{"report_id":"9c7c9e40-302e-4b90-86e5-6cf96d0ca10c","version":0,"status":"done","tags":[],"date":"2026-09-20T21:29:11Z","url":{"schema":"http","addr":"zuza.stefek.szczecin.pl/","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":0,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"final":{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"title":"Kosmetyka \u0026 Podologia","dom":{"size":27744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6420)","md5":"0b6a2844b9d055840bd283a72d8831c7","sha1":"bd905568283ba4914a5b4766fbf6a10d41c80cde","sha256":"603e74b14464ccb76c797cba902ee7694456d7c2b1abeee54b677e60f85d61de","sha512":"09010be948be990a2f09fa0f11f1f9f92f54d505bc7fa6a45e54b14784be999f91438306f07b97da80600adb91c512649140652abf286da0fecd09fd46aa7cee","ssdeep":"384:m03Z+FFooBdbPnI1eMl9OC1fOTwrQVMsZYWA8se67ji5l9lTc8igHzexnSZx:/3sjBxPI9Faqo/PsLW57l/HSUP","tlshash":"5dc229304386283f981e00ddf1b52fe905de553bf33259a4dd3f057aa69928a153e2ed","dom_hash":"domhash2a8a8315ec2bd66d4d60b62e51f46a48","first_seen":"2026-09-20T21:29:28.101256Z","last_seen":"2026-09-20T21:29:28.101256Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zuza.stefek.szczecin.pl/","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":0,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T21:29:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zuza.stefek.szczecin.pl","ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"domain_registered":"2005-07-12","domain_rank":0,"first_seen":"2020-02-24T04:08:02Z","last_seen":"2026-06-02T10:58:24.972563Z","alert_count":132,"request_count":33,"received_data":1760250,"sent_data":19715,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:1.7.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":2,"received_data":35646,"sent_data":1203,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":6657,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"domTimer","is_inline":false,"md5":"90ee3549067cdf258eb0601958a36a9c","sha1":"f7c350f43b78013c81a04eb94812c047c26a17df","sha256":"4fe3d1cd91c0614137f8bbbeb2d06026c9b8a14e2c8013b5e72d3eaabdefa5e6","sha512":"bc45090756382cd90c35528ca6e2c384376e9f8cb89ef02870228c660586bfc0685d67bb24a508e96045bf85e45c8bc3037a8e09e9a5633fa809aa010d1462de","ssdeep":"","tlshash":"5ba00000c030f0c003300c3f00c300f0cc330000cc3000000000c000030000f3000000","size":78,"data":"","first_seen":"2025-02-01T21:23:38.151577Z","last_seen":"2026-09-20T21:29:28.150208Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"eval","is_inline":false,"md5":"2e4bae0f6713bee3ca06023750832ad1","sha1":"f3a067795d66de08ef6d10a5e1c84b1c4d04388f","sha256":"fb70a89f1a13e1c58948f99120ec90a086aa2a8baeb6be8f0122fee9e14f2d88","sha512":"0449a3f89b366e4078be0b9fc51763a3be774283cd982ebd6dba0c3eaaab9d2d92ebc6eb4fcd6ba2876df5db8264447a39edceb31caabdd1c4365763e2bf5a51","ssdeep":"","tlshash":"184000000300000000000330000000000003000000000000000030c000000000000000","size":6,"data":"","first_seen":"2023-03-12T23:47:46Z","last_seen":"2026-09-20T21:29:28.151372Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b307e7b75d6f38da9c7cd818ec880efe","sha1":"64a3e44523bebca7cebb85b8103382f2ea740df8","sha256":"ef805cce32634494b27fe333f3e546a8e9bf777d16d04053989050b15a6458ef","sha512":"50458e1688051cc17a24229ba496c92584d59b4629beaf0169cf0f132b03e98da65dc4e96c8ae125ab38aee7f9e02846cadf7b92beb1b1e4489f6870278d5d94","ssdeep":"","tlshash":"fab002712637591942162f06607496a47d7244646a13681e831cb4752182e49f9bd937","size":98,"data":"","first_seen":"2026-09-20T21:29:28.152719Z","last_seen":"2026-09-20T21:29:28.152719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"769dce162c14debc981568ee8f516b58","sha1":"0f4f49217ec1d0595839fd931659631ae2908ebb","sha256":"4792279059551e2c4a25c9578bc7cfb640b5b648997639432f018c4cea5e6c08","sha512":"199b5f2754341384f62ca33f82aff72e212c3c43583145d3a1bf1bf732da770d44aa3a04690b316624371f08ca0acfa3ad317a129747941949d920682cfddeb0","ssdeep":"","tlshash":"4a51bf321615313593791a85f54a1acd296af437386c4e50d314edbcaf349ef107e2cb","size":2770,"data":"","first_seen":"2026-09-20T21:29:28.153856Z","last_seen":"2026-09-20T21:29:28.153856Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"af5e2eed489c3f41ab8bba83c6496614","sha1":"2bba1269dfb06ceeaf66270e47e8400d40529c7f","sha256":"85bf187c35d238cf3edcfbdd6bbcd9e7099113eb62d7b33a84a762d64191c053","sha512":"470f1d2b355d5dcf5781781a0566ad289a2c2e92dbb2f483e2ca0688f016530946f413b70304c79924a52de013daa56c5ab892c61e500579983f8a9466e0653f","ssdeep":"","tlshash":"a2e0f88c343c18db402365fe33b2824d38952104a90298238a2e818ea04098b40df09c","size":396,"data":"","first_seen":"2026-09-20T21:29:28.154945Z","last_seen":"2026-09-20T21:29:28.154945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/assets/javascripts/jquery-1.7.0.min.js","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"25721ced154b3a99e818431446d7506d","sha1":"3f1b0e9e54af1af2db2c8a639530448723462151","sha256":"ff4e4975ef403004f8fe8e59008db7ad47f54b10d84c72eb90e728d1ec9157ce","sha512":"3eac74655a1c1c24b34cb2b8a66d0685c707b4e4fa7e6673fada9f60757f96523ad2007db2bf63922aaba9213014922bce97191073c98ecab819c0bbdf550d5e","ssdeep":"1536:YbRdUgxV11T56e7evPJoHG9N5TTApILdoABzD4yff8qeLvHHEjam7pmXSBTncquT:SXrRKN5HaObnNCVqPO","tlshash":"e493e8d9b2d6716383b731b854af5107b136a8aa784c8c50f068d8e4be74e48907bf7d","size":94020,"data":"","first_seen":"2023-03-07T12:02:44Z","last_seen":"2026-09-20T21:29:28.106978Z","times_seen":1809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"eval","is_inline":false,"md5":"c2a56566a5e7ecb24408925377de9a3b","sha1":"86e6e73f4ba7379b1ef7470f4699be7945cb0cd7","sha256":"f1dc31600a4f8a6d8213ee391ad89233761674cf98f9ec3e874c5c7611b8d8f3","sha512":"25239bc5fe7e46b30ec42b00b3446fece7914a52374ea4bc9df856357cea5c57b3b0