{"report_id":"db765740-d39f-42f4-b27c-1dfe89693c52","version":6,"status":"done","tags":[],"date":"2026-04-11T12:58:30Z","url":{"schema":"http","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"title":"Торговый дом \"Подшипник Юг\". Автозапчасти и подшипники для отечественных авто","dom":{"size":76452,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2874)","md5":"f09f05891d27eacd8deabb061ccac288","sha1":"d9f2ee29e62cc19a9292a3b47964a503114442f8","sha256":"0218724dcd1bc1664c66e798e8be01bb65e7926270b07fed862ebcac78140667","sha512":"a31007bd9dfe674c71dc2cae95d48c1606dd7ba6e307495a40d7362b760a6e89f8ded41348fd5ab38a73b50c126c7c0df8b94606ab478aa6f4c041512a57e703","ssdeep":"1536:qjuEfuuq9EUP0oPFe5qNd3FNLsSH1XH8kvBNLfL5:qjuEfuuq9EUP0o9NzltpD5","tlshash":"2373fa52856d1c7f0223218be41d7b8da0ef4d75fb1349e2b1fb063873c6d84da2a59a","dom_hash":"domhash27865ae321501fe357e4aa0be22b90d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-16T12:58:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"site2.cy89513.tmweb.ru","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2006-06-29","domain_rank":0,"first_seen":"2018-12-03T10:41:25Z","last_seen":"2026-01-15T20:19:56.341089Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":759,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bitrix.info","ip":{"addr":"217.16.19.172","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"domain_registered":"2002-11-14","domain_rank":6969,"first_seen":"2014-07-18T17:10:26Z","last_seen":"2026-04-09T02:59:16.053781Z","alert_count":0,"request_count":1,"received_data":412,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":8156,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"site1.cy89513.tmweb.ru","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2006-06-29","domain_rank":0,"first_seen":"2018-12-03T10:41:25Z","last_seen":"2026-01-15T20:19:56.025473Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":759,"comment":"","tags":null,"fingerprints":null},{"fqdn":"expertdetal.com","ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-28","domain_rank":0,"first_seen":"2018-11-28T13:49:08Z","last_seen":"2026-01-15T20:19:56.202349Z","alert_count":0,"request_count":1,"received_data":834,"sent_data":752,"comment":"","tags":null,"fingerprints":[{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"podshipnikug.ru","ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2008-06-18","domain_rank":0,"first_seen":"2015-08-14T10:54:24Z","last_seen":"2026-01-15T20:19:56.203242Z","alert_count":49,"request_count":49,"received_data":2950500,"sent_data":33496,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":6,"received_data":157910,"sent_data":3217,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"39d57f5af461f84c59f99c932db2eca7","sha1":"8ce85a14de2cd40a9fd68b06f70f37f79dd8eb12","sha256":"361593de0313a4726ae9b50121a8e8cf2400ba28c0f51511ce0f64a14a3872c6","sha512":"c8d2d33c61e7b5956b69ec86b13b9a936b35d6859ea5a4d9540ad90ca6c493d2eabf1ddb42bc4992635c11ba5e469ea78df38831cd90bb18c26b30818463d843","ssdeep":"","tlshash":"d1c08c8621969888d073706233df3312f0068863a984a887d2e49040b38e0c7ea0f3d0","size":164,"data":"","first_seen":"2023-03-07T01:12:11Z","last_seen":"2026-04-11T15:40:44.04501Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5074dcb8542df3b6a210875b34facfbe","sha1":"96bd99935b5ef7f4a3ec1aac4b3fb566a6f8b5cd","sha256":"756ab9a8a8e2c5c3b199783f3cf19e884506a7797beafa3e1989dc619d40897a","sha512":"ea5e7dc945d6af1214bf840db9406a13154f551d214818caa2560b3bc1dac291bc2613115db936c50e001168ae4f4ccdae25f1332ff4d01e15755b94f0cf8b0e","ssdeep":"","tlshash":"f401d6921a6771fb0757a41fda196b0d24e18a7fad565dc389260f5cd2a00bc433d314","size":686,"data":"","first_seen":"2023-04-05T03:42:18Z","last_seen":"2026-04-11T15:40:44.047276Z","times_seen":3984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"02d661550dc35700b9b8ccadf4af9c4b","sha1":"b438315a4de57aaa4e0c63dd46610c3c6be07950","sha256":"5eea5a1ce837e42bba387984a83ce6e07140154dec53079a04f5e07558ebadff","sha512":"16305732f032e7a0dd276892e3118e542874b3e27ca0e7da89f6915ce423e32803dc3084a43269b67080006592e0cf304ff13ce6f036ec5ea6ab3ccdabdc2582","ssdeep":"","tlshash":"56e026252c81063c3f58ac6b2fb76492bcee60543642cac42b6600505f7c81a2f23b5b","size":333,"data":"","first_seen":"2026-04-11T12:58:36.368154Z","last_seen":"2026-04-11T12:58:36.368154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2679a2f86e55fe82662bb5d5951369a1","sha1":"ca7d5ff0595c484362bf7bbc02ec9f3571750188","sha256":"6c79031406879b52e1508b519b67caa0638450bd479fc451612395c097de9c24","sha512":"7de2c1a32f033b3887a6928d7517273a756206d51620bdf4e1b8ab0696be332bfc49716e6e46a4256eb6b104912d033acb80c101d318935ed0c32f1b3622117e","ssdeep":"","tlshash":"3d21976bc1204f5f83f530b6f16f2b5751e27d806fcb82e544a05bb876115a7ba1e422","size":1420,"data":"","first_seen":"2026-01-15T20:20:02.583188Z","last_seen":"2026-04-11T12:58:36.369332Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"43d3b5af9b7375602b1446cdc691286e","sha1":"6b4898329e02046157fd068fde0418559f63b3d9","sha256":"46ee077dea7d4ec32ba42db721fa2417a039fc5f6c2cac0cec792f17f023c358","sha512":"ef4374d7d367b169551afc50a7277a93e804dda05e525726dc895af553c3c7045b4d707aef6d2889033d42e0c2e51da6e713e9a1b2e49bcbab7e946bfe611161","ssdeep":"","