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 25 Feb 2026 06:20:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 22 May 2023 18:49:59 GMT\r\netag: \"646bb957-722c\"\r\nreferer: https://woodcraft-meb.ru/\r\nage: 116514\r\ncontent-length: 29228\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":29228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"cfffe43a460309cdb04f2c49d02eaaf5","sha1":"a2437fef11683fb4f5f539c89ee7b367055bfe26","sha256":"e5e981d48cec2353c2c5372c0d606116b560d78b9bd7d8c2250ba3135a2d3ab6","sha512":"b5f8a697f0aab2c1f5035aa03b60cb0ae56f226a6bb64b5af98a2198835aa251fa5f956c7dda813fd132e52c8e5ff5855de083e50252abe4c95149d257e1b219","ssdeep":"768:Sb34VSlLuG/vN/MA8fduI3OB21ICCqCIqf:Sjp7vtcfdU21gp","tlshash":"2bd27c0b5c194792f93d15e9bc934edc3f092e0df89228ff46660ed67a349662c2e439","first_seen":"2026-02-26T14:43:05.940818Z","last_seen":"2026-02-26T15:43:04.363795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":116,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/templates/KRAKEN_CAP/img/logo.webp","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:41.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/img/logo.webp HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/\r\nCookie: __ddg8_=WsJiOHBLv1YEtHoB; __ddg10_=1772116959; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cGbcQXaA2ZgWVAQ0; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg10_=1772116961; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13996,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"RIFF (little-endian) data","md5":"5300a98bf7f37b997fe648378208b746","sha1":"9c37be9ed0f900df6d1ec76c31c55f0f5e1d0619","sha256":"afec6c7de8ee787409e548d14e06a7c4e0fb825fdc66214dd6558d6fa21e2c4e","sha512":"84e69b67f7af6fd7103669b00b52c755fb24407a2b3d62ef28ef6c191d0efcd652c2cdf5367a89250bda0f4cbf2730a898bb7e7c5eb1292c24f5d77e4cee2b4a","ssdeep":"384:9Bgw9Pw8a4XeO6Y1YX43hCej6YbErEXHxt0MeAx3K8C+xq1Q:vgwtI4XeOwX4xCelxXxG0g8nz","tlshash":"0392bf07224e9361c2fba0f9c55b1bd8d4139680b7d6ead4c508f2e15cae724f69d8e8","first_seen":"2023-07-13T18:41:18Z","last_seen":"2026-03-19T12:19:34.886135Z","times_seen":104,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":356,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/pbn_save.php","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:42.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"POST /pbn_save.php HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://woodcraft-meb.ru/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1572\r\nOrigin: https://woodcraft-meb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=4tN03OzmvFe4qqFS; __ddg10_=1772116962; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1572,"data":"key=hu8qr0gh8nicevewr\u0026html=%3Ca%20href%3D%22https%3A%2F%2F03magadan.ru%22%3E%D0%BA%D1%80%D0%B0%D0%BA%D0%B5%D0%BD%20%D1%81%D1%82%D0%BE%D1%80%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fforum.zane-rp.ru%22%3Ekraken%2020at%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fkraken-sale.ru%2Fkraken-ssylka-registracija-kak-kupit-kraba-onlajn.html%22%20class%3D%22btn-manual%22%3E%D0%9A%D1%80%D0%B0%D0%BA%D0%B5%D0%BD%20%D1%81%D1%81%D1%8B%D0%BB%D0%BA%D0%B0%20%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B0%D1%86%D0%B8%D1%8F%20%D0%BA%D0%B0%D0%BA%20%D0%BA%D1%83%D0%BF%D0%B8%D1%82%D1%8C%20%D0%BA%D1%80%D0%B0%D0%B1%D0%B0%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fpolice-club.ru%22%3E%D1%81%D1%83%D1%87%D0%BA%D0%BE%D1%80%D0%B5%D0%B7%20%D1%86%D0%B5%D0%BF%D0%BD%D0%BE%D0%B9%20%D0%B0%D0%BA%D0%BA%D1%83%D0%BC%D1%83%D0%BB%D1%8F%D1%82%D0%BE%D1%80%D0%BD%D1%8B%D0%B9%20%D0%BA%D1%83%D0%BF%D0%B8%D1%82%D1%8C%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fuaz-design.ru%22%3E%D0%BA%D1%80%D0%B0%D0%BA%D0%B5%D0%BD%20%D0%B0%D0%BA%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5%3C%2Fa%3E%0A%3Ca%20href%3D%22https%3A%2F%2Fyour-perfection.ru%2Findex.php%3F%2Ftopic%2F64-kraken-%25D0%25BE%25D1%2584%25D0%25B8%25D1%2586%25D0%25B8%25D0%25B0%25D0%25BB%25D1%258C%25D0%25BD%25D1%258B%25D0%25B5-%25D1%2581%25D1%2581%25D1%258B%25D0%25BB%25D0%25BA%25D0%25B8-%25D0%25BD%25D0%25B0-%25D1%2581%25D0%25B0%25D0%25B9%25D1%2582%2F%22%3Ekraken%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%20%D1%81%D1%81%D1%8B%D0%BB%D0%BA%D0%B0%3C%2Fa%3E"}},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QzlTxiZsuchvkob4; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg10_=1772116962; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:42 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T05:23:15.016877Z","times_seen":543894,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/templates/KRAKEN_CAP/fonts/Goldman-Regular.ttf","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:42.