e8224fea8dada239a43f736846be8a079ec1479700cd890fc928fcee4cca","ssdeep":"","tlshash":"eb300000000000000000000300030003000000000000c00000c0000000000000000000","size":4,"data":"","first_seen":"2023-03-12T23:47:46Z","last_seen":"2026-09-20T21:29:28.157232Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"eventHandler","is_inline":false,"md5":"5638f3361135e904efb76be5dd3dd792","sha1":"90415dbdf8975ae1db44471a65dc3efc4072be71","sha256":"7642188c31174f3c409c56cff768911a235410d428b0a049d91b0c801df230bb","sha512":"48a477ac9114655361fc3c51795051d31fb55199eff7ee8f32a34d8a3b8e49bf82bf39d516fcb02d871e71c836bb466409d5ab0dbd49ba90c66dbdbb67c2eaa0","ssdeep":"","tlshash":"2690040f1f3d3117010d701f357d305c45134c074c50c344f15c50c1f545710c534550","size":47,"data":"","first_seen":"2026-09-20T21:29:28.159634Z","last_seen":"2026-09-20T21:29:28.159634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"eval","is_inline":false,"md5":"32528290996be3248a55eea3cbc7725d","sha1":"c547e22fb9043b66e95dcdaf9ef8a9e89ce45a8f","sha256":"a3b9c57584000f022ee1aa987941388a7cf6fbe4217cd58791d884aa67228d5f","sha512":"5edd669d77fcf72d8ce8381bdf3afdf34a7061fa116db1c95ff9e664f12dad94dfa4e3fb7869b0ca88dda32e3cf3023f91d99c7a0145e2491df1306ca949c993","ssdeep":"","tlshash":"5e9002300411a825d85944685ac64d15081304110d1c486d4a68019041563071c810a9","size":49,"data":"","first_seen":"2024-12-22T15:34:30.035169Z","last_seen":"2026-09-20T21:29:28.161682Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/stm31.js","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c566d51d0ba1895f1474a74c378e99a5","sha1":"326620c932ac51b4af0dbc6d8f7b62a43cb2e530","sha256":"a22aad84eb415694d992c54b449f05a60243b773486f492307391a8c6c640283","sha512":"21dbfbce1e2fadb74ba35a5e2297e295353187bcf6b069ec1dbbf826f67851d84aae019035b7c8cd75130bac75b3e2ddf55d8014e3e5fc69a7fdd67be5f8e9ce","ssdeep":"768:38ZwcVbEK/24+Dh3xQmydj6FpSwWc2OxTvTeZGKdfoQtDg:ywcV1IhB1ydj8Wc2uTvTeZGXQtDg","tlshash":"58f23a387255213f42eff2e6680fa7842db35438a705c068d11fe1e42fa4eb79967d68","size":36653,"data":"","first_seen":"2025-10-17T13:20:40.459553Z","last_seen":"2026-09-20T21:29:28.109413Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/release/featherlight.min.js","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d960f115765d4962e8f88dd663ba6fe6","sha1":"f3a1a8fe27dcaf3368b3630e6dcfab8a399167f2","sha256":"fd21104dc97db6fc980c0f12ba157f3cc9fddac84dde4367f02f6f9db05c13d6","sha512":"d146d1e87374758f1f58df53edf17ae7cf3deadb0f8276d14441c236ae3a27dfc94a7f06a275c3666aad4dcdea4bcefd18cd33578f5bf4b3e175cfe668a3fc2a","ssdeep":"192:HD3IGDZV0BSMpN+GAS4jDxfy3pj6ZdRIYrfX4WUbVieetM/o:HbbEBSigS4jDxfy3B6/RIYrfIFGq/o","tlshash":"5412c6aab3a5e0614373a978712f310bf23b545ea9098062b49dc4d47dbbe495037f3e","size":9220,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-09-20T23:09:19.588026Z","times_seen":1073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"introduction_type":"domTimer","is_inline":false,"md5":"7793c0bceb343150c6b787f8010840aa","sha1":"0fd685ce05521b3e4a14c1318d98a2239322325d","sha256":"2c318e33449cd0f4246b58219a4c9d6e15256fea9aecb0c8eac431f0d303c029","sha512":"bdd85ff7a99b5529843893cd0328f29d7f68c88122b9105b82f8b40dce88fae12591a04930e20a39af699c9f7f34edc6cffbb73bf5cc4b6bb62b9bab6207a63f","ssdeep":"","tlshash":"94a00000c030f0c003300c3f00c300f0cc330000cc3000000000c000030000f3000000","size":80,"data":"","first_seen":"2025-10-02T04:56:27.17977Z","last_seen":"2026-09-20T21:29:28.176567Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/grzybicaw.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.783Z","timestamp":1789939722783,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/grzybicaw.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:15 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 144144\r\nKeep-Alive: timeout=15, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":144144,"size_decoded":144396,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"b259ab98ffcd42cab23a3c555e08f619","sha1":"d4502a61b76d42a5f2307afedd4e732d0ffc470f","sha256":"2c0fd16064c27b29ad3e8902f5974dec2789e3ef85bea06f522abeaf75e726f4","sha512":"7e166a0c4f3b5781c301e4e9c9e0bb2609a032d2efbd36a5e2e9cacdaefbfa0fafeef2ae20ae22c66a674b0f2ef00d4f305a52aa5f04ec29084a76dd5f1aa01b","ssdeep":"3072:c8hQfSvd8gnznaiUCq2mi7WdjpXuNO/VD8dCg7cynno5lZs9hPrI+W:cmQfSvdjnDNbmi7zNO/VD8d3cynas3IB","tlshash":"10e32200f24495c9caeab59b4304a563985a2f5c8097657086ff08edf7afef4f8167c1","first_seen":"2025-10-17T13:20:40.449631Z","last_seen":"2026-09-20T21:29:28.103264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":323,"dns":0,"connect":0,"send":0,"wait":43,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:43.018Z","timestamp":1789939723018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zuza.stefek.szczecin.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15380\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:38:18 GMT\r\nexpires: Thu, 16 Sep 2027 10:38:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 384625\r\nlast-modified: Mon, 15 Sep 2025 16:29:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15380,"size_decoded":16193,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15380, version 1.0","md5":"e1a2aef42b3c563534d546605b4b03d6","sha1":"67a1c6e71ee8f70c3ebeb547fda7b0732eb80183","sha256":"c260ffc9d1acb022e1037cb8ffc8baa8fe8c44c2ae74429d3231c7ce6d2b7f21","sha512":"da0629a9a810f869e7ed2fd9b8cf2d269ac369c34c8c901dc08756707469ad576f02ef3c02e1473b17934242785fb25e7cbff1ec83dfcceb52b5f30f7888975b","ssdeep":"384:DlxKwQU0OXIzKuMxPjF50cIlVzgRFF9ZQfTgy88gE/:DfK9rzkxPL3JoU89/","tlshash":"6e62c0864c6afa9286911ee23f266d3fb5989b1048d34a37474c166acc871b76c9f05c","first_seen":"2025-05-30T15:22:21.120029Z","last_seen":"2026-09-20T21:29:28.10458Z","times_seen":2357,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl1_05.