tlshash":"9111f133c624878f83a63476a12f2703d5a2bcc16f4306f25464a77c734155bb63e575","size":876,"data":"","first_seen":"2026-01-15T20:20:02.584318Z","last_seen":"2026-04-11T12:58:36.370559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dd40dc46bef12e1962a7dce5e0ae468","sha1":"b4d55f4dffdbecc2f4f6ed77bf797e258574d336","sha256":"dbdd5c7f4a0841f754a7585c001971fd08a246cb77fc0d3e92e99ef89c0b0aa1","sha512":"a9351f490fa08d64c60126fcefab4e06fb3abbfd323b168fd88d7b2e911654a8c29a9727d4d857f58b134240ba3b1c002723ff25b412a68a9d7c0f8d68e3aab9","ssdeep":"","tlshash":"a41104d6e30e0c9fc95f016c992e62eda2bc66721c494c3b7c54a5a017d882f8738bf4","size":1041,"data":"","first_seen":"2023-03-07T01:19:19Z","last_seen":"2026-04-11T15:40:44.055145Z","times_seen":2924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"20deb23013fc0d212f03d2b8e56c8129","sha1":"89d00c4dbff32c33b756f8cdf29c023e8cf0b67e","sha256":"541f580334e8a73e7d0896eac64d6e4110511eb410fc78b7c06cc920593d43d5","sha512":"af7f52a14b4d1442c300b0561291230618c9f5e73222bbb467cdad1af1c60a8c0194a88d11a483437cc29ebda7612f2849ac5cd8e99ed278fedfeda732811955","ssdeep":"","tlshash":"69710b61664b38e91390f427f8097b097cda10ff7aae1f6266621c3d70f24b88678317","size":3769,"data":"","first_seen":"2025-11-25T12:12:06.137003Z","last_seen":"2026-04-11T12:58:36.372368Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/js/main/jquery/jquery-1.8.3.min.js?175921142993637","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"73804795d9acd833df75c190bd36fbdd","sha1":"8572e0c20913128656f9cca75151ea445c04bf42","sha256":"375d351d3e2fce7b3d15a56a43dfdb13ed953fdea6ab707b7f0f7c4a626d31d9","sha512":"d6e7cf34d449e651032788b3ce9807f3067139d0d565c2eaa81f3a7ba86c585a5b3d4d281b3a6a867c8e517158009bb3cc9cb23b3d821a8cf66e6e35be1f7695","ssdeep":"1536:86IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:++vIklosn/BLXjxzMhsSQ","tlshash":"7193f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93637,"data":"","first_seen":"2023-03-07T15:49:14Z","last_seen":"2026-04-11T12:58:36.329872Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ee1a337ad89c7f3925a1116b6679072","sha1":"6ece86f3eac85f27d09ddbcc041e403eb76ffa91","sha256":"29f18bb3ab836e0eae64ce6077cf160058749ea590cb9931bfc48756650707ed","sha512":"2eb5e8f2f9d67afdc90358364057f05a3db00a531e826023130908c871b8312ca4a91d90eb63cd15187ea8e69f89b7bcf29e587ff01774c11c1e467c0b0789f9","ssdeep":"","tlshash":"0be02b6fab1944ba97c204d9e474d64cf572204c0169d062958ad4856dacea44c1aa0c","size":402,"data":"","first_seen":"2026-01-15T20:20:02.588075Z","last_seen":"2026-04-11T12:58:36.373487Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8230801d5a3ec15e313716f04341bb26","sha1":"1508f2a7e2ae7ba5233ec4cfc815b7662cc2fd4b","sha256":"ed89e5905fe08ef2564c5e18fe80e3af6bb4fba415b4e24f572e6b6a0695883e","sha512":"8c57f65c8a9ac529066a21c6af0985485348ad0a59343d940be2726d4bb395c03d175e2b43f01ebabf23ca4aa99236f65359fe8bb460b33a5cf6592fe679b743","ssdeep":"","tlshash":"a7215bef08b7212e4e74a05261fd6d4c8b993c6e5f545ce04486456c387f1357eb9e88","size":1127,"data":"","first_seen":"2026-04-11T12:58:36.374703Z","last_seen":"2026-04-11T12:58:36.374703Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9bc4cacebabd5de220e5e2a69879123","sha1":"08ea269a9967adb751c796823197f8717a198365","sha256":"a7a83a6de0c0268574f2160551ab0df1899c9216ea1b846bbdd696a80eebc0ab","sha512":"3ac2a900c2596354141409f6bcef6c004c748bc5dd1a06faf82ff1d2e1d926def0be09676ed9ffed973d7d6d9034f550730b1b78e5af6fe669bb9c0185817454","ssdeep":"","tlshash":"aa01cbab2cf610308257b1689aaf9514242290035809ac0a7ccdc0988fd4bad4a76bec","size":854,"data":"","first_seen":"2026-01-15T20:20:02.590825Z","last_seen":"2026-04-11T12:58:36.375743Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e02e5b50ae248c79340523d50e2a443","sha1":"adeccdbb246064d56c445893c3f8f163063d9187","sha256":"312a2869b3eb915cc61648d273cc31cce104f42b803f9e731def685aa576d75b","sha512":"34e2f726042862c842ddd98e9f5d4d95283ded8f052337e5b7f5dca24f9a5882c47b1807e5ff9d258688e3ecfe051352cf7d486151d4738714e8b381b0c7f41a","ssdeep":"","tlshash":"9bf0d4914354057c3313d10bd4063b1eccd744fe777397401575b55f317145cc924a48","size":490,"data":"","first_seen":"2026-01-15T20:20:02.592282Z","last_seen":"2026-04-11T12:58:36.376641Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/template_44d827daf5c7ab8cfac2a726225f7b94/template_44d827daf5c7ab8cfac2a726225f7b94_v1.js?1759212624319322","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e69ba4fefeac9cfc722904630ce5eb9a","sha1":"f80dc60ff6d8779692a9a92996b92263d53b8742","sha256":"053366d4600d32e4aaddcc34b869c323be35b496a4d8e6e2d97c74d35cbfbb39","sha512":"8fbd001d46a16c37e6a7c519e1f0921cb19bcd51720d388b3cb84661612deceb6fae792c567448336463436a205027589f4f012a8b0af2fa653bd4b181b1aaee","ssdeep":"6144:9+Es05Y/EUwCjP/lsn4/HKxPg1VLHrdCUtkjUa+rdTj3J+UtMSV:cL1fP/vHKibL8SV","tlshash":"bf645a4ab251366347f730ba116f1107a172ab3ae40a8054f07ad4e42ebcdc96777f7a","size":319362,"data":"","first_seen":"2026-01-15T20:20:02.627729Z","last_seen":"2026-04-11T12:58:36.3777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/kernel_currency/kernel_currency_v1.js?17592126241875","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f80fc551f1d7193bac86ff8711f7c468","sha1":"800021225acb08a3ad890b43acc47d9d06a85f92","