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/fonts/Goldman-Regular.ttf HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://woodcraft-meb.ru/templates/KRAKEN_CAP/styles/style.css\r\nCookie: __ddg8_=8gQiVPQGWOhre5RC; __ddg10_=1772116961; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HTt1MGBmZGBNJOsh; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg10_=1772116962; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":77276,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", name offset 0xa9000005","md5":"a46de11151df704939107617999a4d7f","sha1":"a54569b16f2f9ba2fcf23c42810860483c22c5c9","sha256":"69307446f5aaa5e84bb5c07156e4244d65dc64bffde8877a470e8ae446f3c9f0","sha512":"ff891c44e5b273fe1202380c0beae757bc56708a033546c9202e65eb8ae4702a1abed85dc08b1080ab420d3cc07f3a2d69fa1c0bc9053ee309ae1a48f605aa76","ssdeep":"1536:Q9hLvIjebpyYKZTVkX+Wlp3S4sacFlwF2RcPr3DN:2lv+ebpyYKN+X+WDS1aO6F2WPr3R","tlshash":"52832a17a710a759e5714ff47e9da38037acf4ac3805538ad01c5aa36f4f8983e4ba9c","first_seen":"2023-07-19T05:17:54Z","last_seen":"2026-03-19T12:19:34.878988Z","times_seen":102,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"woodcraft-meb.ru/pbnlink.html?_=1772116962240","fqdn":"woodcraft-meb.ru","domain":"woodcraft-meb.ru","tld":"ru"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:42.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"woodcraft-meb.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:27:48 GMT","end":"Sun, 24 May 2026 08:27:47 GMT"},"fingerprint":{"sha1":"BF:34:97:D2:4B:5A:62:C3:8E:E6:B3:DD:5F:69:3D:AD:CF:AD:09:D8","sha256":"F7:B5:70:79:68:9B:9F:3C:1D:32:16:C3:37:B7:DC:60:C8:D8:F6:76:9C:5B:9C:CD:CD:51:26:FC:89:C7:97:48"}}},"request":{"raw":"GET /pbnlink.html?_=1772116962240 HTTP/1.1\r\nHost: woodcraft-meb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://woodcraft-meb.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Uz6YAgryx3fmf6Da; __ddg10_=1772116961; __ddg9_=91.90.42.154; __ddg1_=IpEtn6FR0LUMnzxVY37y\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4tN03OzmvFe4qqFS; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg10_=1772116962; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\n__ddg9_=91.90.42.154; Domain=.woodcraft-meb.ru; Path=/; Expires=Thu, 26-Feb-2026 15:02:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Feb 2026 14:42:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreferer: https://woodcraft-meb.ru/\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5457,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5326cc19cefbfe08f69da3677a673f64","sha1":"4eb84ffb4dc9322643bf38ae9e45755fdae38faf","sha256":"7402187b5d1517d554649b65aab0836b07a6ef552a0ea6a57ff554a059b0a1ea","sha512":"e5db5707fb9b505cb2305e84c40fe73bd9e3835c2695e906a3407577c3af413bd9290880247232e6663bb9cbd200e7f4bd36bc31b524b29e1043d126e57c7f67","ssdeep":"48:tTX49Y2QGEbqiUZ5KX8zotiXttPIv4WBf31lBKCmRCJk:ZDnGiUzPoMC4WBP1j7Jk","tlshash":"76b12124e64a14423232d2686fa25e19ff864173d70645247bdc23ab4ff7968c6a3bcc","first_seen":"2026-02-26T14:43:05.943569Z","last_seen":"2026-02-26T14:43:05.943569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"woodcraft-meb.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc/get.php?site=woodcraft-meb.ru","fqdn":"secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc","domain":"avocadodevelopers.cc","tld":"cc"},"ip":{"addr":"104.21.17.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://woodcraft-meb.ru/","date":"2026-02-26T14:42:42.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avocadodevelopers.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 14:34:35 GMT","end":"Mon, 25 May 2026 15:32:17 GMT"},"fingerprint":{"sha1":"EC:58:74:51:6D:59:3D:84:2A:2B:E1:D5:5E:61:C8:44:0E:FA:BB:37","sha256":"0B:3A:9B:A8:58:A7:12:4B:98:3F:8D:8D:2C:64:03:59:82:12:E2:B0:F1:F9:41:B8:62:AE:52:CA:1A:D7:10:70"}}},"request":{"raw":"GET /get.php?site=woodcraft-meb.ru HTTP/1.1\r\nHost: secur-kfeu9whfg8w2g3rfunifuihg87y.avocadodevelopers.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://woodcraft-meb.ru/\r\nOrigin: https://woodcraft-meb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Feb 2026 14:42:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=ldbkfeqjd4f64bm3cckss1nbr0; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5et7BRDhZcH%2B7eBu1NCQ2zcBBxahCrvMTMQfTrPJeBsMmVLx%2F%2BVFov5xjtiKLGFgT36Ca%2FfzKm46MZQsB7aoV6WLQ0rnryd9iy15V4siRgYqiMjMzTNfHaeRfxA%2FPg4dFP8HH%2Bi1veIvwoeGMs5Th%2FEDqj1Lzw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d4035e50db99e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1a604351824d9aea91d8f7a8a27ad7f1","sha1":"b31fa1a83af49bc8687743d09a44fcd46a9ce033","sha256":"bf5981d0cd5a6b1658c9423bbcb8487fe6232aa44f84ef8362868ec6ad2b6f3d","sha512":"52ac80716e09fa90ea1668fff22f839c1274b47b5a2ba7d5ccf2ec9812598291a82b14bb7f48bbe8e1d74a378caf560a417ce0962e5da67a197f037a0c42f1c2","ssdeep":"","tlshash":"5b016df5a35968e9424731c0cd04775f6893526e1cf6749155913d1bb8fcba4890a38e","first_seen":"2026-02-26T14:43:05.944431Z","last_seen":"2026-02-26T15:43:04.366414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":66,"dns":25,"connect":8,"send":0,"wait":122,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}