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:43.034Z","timestamp":1789939723034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl1_05.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:31 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5175\r\nKeep-Alive: timeout=15, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5175,"size_decoded":5426,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 208x188, components 3","md5":"61e19bd5e63358985759dfc0a77e00d0","sha1":"dac9298deb8ba51b5d58cbf5551f6496f9321ef8","sha256":"91e6343158d7cdea658dd796492db4a78fe5d92a77cbcdf984f1a1041f5a26f1","sha512":"8c6e5261f04ca86f6cee2029deedfcb247dc9658c042c9f4b241f89d49307aff7c361a12e66dc6fbc1583db5959d9ed64807c2c93cfa84b882c21b75b1bbf23e","ssdeep":"96:5o7FbAknsxPHPQ9XL/5gkCTEoZUDMzdm8MvRnMQZzkPm+6D7Z0HKqK/////v:O7FUknsxPHPoxgKoOo5kVMQ5k+Z+HKq+","tlshash":"08b13c1af2538711c680f87b1dfe047a511717819eb15b8da8b20ca3ecf04f65e6c889","first_seen":"2026-09-20T21:29:28.105345Z","last_seen":"2026-09-20T21:29:28.105345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/assets/javascripts/jquery-1.7.0.min.js","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.768Z","timestamp":1789939722768,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /assets/javascripts/jquery-1.7.0.min.js HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Thu, 12 Apr 2018 10:39:30 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 94020\r\nKeep-Alive: timeout=15, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":94020,"size_decoded":94278,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"25721ced154b3a99e818431446d7506d","sha1":"3f1b0e9e54af1af2db2c8a639530448723462151","sha256":"ff4e4975ef403004f8fe8e59008db7ad47f54b10d84c72eb90e728d1ec9157ce","sha512":"3eac74655a1c1c24b34cb2b8a66d0685c707b4e4fa7e6673fada9f60757f96523ad2007db2bf63922aaba9213014922bce97191073c98ecab819c0bbdf550d5e","ssdeep":"1536:YbRdUgxV11T56e7evPJoHG9N5TTApILdoABzD4yff8qeLvHHEjam7pmXSBTncquT:SXrRKN5HaObnNCVqPO","tlshash":"e493e8d9b2d6716383b731b854af5107b136a8aa784c8c50f068d8e4be74e48907bf7d","first_seen":"2023-03-07T12:02:44Z","last_seen":"2026-09-20T21:29:28.106978Z","times_seen":1809,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":58,"receive":93,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/assets/stylesheets/bootstrap.min.css","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.747Z","timestamp":1789939722747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /assets/stylesheets/bootstrap.min.css HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Thu, 12 Apr 2018 10:39:31 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 97339\r\nKeep-Alive: timeout=15, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97339,"size_decoded":97589,"mime_type":"text/css","magic":"ASCII text, with very long lines (65316)","md5":"4eadbf7d1721bb2729e398595bc7f0bc","sha1":"cde1a9a9098238450afb8fccfce94c22fa2743e3","sha256":"1cbda21998b65e08a7e936114cabd7f7783d0f590dd6efdd58c7faa8b6e7b9aa","sha512":"2a7f594ff849d49936246e8744037eff8cb79aa06d3fb0ef3885882896143f07c04b9b5b0669cc3b11129603e0ab829004a95e35becaae3c71d86e1dac0dad2f","ssdeep":"768:B0R3TpxU9yqZ2hMDJXAHozUcVslfi3E3FI+p7Q6mRbca8DserbIFjCUL4PlOAysl:HbNAIzFEq+pG2mKVmsZP3IguCPxXPL","tlshash":"9f9396a1f110349a7333c11b71c0fe9f2659a152ea168e77f22b69dc4f851ca0762f27","first_seen":"2023-04-05T04:34:17Z","last_seen":"2026-09-20T21:29:28.10761Z","times_seen":3057,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/pi%C4%99ta1w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.778Z","timestamp":1789939722778,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/pi%C4%99ta1w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:17 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 114663\r\nKeep-Alive: timeout=15, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114663,"size_decoded":114915,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"be1ab76cce76b6cf1801d5d287dc9695","sha1":"5bdb81a6929ab82d5d1a6ebe30c9ca050e61feea","sha256":"251344b2534d902d137bc6616985bd3099e4cd69db462bfc541ef7f6bd23b84d","sha512":"b4564c9bf0c487cc4c7411297b22d1c4322b20dd93ce43f7a71de5cf03c1ed5013baf5a795a6a87d8717937269db1c42cf39e03972b96f8f4ad96e3c70d8d0b0","ssdeep":"3072:DDzKwHgF8sjp3WarVUPKRMM+Ac+CZ7dRC:DDzKTF8gp3XXRM3Ac+CZ7e","tlshash":"9db312d008381922edc37c56d8e56aafa26d78cedf09b16f52bc0cd7f48690970a7d84","first_seen":"2025-10-17T13:20:40.338133Z","last_seen":"2026-09-20T21:29:28.108197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":32,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/stm31.js","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.749Z","timestamp":1789939722749,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /stm31.js HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 09:50:07 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36653\r\nKeep-Alive: timeout=15, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36653,"size_decoded":36911,"mime_type":"text/javascript","magic":"HTML document, ASCII text, with very long lines (3651), with CRLF line terminators","md5":"c566d51d0ba1895f1474a74c378e99a5","sha1":"326620c932ac51b4af0dbc6d8f7b62a43cb2e530","sha256":"a22aad84eb415694d992c54b449f05a60243b773486f492307391a8c6c640283","sha512":"21dbfbce1e2fadb74ba35a5e2297e295353187bcf6b069ec1dbbf826f67851d84aae019035b7c8cd75130bac75b3e2ddf55d8014e3e5fc69a7fdd67be5f8e9ce","ssdeep":"768:38ZwcVbEK/24+Dh3xQmydj6FpSwWc2OxTvTeZGKdfoQtDg:ywcV1IhB1ydj8Wc2uTvTeZGXQtDg","tlshash":"58f23a387255213f42eff2e6680fa7842db35438a705c068d11fe1e42fa4eb79967d68","first_seen":"2025-10-17T13:20:40.459553Z","last_seen":"2026-09-20T21:29:28.109413Z","times_seen":2,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":31,"receive":77,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_01.