sha256":"9a5c2a75cd3612385b6b593c8b7016d20cf9c6464665fceb42cbf0361d96e399","sha512":"f08de765235febd9f8df1198badda8459808831f2634dcd403c655e319646cb72743a8e7f999709af70fbf1f0b6fd22fd673c2458b313b75b42a620d71dd8882","ssdeep":"","tlshash":"ae31fc49798258e9c2f41400211f3a0a447b7b9a780bb1daf91da1d6afe8e05c188e7f","size":1875,"data":"","first_seen":"2026-01-15T20:20:02.561321Z","last_seen":"2026-04-11T12:58:36.347403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/default_2544a37bb3ca42f43df9a9f1c30f39e2/default_2544a37bb3ca42f43df9a9f1c30f39e2_v1.js?17592126244474","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"878634ef00f66243516c5e12d1e691cc","sha1":"6a1b6e6a642b45299ba080c2c9465706f464f8b1","sha256":"97ef56cfd898e7aed745560a9c14b0c5f599080376930e795fff82f30e86e6d9","sha512":"b65e3d8457fd8043ae40e6347092654b2c2e28624c3a9112bc3bf21c5048dddc7996a00aa997da4c9c2708e3f298f57cf1f12468752172c233882238681cb7b0","ssdeep":"96:831B4Skwh/vIvUyz5haspvWUpCb3139M7qw:831B4TgvZ2vVgFvw","tlshash":"d891ef21b050687e95fe941d222127cd7332f154d58a806db8f4d6e6363af8a343ebf9","size":4474,"data":"","first_seen":"2026-01-15T20:20:02.578115Z","last_seen":"2026-04-11T12:58:36.357466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b932772713a74c3d5be7658fa9b64c94","sha1":"b278e51648aa7c3bd2fa3885600ab4fa7156c216","sha256":"4b84be0f899cf7c1b6cd75c2c71e5589d41133b7d6a15cc61205a17cede68c07","sha512":"fc68e17541902d272d7b6ea62bbd3a3176d7eb7c12ea9ff44a9994bf129dec7bf3cf989f03e69092d472960a697f85aa7352209946b85f7efa1b8b421990beb3","ssdeep":"","tlshash":"87c08c62e79d300408321026002f029578ca701071028ddb8efca029067e85c0e80c2c","size":143,"data":"","first_seen":"2023-03-13T15:31:58Z","last_seen":"2026-04-11T12:58:36.378754Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"933d405516d5388ce2b68f7b38e41d8d","sha1":"64cc921bb85a3c3a548b6a12eb01c96d1dacf1cd","sha256":"2c9bfb23af8a5fa66cbfb6cc51684a5d485eb2f37b1341a38c7e19cdd801e589","sha512":"641d925bcc84e0a4d28832cd035dbd32e029cf17cf20650037a10fa4153f256d14bd81e1db88e129893d8f65fbe2dc84ba5483f979a77fc5d45bdedc7fe0b11e","ssdeep":"96:vpRhjjLzsHDgZSj9I3HjIf6PS5wb7liJpGFpLRLYOuF8LdLxXh8fhjvl1QJiztDk:vZjjLvuIt7EPGDVTucRpaPQJiztDWp","tlshash":"c0e1a8e3db1d29490933138c28af44c8a07f7f75e46249e6bd94a31026afd59c275f25","size":6924,"data":"","first_seen":"2026-01-15T20:20:02.595596Z","last_seen":"2026-04-11T12:58:36.379873Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"11a7c8f91cec98ceb823fd6c8fb8711c","sha1":"f2701cc8c8cd05025cad747589ba0b0b7fe907d2","sha256":"a0f2d924be2b3adb47b24ae8d3f7211ab5e48257f95114c7f0cd2f0854a87da0","sha512":"4b8c1358863bcf993d7187e29e520b37a85506ce3d1737e1abac50cf672c855945d4ad006613d29b5120581ac9a39eceb8dd85cf69969f04c58ed470cfd2429c","ssdeep":"","tlshash":"58e0230c9e3d820003b9b00b057a004d7e9f53f132ce66d07e3dd2100b71d3a51d0a2e","size":434,"data":"","first_seen":"2026-01-15T20:20:02.597911Z","last_seen":"2026-04-11T12:58:36.381053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0278b821c1b3468fe466aa1bf31fc3d1","sha1":"450e61112f08d053cf9a2cbf42103d73118304f7","sha256":"fbbc763792b1979707de1e162d0c3ba7fdffab01f3f08bf6b6bdff7e5f4802ab","sha512":"ad568a6fb0fad74db9ea89fa70c42b29510f98b1ebe17dc9d11dfaaa1b9109f3365fef077a744226bb355d3c0c1c2d0d1cf216e183950a399a82e68063730a0e","ssdeep":"","tlshash":"6dc08058f9458676d2f3f615133b3c6d44278310d8540951f47c00b4dcd2e0cd556e45","size":185,"data":"","first_seen":"2023-03-11T11:58:06Z","last_seen":"2026-04-11T12:58:36.382168Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e91703936dcdb4d86d19a75ea0f8b1b","sha1":"d321a9e14b558432747b3322a36207770fc5817b","sha256":"94cd3e22f7dca5937ff7522c715e32afc4e97359d1104e512e45f6345df863f7","sha512":"03888798c0bd7f3afb2b5acad43a91c9843161d15da8147dce12dc8dedf8bb1975e17d3cdcdfe65c88432a6d2f450990dcdb267c9d3f8dab145ff2308a321407","ssdeep":"","tlshash":"a6f027c670386a9112f9a52670dbb904a418646de1d4b30464a91d7612e6d90c63fa3f","size":457,"data":"","first_seen":"2023-03-12T21:13:13Z","last_seen":"2026-04-11T12:58:36.383261Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e464e9bfe628d250d72921b257f128a","sha1":"12cfa9037afe45d02b9ec49895bf325b4db44679","sha256":"81da3ad943e7e7f604c357dda09c108b7908069faf88e42dc07cc742695c6dae","sha512":"ce42637071fb9cdce788f9e3f6092a82e44fd5d35232b3ede1436de3caf213549d825cd7051cb181a1af6c76427bcb6358339ccab7eaa83c6e6d311a07617792","ssdeep":"","tlshash":"5eb0123ce2ad1111403b23518a2b5cd6d517f460d40b5c62830999120bcfa14060bf00","size":96,"data":"","first_seen":"2023-03-12T18:10:11Z","last_seen":"2026-04-11T12:58:36.384277Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d45e703cd5f096b9f5e47fdda10639e","sha1":"312ffe492ef05f5dc9222dee29f4d9c46306905b","sha256":"30e06efd32ef6e82b64bf2827c8fea1c4a3f811e79104adea8dfe29bb1b65448","sha512":"504f2b725a3c02b46ab9ec96245397fb9ae4641c079ef2602fe515b127582a09e79ae3a1b324c5c5379b14d514916b1e1981e04b166ff508537615047117eee9","ssdeep":"","tlshash":"71f027ce70385a9112f9a526b0dbb904a418646de184730864a91e7612a6d90c63f73b","size":457,"data":"","first_seen":"2023-03-12T21:13:13Z","last_seen":"2026-04-11T12:58:36.385395Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0a46e1ca4b84664236b06a51d0f6095","sha1":"6f77920a174b58d1dfc48180794072c721b4824f","sha256":"265688