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.755Z","timestamp":1789939722755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_01.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:35 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 62673\r\nKeep-Alive: timeout=15, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":62673,"size_decoded":62925,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 989x418, components 3","md5":"d6949cd8cd154afadcb073f54ded4621","sha1":"ac749eb9bf296211077d06050e935042fe9c22c3","sha256":"75b61d2ed518134d2da5a98079b1c850858f1088cc71c51d8efde86be12f62f0","sha512":"4fec0a239dc8be8b4c7fcad4999b8c6e3e354403f98d9242a866d4cd561a9f8311171425d9d8fed9f3df532ab39e8768037a52b554d208ccb25cdc36acb2ab42","ssdeep":"1536:clsDBmyyPuvV8fgxRmWGO0/dbxvBKrR6bsyY1vTGbO1N+y14KZtt/:77RkWodbywsvb1Nx1FT1","tlshash":"0153f1157000ab2aee535bae90bb8a895f7c2d40a8f074f075b814f79087aed6c71b13","first_seen":"2025-10-17T13:20:40.245711Z","last_seen":"2026-09-20T21:29:28.110951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":261,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_07.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.771Z","timestamp":1789939722771,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_07.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7356\r\nKeep-Alive: timeout=15, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7356,"size_decoded":7607,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 208x188, components 3","md5":"cc6d1b9e5dd9f92641bc032cb2be1de2","sha1":"d3ce0f978dd90907f1c65e47a531c57a58c7960f","sha256":"0e2db6dd7bbb4783e950c8d1f27b0a864f6acb1ec19153d7dd6a1238dd016137","sha512":"e09aef5d9ce7bc2b669ca200f791a253dfa9e93c45a25e72e6b9de7e3ab0ce01865c62c1ce796ee42c8a98e4c75a8fdeb03566feecb198e40027ff46b731c45f","ssdeep":"192:O7FUknsYawxMNhI/ucXbsuurX0xnBEfTfEaOjIgMcl7v0W:O9nsxnNK/ucLsVExnBEfT8nBMkT","tlshash":"05e13c4ce3065fc5c5cda97258ff72627e4be8b0c1e049a999b3540758271bcc51f199","first_seen":"2025-10-17T13:20:40.368637Z","last_seen":"2026-09-20T21:29:28.112212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_09.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.773Z","timestamp":1789939722773,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_09.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1514\r\nKeep-Alive: timeout=15, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":1765,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 208x46, components 3","md5":"527c2445c259d111f9209631ffcc110b","sha1":"ed9a42b31ac1ae9a32757d54b9063e15795250b8","sha256":"c44146233d65033290f0b131bec9732b737617cc1afa152d4c2d5efd24002627","sha512":"dd8d1443e3278d4f9d29824de0ad45dd74550adfd1b07909d98bb1436b288aced78564d10821bf555cc27ab578a481e03565e11bd21551ebb88d9cceceed44f6","ssdeep":"","tlshash":"0831651df9026b03c4c9fd7169f7811bcb1b98c0a9d1955a5cfac8276cb01f45d256c7","first_seen":"2025-10-17T13:20:40.389751Z","last_seen":"2026-09-20T21:29:28.113447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_11.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.775Z","timestamp":1789939722775,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_11.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:32 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1514\r\nKeep-Alive: timeout=15, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":1765,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 208x46, components 3","md5":"ffed9c493723b23a2ec07e82d22c8e08","sha1":"e057e579da7cc971b05a6194bfe09a5c4f55b5fa","sha256":"40b0eaa5b5c6705d9ebdfa5d376a2176dc52084a94e9f3eb9417b96c3d2e62c6","sha512":"394f3af6f21c1fb6937bc26f1b56f43fe3ca400be587ad73a55f7cfa01eae1b18b4e7a2de09e8905f270ff6bd6ac42a4d49418bc90a746ce278063611d443eb5","ssdeep":"","tlshash":"9a31651df9026b03c4c9fd71a9f7812bcb1b98c0a9d1954a5dfac8276cb01f45d256c7","first_seen":"2025-10-17T13:20:40.532436Z","last_seen":"2026-09-20T21:29:28.115844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/dziecko2w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.785Z","timestamp":1789939722785,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/dziecko2w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 218964\r\nKeep-Alive: timeout=15, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":218964,"size_decoded":219216,"mime_type":"image/png","magic":"PNG image data, 300 x 460, 8-bit/color RGBA, non-interlaced","md5":"d42863a0e101463e0166aba03373263d","sha1":"87aee58c649aba75eb973ff34832c0330bb51bde","sha256":"19e7d5319b0fa3e4147e2b912f2a4d51ea58e1b995ea8e273abae77b3038d50a","sha512":"5c0c91381b7d6c2e3b66d99e64a1637067577bb27db2a3dfac7411f59a517fd879daa7bf033d4170417198162fc210467c8d7e5951fe7aa3d40eb2c358a37529","ssdeep":"3072:0akd1IdYEBsVBzHlGQvbb6vv5CaOT/SIAgRunw6mRkvGoKCFQuCD/C8i13YHqqm:edCqE6VB4Rv5jiSTnw6JwZ7otYH3m","tlshash":"2c24123b37ffdaa6909d31d719c003f962ec6763e7016bda2d04b59345ec5a104aa932","first_seen":"2025-10-17T13:20:40.204754Z","last_seen":"2026-09-20T21:29:28.116985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":31,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T21:28:42.450Z","timestamp":1789939722450,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /index.php?\u0026width=1280\u0026height=1024 HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/\r\nCookie: resolution1=1280; resolution2=1024\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nKeep-Alive: timeout=15, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.7.