d1f4add8bfea44f34046f713c7acb91dcabc022ff3e3f927a27bdba130","sha512":"f46359d0368b495baecdc5af1f951bf46e21bcf6a201bea68854ee43b9589c450c63a18be108a603a8479bd4c04a7d9e64d9c789ef7c866916b06481e484bdd2","ssdeep":"","tlshash":"59f027c670385a9112faa52674dfb904a418787de1c4730864a91d7712a6d90c63f63b","size":457,"data":"","first_seen":"2023-03-12T21:13:13Z","last_seen":"2026-04-11T12:58:36.387194Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6995cd75afc268e0e840fcab795045f7","sha1":"c9b3c48431761754e72649f956a0ee3616b84f2d","sha256":"663172aeba5548a813a5906bb3e6e82da1ed646e42c1013e9c5f6388956aebfe","sha512":"b3962d3d93f3c14dc268fe23b07f712ff922a4089e0d719941d8f78acf5bfb77d3f6b3ba736fbd5e354c7d873d4907ab78c6e4e995ed85d52a8e352fad4e1280","ssdeep":"","tlshash":"b6e0df18f25dd6b291b7b6ad2a2fb87808b72220e9650455fabc40708ca7f1c8512e49","size":382,"data":"","first_seen":"2023-03-12T18:10:11Z","last_seen":"2026-04-11T12:58:36.3883Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"domTimer","is_inline":false,"md5":"11edca508920f659209beb6c2f41ba23","sha1":"b5b784dfcf7e5932c8ca8e7167145e45dbcf0d02","sha256":"7a25fea0efb1800dbed94e60a9f7ae1afbac3bd4202e2d9d92dffaf624b9f6dc","sha512":"365778ed96600ad040f799b835a3448c89e2490f3d514ce2d0319f614deb58e6e70cf14bc7ea2355eac40a278f20b940e69619e92e99c434073134a1d212e6f9","ssdeep":"","tlshash":"98210020c8080300802c00300008000200028833c38000e08020288808000800288800","size":1290,"data":"","first_seen":"2026-01-15T20:20:02.636279Z","last_seen":"2026-04-11T12:58:36.390158Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"68b9603df925d9e44e78024d8f3b9865","sha1":"506e0856e0c451b43f131c6331686f8cfe6926b5","sha256":"20787e50e988e91a537ce945233f672184b239cf826841a55239f4827da7e48f","sha512":"ae1f02659c9335f36ed7be5828b10ed3805e7657dfb6cfd84f746a9a4c029b79d67e62106fd181324d053314f03b007e13720e8830e57ba47b1776b7db6adf7d","ssdeep":"","tlshash":"25f0dcc7703c6ea113f86625a0cf3605a448246ee1d4730054ba1d7613eeda0863f637","size":456,"data":"","first_seen":"2023-03-10T15:58:47Z","last_seen":"2026-04-11T12:58:36.391134Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/js/main/ajax.min.js?175921142922194","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd8650b5d57829727a559e819547a152","sha1":"ab1d0903816b8aa6bf41d11c3655d6bb1bb5d7f6","sha256":"19c9c3b9624a58897b552e0a5694d483738bd550c09a2bae727f81bf60b27f9d","sha512":"625ab33b82f5efed08a2ddb790265ed1d5b8ae721b11b14a81f8b6d12b132771381991d708d40bdd344ba80b3f3a65302b41d9df40af2caff92a2a9f7649f072","ssdeep":"384:3RUT05tmy74EQQ7vNWqsqbQm20rAC1JdRAr3EQWfiHdsYsoue2yBHJscMNpCvM:iTa7VLn2gJd+r3EUE","tlshash":"54a2e995b1e4ac7353dd707b25abd38432302167b84754e0a19ddcd8a8b8f1ab81af7c","size":22194,"data":"","first_seen":"2023-03-07T13:10:53Z","last_seen":"2026-04-11T12:58:36.317104Z","times_seen":1037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a55f369260583be06b6df94a4c4fb3e0","sha1":"f0d22c88322b906b3d4194d2437927e3cc015893","sha256":"c9c44c30b9379274f9c7c5889799a142c2f5ddb563a383a7c2dea39186e11386","sha512":"b3677f9817b549c4280fcf392429abb24902071deb1fd48115974456b18562defaad4e2789f04f789db371b35499be0d8a19efcabeba90925697af08ed08cdca","ssdeep":"","tlshash":"07f09e49f3ac749001f735ba40393e9d6618b422f4074d78ec9ea8542cd8a0c3217e3c","size":498,"data":"","first_seen":"2023-03-13T18:45:41Z","last_seen":"2026-04-11T12:58:36.392756Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"155bdd2accfba36c43f5571788ef3ad1","sha1":"db67eaba2da6be1344ed86de533c16ac58e7b3e2","sha256":"bc00bff09aa5fcd67ad3fcdedf3eb339f9c3057552e5c0c9ac7c18582fbc84c6","sha512":"e81de57a979ffd6796b3ece8bf00e13219e75ac7b9f2380b329297297b8b90006162d02c8666ecba32d33d9d1b714422aa2ca49199a8a9f0b95dd3b78f2beb31","ssdeep":"96:7jL4kpcRzwVuLE9yBjhWtL3Srsvasj02ta3FOPqxbtRapD7aRqhEg7Pka3SeWyL1:7Hx6sVQEWjEl3Srnsj0ma3FNXapvaZa9","tlshash":"69c12ef4da2c467f884662bc295c22d9f67c01b8dd0d8963b5b8983cb4d8a8307f55b6","size":5867,"data":"","first_seen":"2025-03-06T22:27:17.457114Z","last_seen":"2026-04-11T12:58:36.393362Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1973a1eaadc14b298f11ed32ce71bab1","sha1":"9d7f0199150ab17876a160d4f18aeb2e26629ef6","sha256":"e5f6c08e78ffdc356c3e55c8a0c8e83c3c416cdd0833fc920f34630023532c37","sha512":"1c21f7a49c6de86e315039b64bfb8a109b1d0e7239bec720804c59694bb7ab4ad86c9900108acc69e2fd1dc18cd9a18a80ccc78a26ff09aace82c3d513baf10e","ssdeep":"","tlshash":"8a318856f25c363242fb102e444dd889dcee8ef6b99d5471f8d5b03a8929189820bcfe","size":1664,"data":"","first_seen":"2023-03-12T21:13:13Z","last_seen":"2026-04-11T12:58:36.394445Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef475e4341f32725c4c01d5f0411777e","sha1":"e52060cb27677888dfaa921fc92c91f8c662d7e5","sha256":"5f85abc9e341842578dcc5707da162499cf20abb2d07001aa3c9e83026bbe3ce","sha512":"d2529ff955a1c0ca0d4cd3ed4729df5810c98b8469b9b2b26b68f4a3e6c607b712a5f3f1a7d93d402637d6a4d197ff3ffc39309b01ee5ccd5363e780d55878ed","ssdeep":"","tlshash":"8be0cd50a73521758332462b1fdcd40acd984543f80f59baf4dc192457a83718757ff0","size":318,"data":"","first_seen":"2023-03-26T01:21:44Z","last_seen":"2026-04-11T12:58:36.395534Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cba9070e4c6019dcf146b6aff1fdb39","sha1":"f021c9c3d1de13d2f6daa717c4687589359dc044","sha256":"0b7546140c2ce