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":21061,"size_decoded":21264,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1331), with CRLF line terminators","md5":"7fcfefb7188e6d09368bbe307329f640","sha1":"017877baf9adcd00739c1282b7975450ea1f113a","sha256":"41e2854da5e31a515880cf9fbb8a0a1235bb893b44286ad6be8f44c93bceb78b","sha512":"7dc7bebfc67fdb67184388fd3c167bc5302a9cd397d0353596d5d62fd7dd2b425b481fc72f2d5f0cb45f4358596b181e225e5f1ea9889541d3287125f28959d4","ssdeep":"384:7DuooBdbPpQ5/Ml115AypfvK7Ai5l9kT1aL9yoehnR49:7D8BxPRfUN57keyXvc","tlshash":"91920a71728ad82f8e1900ddf1722ee9998fe51973128aa4e90f143b7529346273f18d","first_seen":"2025-10-17T13:20:40.192707Z","last_seen":"2026-09-20T21:29:28.118322Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400\u0026subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.745Z","timestamp":1789939722745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Open+Sans:400\u0026subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 21:28:42 GMT\r\ndate: Sun, 20 Sep 2026 21:28:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":2249,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"52fd336aac376e54df69f73afa4d9a1e","sha1":"ff01fecffbb6ad52a66fc2464c9a06d64ac49ce4","sha256":"0493c5aeeeee76553b77f584271225f936ff2901a1838303744debf8e99728e3","sha512":"6221444a13a3adb37f5064882fa86db9f2e836e7ce90aecc12ac7345281799d902140f502e5a5b8f08d1651f217844cab59ed53e9d3f4b0e9d52d8ba4f6bd3b3","ssdeep":"96:ZOEM9JOEMWDFZ8OEMjkOEMFYOEMhOEMNy+aZjzBrWOEMzubqGIFuV4UOEMCOEMN4:w9AWjBF1INqbCbqGIwV4Rzlqx","tlshash":"25c14d900017545467471ce723cebe30ee4fa2606040d07aabfd8b9aeed6da9a37532d","first_seen":"2025-09-17T00:02:10.461951Z","last_seen":"2026-09-20T22:29:42.107163Z","times_seen":22905,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":40,"connect":15,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/release/featherlight.min.css","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.748Z","timestamp":1789939722748,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /release/featherlight.min.css HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 11:55:30 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1881\r\nKeep-Alive: timeout=15, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1881,"size_decoded":2131,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1676), with CRLF line terminators","md5":"c8673ac5e5aa2079a29882462723fc69","sha1":"a0ad4ade3008ff0b0126930b4c51b531f4767f49","sha256":"bef97b1f94332f935178a54923d1680ba7fa51d132e0515dc492296a9d1f24a6","sha512":"c81073923eb54967720f68368f62438a849686e6ea357c1eee61f20a694e1cdaaf9e741d48955c783e24d731997277b48548988f7847860a50f83e9c706a46d0","ssdeep":"","tlshash":"7b41fb72965842386232db1ba1b0d34db3d55417dd96e3ace5109b2349dbea8382fe08","first_seen":"2025-10-17T13:20:40.500096Z","last_seen":"2026-09-20T21:29:28.120128Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":27,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_02.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.756Z","timestamp":1789939722756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_02.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3279\r\nKeep-Alive: timeout=15, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3279,"size_decoded":3530,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 162x234, components 3","md5":"f03167490c6d068a6afd887f569c8acc","sha1":"4020fc8374635536f14ed568bebe721649af5be0","sha256":"54279d3a4bbd70162237a5a4e6031653e36e5dcea437636365a5359386281097","sha512":"742ab0b0b208ac3eaa5e89fbcc08d12c034e776a2caaaea708017e25a940d8411af7e5d1f502c7095337c7402014601200cd8c5900ca7b76a562e1fd998738f8","ssdeep":"","tlshash":"1e61e75fb6028303c1e5f93428b6065bd70e22d0e5e2ca4a48f8c417aca51f89949bc7","first_seen":"2025-10-17T13:20:40.648959Z","last_seen":"2026-09-20T21:29:28.121389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/pi%C4%99ta2w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.779Z","timestamp":1789939722779,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/pi%C4%99ta2w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:17 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 64772\r\nKeep-Alive: timeout=15, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":64772,"size_decoded":65023,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"0f99aed2eb60ef5efaa47cdc43bd0bc8","sha1":"5063a7c0884b1e5c05d86d4e8520300770899842","sha256":"2c88ee66a5dd24d61398b74896fd05a54f1aac1a49c0e17e3e33cb13f55049a3","sha512":"2a73462aa7c788151f83cb742bf5bdfb83c1b3f27388f11c2c7891a1e2de032877a8013d669426d30ccdd89c7def299acbaa06947c2f266621d1baf01fe4d879","ssdeep":"1536:Eh9K40rcCdmmhiewuZIcKq+O1hRU2LQVEIJ4ixc:Eh9FCT1wuZ1H5jRU2LmEIJ4ie","tlshash":"125301cfe9c9c359aa965b04537e0faae232e0d8a30e5159040e3e41efcd5d2ddb0e61","first_seen":"2025-10-17T13:20:40.119232Z","last_seen":"2026-09-20T21:29:28.122561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:43.016Z","timestamp":1789939723016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zuza.stefek.szczecin.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:06:34 GMT\r\nexpires: Sat, 18 Sep 2027 10:06:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 213729\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18640,"size_decoded":19453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-09-20T23:18:58.488066Z","times_seen":46696,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":4,"connect":34,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T21:28:41.979Z","timestamp":1789939721979,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nKeep-Alive: timeout=15, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_04.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.758Z","timestamp":1789939722758,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_04.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1578\r\nKeep-Alive: timeout=15, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1578,"size_decoded":1829,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 29x234, components 3","md5":"9edb740fa5eb182fc0f70e750e99854e","sha1":"08a2f165cca18c30ea340d370e277deb2b5633b0","sha256":"70189e1a56164839627e04b7f03f4e3982687bca059a7d374e04b5884d43f45b","sha512":"b761b5c86a3510b8ea9fe84b43317001de960f11236e2b454d6d1c25af08597a80acfe8f4b03c8978e165e2d9ddcac103b97a61b958f84e8156e14370011efc2","ssdeep":"","tlshash":"4731721efa02ab43c4c8fc71a9f3810bcb1718c1a9d1964e59fad82368a00f01c159c7","first_seen":"2025-10-17T13:20:40.255353Z","last_seen":"2026-09-20T21:29:28.132786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_05.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.767Z","timestamp":1789939722767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_05.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6264\r\nKeep-Alive: timeout=15, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6264,"size_decoded":6515,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 208x188, components 3","md5":"809a8e0e00924e0c844229ac87721976","sha1":"9c5f25163413c7ca8458559bfd145a973414ff13","sha256":"ccbc960fc1780be738a3f8a7ebccedd803e571c380f12d0119ddfe02c79788e7","sha512":"48c2535d278fa1cd83e537e43328d9ab7a1a9c67fa50eecdb0dd94b9767bfd424b8b6172a95d04078f140a7d2c98c960edcc233005247687eee624727f9f0b2f","ssdeep":"96:5o7FbAknsWpXL/1wg1QWeFviHtgSANhh7AiZBZZegicMC9XsjEVnN:O7FUkns+dwpJmtTANhhM2Z9ixC9Hr","tlshash":"15d19e29b44d7717dd54963029f9405f82189ef86e86f62e5cf368da64d00e4ec341cb","first_seen":"2025-10-17T13:20:40.31907Z","last_seen":"2026-09-20T21:29:28.134466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_06.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.770Z","timestamp":1789939722770,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_06.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1884\r\nKeep-Alive: timeout=15, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1884,"size_decoded":2136,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 29x234, components 3","md5":"186794dd2e50bf4bc1d36b530b8663d2","sha1":"72ae5575a3eb3a7745d238b32a3442538ce0b3dd","sha256":"52db8b2d08ad118a20141a6ae493ba8dfe8a8ca47ca81517e2f167ede406d41b","sha512":"fe08dfba5efa95fe5d76b65401d43e1d3c689e1e93e43c90cfb14a3ab8f9cfec738d62955df5645613d8bd501f62c5bb930002b293d8a9ac7b255c292e4ba2bd","ssdeep":"","tlshash":"9d41941dfe03ab02c9ccfa705af6810b8a4784c5f9d2854988f7a823a8740f55d156c7","first_seen":"2025-10-17T13:20:40.510546Z","last_seen":"2026-09-20T21:29:28.135617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":184,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_08.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.772Z","timestamp":1789939722772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_08.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3567\r\nKeep-Alive: timeout=15, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3567,"size_decoded":3818,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 145x234, components 3","md5":"ce2041eb30bb3da2af173cf70383cd08","sha1":"57ed44a0a1ace9c2a660670cb36f9e486dc5c56e","sha256":"0114de93cc972cf59f23e076eb173076f0e132a79c6070c4f2833e983837183a","sha512":"0f407b56d01a95e09106e416bede962b6eec25ce033e6926fbfa93866130bf8f394feb65c71bf1863cde82aec8e1e0eb8b21151793908475d9b699b06e3db3b9","ssdeep":"","tlshash":"ea71397de7028702c69abab588f342875b47a4c1f5c2c08e25fa4c7b58b01e91d640d7","first_seen":"2025-10-17T13:20:40.378587Z","last_seen":"2026-09-20T21:29:28.136887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/rekonstrukcja2w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.781Z","timestamp":1789939722781,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/rekonstrukcja2w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 116261\r\nKeep-Alive: timeout=15, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":116261,"size_decoded":116513,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"37726c3fa057c01066ba298468aea386","sha1":"69b86c09206720e363cc2a984330c0f2d6a2ea80","sha256":"999c580d0a3616bebf6c928f46b42c5a144313b0b2f1503ec8bc2f8937624bcc","sha512":"761e8dec0d4becdb190b9193e1520e30b425802770eeacba5d2c1e67e5f14d351679c62b3b2347a728b58f5ec10d852db00c87a51ae1da421089422f3af34eb4","ssdeep":"3072:ydQK2z1g2YUuKBQsC4T3ru5ayU7wbK8ieMQVtLYMnA82yC:ydQ/zoK2snbujyenizQVt/nTC","tlshash":"3cb3024e478c1b73a5b26942e2238f3f8f4eb4a7c262e51331dbd81155993980fca92d","first_seen":"2025-10-17T13:20:40.429097Z","last_seen":"2026-09-20T21:29:28.137916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/arkada2w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.782Z","timestamp":1789939722782,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/arkada2w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:15 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 123926\r\nKeep-Alive: timeout=15, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":123926,"size_decoded":124178,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"e0c077e2bd8afb84609f5393b1e70bba","sha1":"44eecf20158b98fa872bec8a8d9ad7b6200bf8d5","sha256":"19627b0107e0222dc3527fc6c19331fdfe3c82629bbc3b5c619d6795396167d7","sha512":"bddbb620948a1398191314cd5a0b7accd40a1e91fab9e31f9508fdc156eecd92c2782b6f89f48f592581266a4ec1adaad805252b0f1fc6ea0ed00f92c6407e24","ssdeep":"3072:euz70wLBfRh+iesT8GoXO6TRtX1mpmelZDAgYWHwpTvu:X7LBdVIO6TRt1mUelZ0RWHMvu","tlshash":"42c3125c6bddeec74ba01f972a9a72571a36249c3711bf9bc4d5d200ad3a88117072cd","first_seen":"2025-10-17T13:20:40.565297Z","last_seen":"2026-09-20T21:29:28.139134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":26,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_03.