771bb5c76cc7263795fe0147057134e6830823f224861ac6895","sha512":"d1ef0321b957cedd01e46904893e895b54e759f9801224ea00a1ed2b2e90ba0cd9b3b9bb853fba8c0f4ef5fce2dbee7c8041ac91ee5cca29ea7d88156f0d6c21","ssdeep":"","tlshash":"0a212100f35c62681f7b21662d7ee486d5af5151ec0184faf9b915bc29941222f23dc8","size":1212,"data":"","first_seen":"2023-06-26T13:01:48Z","last_seen":"2026-04-11T12:58:36.396362Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4562c7328280cc3b16a7787d77cd8aff","sha1":"691e85f5ec7490e89724f30c2e8c1dd1ab87b208","sha256":"34cdbc9d30182aff5d8ab0343a711834a09a1d1da95a6c9cfb5062240d6ef239","sha512":"37e3f3a90cf86aa8af01bcc18ff16eee83941af90fd964e42b59d31fbfdc95018b16d4d9d1a7b614a8f7e729cc6457c5c339bc143df014840c2968170f481666","ssdeep":"","tlshash":"05b0122cb56871b4083720613c7f891c2e537010a54b2064a33890a8460803e350710f","size":95,"data":"","first_seen":"2023-03-12T21:13:13Z","last_seen":"2026-04-11T12:58:36.397156Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6729064ccf3ed37b7c823a49fa6ed20","sha1":"066bbb74cf599453d1d2fa30633ef3df65da936a","sha256":"7e681408c13161af0d9c22e5584373d84819847aca6bee5148de3898b43c1008","sha512":"dd279eeac2652e0bc170e18ad84babb4d4eb71a395ba308a5bc78fbbd48c55adef3a0aa2daa95426a8aacf4be174581463d975fa2929241e15cd3c14bcc48020","ssdeep":"","tlshash":"3cb02b20d419c9200a3114d03cbf01503100f101795104d5014c703c14ccb10008a804","size":117,"data":"","first_seen":"2023-03-11T11:58:06Z","last_seen":"2026-04-11T12:58:36.397722Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"80dd25af54fe494f058809d87bc8e652","sha1":"6862a351c0b3fd0e6149d14d683edfce6962cc9d","sha256":"92f7c7503b3cd088c2cd4be820b0a4ef940ca4a217024c9b0884581bc43bc42b","sha512":"f5d7531797707cef5679c3308fdf9319a024808e4463d5ab41e413a4b07428697150eca14e9f4f774d310df76cc79c27b6db506967e76adcb0589274648402d1","ssdeep":"","tlshash":"b3c08c06a200d32580fdb037222d61c2c02013aa82c88f04b07101e0cc1edd412db456","size":156,"data":"","first_seen":"2023-03-11T11:58:06Z","last_seen":"2026-04-11T12:58:36.398579Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/kernel_main/kernel_main_v1.js?1759213845189267","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e76e7c8ca8b9ea12da387edced95cbce","sha1":"2b8b9b5cac063c25daa05edbb04616fee8781122","sha256":"2a0e77b9d8a67f898a53dd7090563c8ed83c684a5da18a3b1bd64ce174b95cfd","sha512":"0130888a383f064c6c8bdc831d1f3f8d7f9d1bd90e97963bf64f5269f055e13c8b0bfdc33c727b547a1bc291d74f2c8d92fa4a587d47151237298c7316a8874b","ssdeep":"3072:dJTMmtxZ13IwyFYh4zVeLfHyGgEc/SLkxPjMwVw3SfUM:dJTMDEnyGgEc/SLk2wlUM","tlshash":"10042b49b56d713f83fa60a9161f1309733981b569084869f828e9e4fcb4d0b927bf7c","size":189267,"data":"","first_seen":"2026-01-15T20:20:02.544407Z","last_seen":"2026-04-11T12:58:36.359721Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"80dd25af54fe494f058809d87bc8e652","sha1":"6862a351c0b3fd0e6149d14d683edfce6962cc9d","sha256":"92f7c7503b3cd088c2cd4be820b0a4ef940ca4a217024c9b0884581bc43bc42b","sha512":"f5d7531797707cef5679c3308fdf9319a024808e4463d5ab41e413a4b07428697150eca14e9f4f774d310df76cc79c27b6db506967e76adcb0589274648402d1","ssdeep":"","tlshash":"b3c08c06a200d32580fdb037222d61c2c02013aa82c88f04b07101e0cc1edd412db456","size":156,"data":"","first_seen":"2023-03-11T11:58:06Z","last_seen":"2026-04-11T12:58:36.398579Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"80dd25af54fe494f058809d87bc8e652","sha1":"6862a351c0b3fd0e6149d14d683edfce6962cc9d","sha256":"92f7c7503b3cd088c2cd4be820b0a4ef940ca4a217024c9b0884581bc43bc42b","sha512":"f5d7531797707cef5679c3308fdf9319a024808e4463d5ab41e413a4b07428697150eca14e9f4f774d310df76cc79c27b6db506967e76adcb0589274648402d1","ssdeep":"","tlshash":"b3c08c06a200d32580fdb037222d61c2c02013aa82c88f04b07101e0cc1edd412db456","size":156,"data":"","first_seen":"2023-03-11T11:58:06Z","last_seen":"2026-04-11T12:58:36.398579Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/29b/29bab5a9ac162c542d7b20f22e511066.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/29b/29bab5a9ac162c542d7b20f22e511066.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4872\r\nlast-modified: Tue, 30 Sep 2025 05:50:46 GMT\r\netag: \"68db6fb6-1308\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 24, 8-bit/color RGBA, non-interlaced","md5":"522577c74bd45ed7418ee8e1191d86a5","sha1":"17e10547f9120f25b48c1fb81dd2054f11264d6e","sha256":"5d791f285a455a40762c7d963f057145407315fba4f181c4ef807a7b5e8ca2ad","sha512":"8efa065d153af51deb187c8c70ea6fb93d12529cfab9bcd427914a310296f12320703bcd023abf61fb0fb868f01b424c2aacfb33ab500e6c0b70ae99d7908d01","ssdeep":"96:xdEXGWdyVTu1tHO2qkBT1CxPZai9b9uUjR5sqnAzo7TT2NkR:xdEXRd7B4hZam8Uj7Oo7Tj","tlshash":"3fa17dc390b1b8bc57de23daf293744aa71125ba6f17d418de908f31b490a272c4e441","first_seen":"2026-01-15T20:20:02.563971Z","last_seen":"2026-04-11T12:58:36.311818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/templates/aspro_mshop/images/map_large.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/templates/aspro_mshop/images/map_large.