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.757Z","timestamp":1789939722757,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_03.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6435\r\nKeep-Alive: timeout=15, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6435,"size_decoded":6686,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 208x188, components 3","md5":"1772c13bc3ba3e7c3ff0eecd3198c403","sha1":"f7c28c5e10f53a8c6aafd336db20214138b5a0a2","sha256":"97fe1a47bb798fb0c2bc0bd8cb5a564cb2ab48b9fb3819d7a1111f4ebcbe282b","sha512":"330eee68c326f81d49e446b1ec2b82718b124674f5885bc86cb74645cc0e668eee2fb23c9fd5c649bea1db4c3564bd1a0ed8b349e252df95e4df50e6e0782f06","ssdeep":"96:5o7FbAknsEpXL/PJ7YsWOaB3OY7myMHsfa4xA0wdLLy6VLuAahH6a8wJg3EHHHH9:O7FUknswnJxYj7mWaKwpLy4Lu7wvwy3u","tlshash":"2cd14c299e4287cbe8c37e3634f75263c7038df119a2501a3dfec016e35947629927ca","first_seen":"2025-10-17T13:20:40.669251Z","last_seen":"2026-09-20T21:29:28.140264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/release/featherlight.min.js","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.769Z","timestamp":1789939722769,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /release/featherlight.min.js HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:42 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Thu, 12 Apr 2018 10:39:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 9220\r\nKeep-Alive: timeout=15, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9220,"size_decoded":9477,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9022)","md5":"d960f115765d4962e8f88dd663ba6fe6","sha1":"f3a1a8fe27dcaf3368b3630e6dcfab8a399167f2","sha256":"fd21104dc97db6fc980c0f12ba157f3cc9fddac84dde4367f02f6f9db05c13d6","sha512":"d146d1e87374758f1f58df53edf17ae7cf3deadb0f8276d14441c236ae3a27dfc94a7f06a275c3666aad4dcdea4bcefd18cd33578f5bf4b3e175cfe668a3fc2a","ssdeep":"192:HD3IGDZV0BSMpN+GAS4jDxfy3pj6ZdRIYrfX4WUbVieetM/o:HbbEBSigS4jDxfy3B6/RIYrfIFGq/o","tlshash":"5412c6aab3a5e0614373a978712f310bf23b545ea9098062b49dc4d47dbbe495037f3e","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-09-20T23:09:19.588026Z","times_seen":1073,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":28,"receive":39,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/wwwgl_10.jpg","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.774Z","timestamp":1789939722774,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/wwwgl_10.jpg HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Wed, 11 Apr 2018 19:47:32 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1514\r\nKeep-Alive: timeout=15, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1514,"size_decoded":1765,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 208x46, components 3","md5":"a09431224575d84d66e0423c9e262df7","sha1":"0958762ae74367f0f5a88c450acf7dd1610630ab","sha256":"a11fc4b3408680f46a98855aee3e14e3bec41f0e55a0f34bf0bf945e508af3f1","sha512":"530a4e1904685795dc7778a071bef966a70db1e29e437ceed7e72d9a46ad8ee574af2a9f82caf0bf3081fe99b5bb9eb1acdd02484026ee0ffeb0912b042d007e","ssdeep":"","tlshash":"df31651ef9026b03c4c9fd7169f7812bcb1b98c0a9d1954a5dfac8276cb01f45d256c7","first_seen":"2025-10-17T13:20:40.520708Z","last_seen":"2026-09-20T21:29:28.142036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/odcisk1w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.776Z","timestamp":1789939722776,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/odcisk1w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:17 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 127174\r\nKeep-Alive: timeout=15, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":127174,"size_decoded":127426,"mime_type":"image/png","magic":"PNG image data, 300 x 233, 8-bit/color RGBA, non-interlaced","md5":"5549575ea87378153de3f18a5a9c188d","sha1":"584ddaacfdf0b9cd2de1832797c7eaab642cfd03","sha256":"63dfbe7f1ae2b1fc1674e3053d4585cdd374b6ad4fe98dfe17b753c08e14e366","sha512":"7ff42b8952a799ec7312bd2a442215f31b178b555e8594a5fa877ac9df143d3889900e17c8b1f2a3a5d81e050a811c4fea46cfda8fa23bfb6435ea82de9708db","ssdeep":"1536:Ye1ppUIviHhYSZeiOIjnvczuSptt6vRn3DCITgm3oeOy5X973KW/+D+uid823M2l:XUc2EIg6SBE33TZ4eOyT5qdd237LBf11","tlshash":"06c31229e4506d6b7bbc4b6f7b60c648ae63640a0b903d443c5e4ee0623947b815fdef","first_seen":"2025-10-17T13:20:40.550881Z","last_seen":"2026-09-20T21:29:28.143013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":33,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/favicon.ico","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:43.269Z","timestamp":1789939723269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nContent-Length: 355\r\nKeep-Alive: timeout=15, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":563,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T23:26:05.406848Z","times_seen":63027,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/odcisk2w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.777Z","timestamp":1789939722777,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/odcisk2w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 124462\r\nKeep-Alive: timeout=15, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":124462,"size_decoded":124714,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"8f9f77eeaa99cef2c367244d13c8b6e9","sha1":"3196d1774d158f57c332afc852cedd1cb0c10f6b","sha256":"0ec428370aecf1dba9448c8f487bcb83630cc6341681a2f77130e96ad4da8c72","sha512":"1c3cac58224ff4f26468da650f18fcdf155bc0ff6f56542b76cd29ccc95f033f2a303ee09a817db00af4cee2f45d6fabae8b331f2f753e34360fa0417e7c36ef","ssdeep":"3072:HoEnbOAYH6GQwidpLMaWvuVTfgxhB7f64k2XvV+1ubJ:HRbnYHULMKfgXNC4kiU1G","tlshash":"abc312404ce82b39621ffb02e735fbca8457fb307674a1126b9ccd47e8b24649359b96","first_seen":"2025-10-17T13:20:40.418991Z","last_seen":"2026-09-20T21:29:28.144559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":36,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/rekonstrukcja1w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.780Z","timestamp":1789939722780,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/rekonstrukcja1w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 