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/template_0a4f59623f3fb24fd7fc785f2bbba664/template_0a4f59623f3fb24fd7fc785f2bbba664_v1.css?1759212620550263\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 303172\r\nlast-modified: Tue, 30 Sep 2025 05:50:32 GMT\r\netag: \"68db6fa8-4a044\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 800, 8-bit colormap, non-interlaced","md5":"dc470833691740ffb4f4050da8a837f8","sha1":"ea13ae9a17ba0aa8e31ac0c003dc2836fa721b7c","sha256":"5f43491153ec2c6174ebe00cc5423e1c9c499f411285e8c38926f0c8772b14d7","sha512":"95c0ef36002cec79d1b6cf17658ef8c13973e3eaa01919e37fd2c9301ecc5e11e86576bf5fcb0eb170766cf1dffa3006fd370c3e444cd5138e96b3f3eb8908d6","ssdeep":"6144:Px4/zUo3WRqXiIgUewuoxA3tS97QLsjJyAvWviZsXVE3tSxVX/vc3a5pudmu:y/zXmRqgv9YutS9MLsjfuv/gwSa5pugu","tlshash":"6e54237fc798c88479aef1779ba268a7078c7e4c550ac10b464e614216e3427b34e7bf","first_seen":"2023-06-09T10:57:34Z","last_seen":"2026-04-11T12:58:36.312995Z","times_seen":83,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/favicon.ico?1759211445","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /favicon.ico?1759211445 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null; BITRIX_CONVERSION_CONTEXT_s1=%7B%22ID%22%3A5%2C%22EXPIRE%22%3A1775941140%2C%22UNIQUE%22%3A%5B%22conversion_visit_day%22%5D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 52108\r\nlast-modified: Tue, 30 Sep 2025 05:50:45 GMT\r\netag: \"cb8c-63ffe55520774\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52108,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 169 x 164, 8-bit/color RGBA, non-interlaced","md5":"65c5876821eece316929a937979de183","sha1":"f354c2ccfaea4456cdf12f5b6df2e88661f37498","sha256":"ec0c97ee2e9a137668ec34189e1d368451032209d4e20270cc5a61586105c893","sha512":"45b4667eb37f55644bac24d92f73a0023756c3f87675ce80a7813d5a1626394ec0531cbb9bcbff6ebef50d50e694c46e0b2b58b5a916c1fbb3abd5606aa2817c","ssdeep":"768:8i2XA1xjBEpx3dGnJ2cE/54J5MFq9ZpQT/xVw8N2wx+:8pXEjBexoY754J5MFqfWa8NJ+","tlshash":"c333e070ff773166f79b613a28e02d9058371a03d998cc697ebc00935f283ee9c96959","first_seen":"2025-12-12T16:09:28.089602Z","last_seen":"2026-04-11T12:58:36.314325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/847/847de604fd3706d8ad5322f02de7e435.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/847/847de604fd3706d8ad5322f02de7e435.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4312\r\nlast-modified: Tue, 30 Sep 2025 05:50:52 GMT\r\netag: \"68db6fbc-10d8\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 48, 8-bit/color RGBA, non-interlaced","md5":"10d81bf6fd1ec46dac31ce487d552c7a","sha1":"50c194ccb9ed06ef55a6ef9b0b4395a1dff3bb71","sha256":"51cb06fa17dd08cd026d84f30196c48023814994a996e920b2306c8585128367","sha512":"b1dee68cfd061a040aa9bbc91dd8d3a5708d5fb398fcc0fb2b63169929d7f1641e5d1e902ede5e462df2b10995f50b97f6048ae2243a0e8381eb4c3fe6204f50","ssdeep":"96:dZFk4O+bCrR9CWoAhfjCw0+E6XwLWJ1IpDbaQIIOdP/R:pk41GrRA4Od+E65J1UDuQIv","tlshash":"3a918df3e64a1b31fa5db3a945b1362283a2417a2c19e34c037884703bb5f730ae420d","first_seen":"2026-01-15T20:20:02.574447Z","last_seen":"2026-04-11T12:58:36.315234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/template_0a4f59623f3fb24fd7fc785f2bbba664/template_0a4f59623f3fb24fd7fc785f2bbba664_v1.css?1759212620550263","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/css/s1/aspro_mshop/template_0a4f59623f3fb24fd7fc785f2bbba664/template_0a4f59623f3fb24fd7fc785f2bbba664_v1.css?1759212620550263 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Sep 2025 06:10:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db744c-86577\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":550263,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62045)","md5":"5a23eb425c258ca7be7b958dde5816bf","sha1":"d4c5cc7b42f49417e83c90414c4fd33f584e7348","sha256":"e9d96f542f672c6e93dd60419d3ed89814e9480dad2f424ed9d9d7ee9270f21e","sha512":"dba4f2a7ef51356400723272f4b22fdcb44d8f329a53eb8b8ca0f1794c24f51fe187121f6d543a81ef99df4bc69a0f02cc4ad3d8451f2b1d17c4d8eec677dbea","ssdeep":"6144:vu3XRpjX2Ffqy+eXfBq/wUE1bxqt2s8mOyrwcw+e+6+e+J773HD2j4+4+P+g+woU:SiBq/wUq0w+e+6+e+JXb+4+P+g+yUA","tlshash":"bbc409639979356fb17bd22cf9917becb4345113e21309f9e5b8d638c3ca4861233a4a","first_seen":"2026-01-15T20:20:02.536252Z","last_seen":"2026-04-11T12:58:36.316128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/js/main/ajax.min.js?175921142922194","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/js/main/ajax.min.js?175921142922194 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 30 Sep 2025 05:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db6fa5-56b2\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22194,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (22161)","md5":"bd8650b5d57829727a559e819547a152","sha1":"ab1d0903816b8aa6bf41d11c3655d6bb1bb5d7f6","sha256":"19c9c3b9624a58897b552e0a5694d483738bd550c09a2bae727f81bf60b27f9d","sha512":"625ab33b82f5efed08a2ddb790265ed1d5b8ae721b11b14a81f8b6d12b132771381991d708d40bdd344ba80b3f3a65302b41d9df40af2caff92a2a9f7649f072","ssdeep":"384:3RUT05tmy74EQQ7vNWqsqbQm20rAC1JdRAr3EQWfiHdsYsoue2yBHJscMNpCvM:iTa7VLn2gJd+r3EUE","tlshash":"54a2e995b1e4ac7353dd707b25abd38432302167b84754e0a19ddcd8a8b8f1ab81af7c","first_seen":"2023-03-07T13:10:53Z","last_seen":"2026-04-11T12:58:36.317104Z","times_seen":1037,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/816/816cc918a6ca5d2a9682bdc4385cdf45.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/816/816cc918a6ca5d2a9682bdc4385cdf45.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4978\r\nlast-modified: Tue, 30 Sep 2025 05:50:55 GMT\r\netag: \"68db6fbf-1372\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", baseline, precision 8, 150x37, components 3","md5":"1454922fc6aaa5b02225b739143de782","sha1":"c0cf9501461fbe31994ebefbd9b582e233d137b6","sha256":"949bb9d8e3dce893a84ad6cb90461ca9b36b39d0c1c78f6e38488be15585c64e","sha512":"1d84537a989131f296c8f6148c0a900e22a609d1786629173ceea06c3261e1ec0b0f56a2ff4ab59893fb6dcfcaa2b833bdb85d8d7dfbe7f46f7dbdb46148feb8","ssdeep":"96:6fElDBZU6lsXKj2SOovcZXBNXEExqfVxBuT4vFkuT:6fiPJjyqvcUiqK4vFku","tlshash":"5da18e2ff79392a40827d27922e515c4a64c23fbdc88f0861be5d92bc878a73449dc6c","first_seen":"2026-01-15T20:20:02.562635Z","last_seen":"2026-04-11T12:58:36.317702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://podshipnikug.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18668\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 22:57:36 GMT\r\nexpires: Sat, 10 Apr 2027 22:57:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 50432\r\nlast-modified: Wed, 27 Aug 2025 19:19:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18668, version 1.0","md5":"dba1ec75dfb8d3eac6d55125ecf492de","sha1":"e3bc0f7ad9309ee8e04fb27c20fb4f0985c40c28","sha256":"7141e2f1c644d2177574909484c430e4e254af7daf7e2a253a49bae92cdfd3d8","sha512":"8ee59c8285e4a8b462545e22dcd2d7ea8fd9183a70022978a38f75f93b29283c93ca606b9f1bf4baccac2951915b1e0bfc468effa1b88f19f01b2dd5cf03c860","ssdeep":"384:QQjqHdyYSIdcUo2/wLlUOZNsRKGiIdbb+0fufj44:pjediIlexsRnism0fu/","tlshash":"4c82e1c365fc7d79a1c0d26a740907187b3139df614ac3f50d1a2479a0976ee34ea1e1","first_seen":"2025-09-03T01:47:43.118762Z","last_seen":"2026-04-11T12:58:36.318621Z","times_seen":420,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/default_a68e93ec353e864d7d173ede21753d68/default_a68e93ec353e864d7d173ede21753d68_v1.css?17592126203572","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/css/s1/aspro_mshop/default_a68e93ec353e864d7d173ede21753d68/default_a68e93ec353e864d7d173ede21753d68_v1.css?17592126203572 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Sep 2025 06:10:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db744c-df4\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3572,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3326)","md5":"68dd31d4b5f8fe1c2460f72623461924","sha1":"64681bf622b40ac46db973ce128cf97ccf3136a5","sha256":"a89b0e19358f655131ae09e3b3f32408662ef0a845a8b967feaff0c895331c84","sha512":"3769b74a4569fb8c9e8c4f8b96b531d6a418ea04da55d19c209501d53a1c4473ee9b776406f490d4a27a8b9f87208a668417e14043461b2898acdcf25f50d370","ssdeep":"","tlshash":"9071dea35538236ca1fff19fa46057cef034c446edbb1666e754a720cb44aca1827f98","first_seen":"2026-01-15T20:20:02.550305Z","last_seen":"2026-04-11T12:58:36.319274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/templates/aspro_mshop/images/arrows.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/templates/aspro_mshop/images/arrows.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/template_0a4f59623f3fb24fd7fc785f2bbba664/template_0a4f59623f3fb24fd7fc785f2bbba664_v1.css?1759212620550263\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3514\r\nlast-modified: Tue, 30 Sep 2025 05:50:32 GMT\r\netag: \"68db6fa8-dba\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 300, 8-bit/color RGBA, non-interlaced","md5":"adc3a775597012845c73619f702a30c0","sha1":"2a19b3555b5acb0d24a6b0d88ecbfb961aabf86f","sha256":"0b68fcc5acd51c32c2cb9824291f1f873cf2a058a697b46520b4f6ba2c604f29","sha512":"32c0787d1ae8fa7b0884996ff718b8b9d1449f83be62c2e6e1a9de4abf29a0f3666cf0ef892e957c71ab12d04f59dc1b34a5f43af53fa7c1c1db326386ba80e0","ssdeep":"","tlshash":"bd712bfdaf048323a082d185c1c930679e2f29c5c5d5cdab749bc19f5ee90ba5d09cc6","first_seen":"2023-05-15T01:22:40Z","last_seen":"2026-04-11T12:58:36.320235Z","times_seen":97,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://podshipnikug.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 19:54:24 GMT\r\nexpires: Sun, 04 Apr 2027 19:54:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 579824\r\nlast-modified: Wed, 27 Aug 2025 19:19:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18108, version 1.0","md5":"d919015fb9ab2191b9541ac982746799","sha1":"ca30ddad824629de2bee6872d54158e65c6c9738","sha256":"0cb2c5c2d5750826f2ec6c675d772f8014b7bb708c28128a76beba154b43ae49","sha512":"23386556a818bc33a15808c84088673434d43da9b00c7c5d2a58068991460efd21b6e5c80c28c29dcf9546d2471b2721daf15443cf59cee7f6a13b469d5939e2","ssdeep":"384:uTOA+mwd/AXdXXnP0mOrkn5Oa1ArLNSAJS7xfylGNAQhvd/Rl:Nmg/IdHn8rYX1aLNSmS7tylcAQJN","tlshash":"c082d1ac68fed31ef11db179b3461eba1a4484068676cbc121e77e2280247559b32dd9","first_seen":"2025-09-03T01:47:43.100585Z","last_seen":"2026-04-11T12:58:36.320807Z","times_seen":693,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/874/87421999e8f0bd702daf19847d6c8dcc.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/874/87421999e8f0bd702daf19847d6c8dcc.