118825\r\nKeep-Alive: timeout=15, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":118825,"size_decoded":119077,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"4b119156dc0da7ec203fc2ff1a1651f5","sha1":"b2e34de22edf3ef3cf98536e9285f0cc226c842d","sha256":"053428a8c741f4ec792467ffcbd9d5b0d2d705a444c3e73b6e67e628516c0aae","sha512":"d6902878be5e7b6360ef2d80950c12682633351b26df53f2b669ccceac184cfd4d1978c27865e866f1c0b493b580e5328b6557c448740e2dcf47c3b97e51728b","ssdeep":"1536:74KgN+V2puKxeSQaaRM14P2JB+wag9o6HgpwfyehvHjZJNIP4b78vdg09kkV0WR/:+wRmKMiPQB+wVe6HgRYJuNv+09kmV","tlshash":"58c31234aa9451380f1dbb8b3e7444a55be6b8f0a4b9e04e564cd9d3294c12fc3613fe","first_seen":"2025-10-17T13:20:40.348304Z","last_seen":"2026-09-20T21:29:28.14585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":267,"dns":0,"connect":0,"send":0,"wait":26,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/arkada3w.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.782Z","timestamp":1789939722782,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/arkada3w.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:15 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 118241\r\nKeep-Alive: timeout=15, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":118241,"size_decoded":118493,"mime_type":"image/png","magic":"PNG image data, 300 x 233, 8-bit/color RGBA, non-interlaced","md5":"7e4d8ee5615e1eec2aee2bb61de6633e","sha1":"fdd2fca0c2992084158d96da01ed1fd27e4fd46e","sha256":"968929fc7f470129ced039fe981c53fec60f42d7afd2a0f03ad6217ec5f84cda","sha512":"4e04b1e4434c27732b409748ec6d2e4af0de374d523cfb803b39f02d930eaf37088ac46942d0e73f796bf6a7f6c48821e17592dd04fbac22d5cb4085b92388f9","ssdeep":"3072:lwrWmiWnxfpKtvDHDRfGph1ZNOlalcLTPP/fO7O:6rWpWnnEvDjRf6WQcLTHW7O","tlshash":"8cc312befac4ad7d22dd43dc570c7780db9800a5ae9cd419be8ee1ae972610880e15d3","first_seen":"2025-10-17T13:20:40.628792Z","last_seen":"2026-09-20T21:29:28.147032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":333,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/images/diabetykw.png","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.784Z","timestamp":1789939722784,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /images/diabetykw.png HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nLast-Modified: Mon, 16 Apr 2018 16:20:13 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 116737\r\nKeep-Alive: timeout=15, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":116737,"size_decoded":116989,"mime_type":"image/png","magic":"PNG image data, 300 x 232, 8-bit/color RGBA, non-interlaced","md5":"49819aede41f6936c904d5014efe9726","sha1":"f84cc5c9131893b469422516460316013e20169b","sha256":"8105b9e82c4b395e8c3cf1a5a2568631699adc5a794ad3f9d80b22f729b5a31c","sha512":"fb2eb2561004c63885d2d4c5525654e377bad073eef5466065106df14e49be36bf42c500eddc0fa6ecf554823028dc67c31d0a568bd1b5849983ca54991a2dec","ssdeep":"1536:YxM906kOSi8X5IvUsUGeoWfrwvuH6VCmW92ugGz3ZGf/TQMb+tFr+VUR+ZS:Bm3XsviTfrSuH/fgcGH+/rnR+ZS","tlshash":"4db312858cd4b820cdd3cb8062683598f4bf7dd06ea059499ab50d99e75cd3ef307e25","first_seen":"2025-10-17T13:20:40.469819Z","last_seen":"2026-09-20T21:29:28.148248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":310,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/blank.gif","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:42.999Z","timestamp":1789939722999,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /blank.gif HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nContent-Length: 355\r\nKeep-Alive: timeout=15, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":563,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T23:26:05.406848Z","times_seen":63027,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zuza.stefek.szczecin.pl/fade.gif","fqdn":"zuza.stefek.szczecin.pl","domain":"stefek.szczecin.pl","tld":"szczecin.pl"},"ip":{"addr":"213.155.160.20","port":443,"asn":13119,"as":"Zachodniopomorski Uniwersytet Technologiczny w Szczecinie, Akademickie Centrum Informatyki","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024","date":"2026-09-20T21:28:43.000Z","timestamp":1789939723000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stefek.szczecin.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:52:48 GMT","end":"Fri, 20 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"01:00:99:89:C2:79:79:00:8F:24:45:BE:B7:33:19:D7:3E:86:20:15","sha256":"BC:C3:14:0B:F0:D6:E4:E7:3C:F5:E0:17:96:F3:25:A4:6A:C4:9D:6F:74:0D:5A:17:D7:D0:FF:98:49:CF:1E:FE"}}},"request":{"raw":"GET /fade.gif HTTP/1.1\r\nHost: zuza.stefek.szczecin.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zuza.stefek.szczecin.pl/index.php?\u0026width=1280\u0026height=1024\r\nCookie: resolution1=1280; resolution2=1024\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 21:28:43 GMT\r\nServer: Apache/2.4.68\r\nContent-Length: 355\r\nKeep-Alive: timeout=15, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":563,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T23:26:05.406848Z","times_seen":63027,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zuza.stefek.szczecin.pl","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zuza.stefek.szczecin.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}