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 571246\r\nlast-modified: Tue, 30 Sep 2025 05:51:15 GMT\r\netag: \"68db6fd3-8b76e\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":571246,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 1920x399, components 3","md5":"730f77517835de35901d5f4fae7ec3fd","sha1":"df616a1a969e4ce6f17c43b7a04adf41878a1ed3","sha256":"2a3c5666f85742191d37966e2fa867dafc584b3e5eab5021589b8e1e8f39d937","sha512":"90a505126354ceb83e6d98fb2c3747ca82e73de65d94c30fb6e2adda33efc0be41f3678e4331df7c08d4d612eeed89efe82d7187bc12d46371fe14b70b33cbc8","ssdeep":"12288:wSAHMgWWswdZs1YPoo1j2IDT862Skp0He9dkbIerpM:ZU5m1YP5j3hA4OkFrpM","tlshash":"c2c4235d5a35a7b783736e3a8094c3352bdc4152f6c5de0a3a205a4c3b6cdc92ceb71a","first_seen":"2026-01-15T20:20:02.542936Z","last_seen":"2026-04-11T12:58:36.321462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/a27/a27c33c84d54c1ab46baf6f75c7d4cb0.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/a27/a27c33c84d54c1ab46baf6f75c7d4cb0.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2425\r\nlast-modified: Tue, 30 Sep 2025 05:51:12 GMT\r\netag: \"68db6fd0-979\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", baseline, precision 8, 150x38, components 3","md5":"61b591f9d7061d21f10e5270d3f255f3","sha1":"26211728c568e95756dec06e3786d2f667ac0684","sha256":"af20df7315ed2886b020babd41b5564b14ea963098787f3907ba307223e3254f","sha512":"9ace3b2996621c8f4491d473ed47ffca696712b86a160714bb4d9d53feccaf031caa93c20d2672f225ab0d7e4b646a0554a3d7af68b86a865d4f0d8a623be1de","ssdeep":"","tlshash":"66413baac90749584906ddf7dbc42702819a0d81d76827076e36d6a2a72059c7c2de8d","first_seen":"2026-01-15T20:20:02.537577Z","last_seen":"2026-04-11T12:58:36.322599Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"site2.cy89513.tmweb.ru/bitrix/spread.php?s=QklUUklYX1NNX0FCVEVTVF9zMQEBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9HVUVTVF9JRAE3Njk3MzABMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9MQVNUX1ZJU0lUATExLjA0LjIwMjYgMTU6NTg6MDcBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9TQUxFX1VJRAEwZmYyNzA5Y2VmZGU3NDQ2MzM1N2MxZTk0YTc2OWQxOQExODA3MDE2Mjg3AS8BAQEC\u0026k=0bf4156c32306ce7eed655d6089705cd","fqdn":"site2.cy89513.tmweb.ru","domain":"tmweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.373Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bitrix/spread.php?s=QklUUklYX1NNX0FCVEVTVF9zMQEBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9HVUVTVF9JRAE3Njk3MzABMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9MQVNUX1ZJU0lUATExLjA0LjIwMjYgMTU6NTg6MDcBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9TQUxFX1VJRAEwZmYyNzA5Y2VmZGU3NDQ2MzM1N2MxZTk0YTc2OWQxOQExODA3MDE2Mjg3AS8BAQEC\u0026k=0bf4156c32306ce7eed655d6089705cd HTTP/1.1\r\nHost: site2.cy89513.tmweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T15:55:57.916718Z","times_seen":13626335,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/0a0/0a021d563d29759064d72aa089273a2d.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/0a0/0a021d563d29759064d72aa089273a2d.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4413\r\nlast-modified: Tue, 30 Sep 2025 05:50:49 GMT\r\netag: \"68db6fb9-113d\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 107 x 48, 8-bit/color RGBA, non-interlaced","md5":"8b76f7a466496a9d1ca814498534e842","sha1":"973030d5beafd292a4bf5b5bdc40c6bb618e17f1","sha256":"41521efcd65ab6f47145cf7b72e158561cdc303e79fabe63f544d15a8ab89f03","sha512":"23f8cb46cc98e7c036ba53057a50c8149e805e703338d1b8b9b891173d30591d80e6434d47bbc5176273821e396e5f6a890d84a82b42d7c350aca18ad037265e","ssdeep":"96:ZJKbsdI8UpatGIh7sXtGW12dmd832kznDxU/dULaQy5WjZMvPtNlw:eyI8UatPVsXtP2f32Kw5QLFgfy","tlshash":"97916db48d7a203e7c1cae044c260ef6f696db9c416760fc916ed4c861cd3082d137b6","first_seen":"2026-01-15T20:20:02.517607Z","last_seen":"2026-04-11T12:58:36.324105Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-11T12:58:07.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\np3p: policyref=\"/bitrix/p3p.xml\", CP=\"NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA\"\r\nx-powered-cms: Bitrix Site Manager (609ad2c367b24b90045470bd198e2416)\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; path=/; HttpOnly\nBITRIX_SM_ABTEST_s1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nBITRIX_SM_GUEST_ID=769730; expires=Tue, 06-Apr-2027 12:58:07 GMT; Max-Age=31104000; path=/\nBITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; expires=Tue, 06-Apr-2027 12:58:07 GMT; Max-Age=31104000; path=/\nBITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; expires=Tue, 06-Apr-2027 12:58:07 GMT; Max-Age=31104000; path=/\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70521,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2876), with CRLF, LF line terminators","md5":"31a31b15fc24edbacb4d0e859963578c","sha1":"bf8c3af628ee45e674455c0a9729b165c3ad29b3","sha256":"a88b8061c2930d1843d084b614d944ff2b2eff5bed8fd00aa84b27a2d2e02d3b","sha512":"3a516ebfc0fc352fcfd6f8dadaf5872cc78b8aba3b4cf5891ff0bbcac9f31039b69d83b83b3d717781dfb122dd3a2cf5805b2fac86e6efbc1c6ac6020cec524d","ssdeep":"1536:DjuEsuua9EUPhYPF+dPNd3YjG6JoszS5Vxj7f9N:DjuEsuua9EUPhY9ue4P1N","tlshash":"32630a52b16c6c7f02222187e03d7b4de4efcc75ea1345a2b0f6163b33d6d84e62a656","first_seen":"2026-04-11T12:58:36.325089Z","last_seen":"2026-04-11T12:58:36.325089Z","times_seen":1,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":191,"dns":101,"connect":39,"send":0,"wait":211,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/kernel_main/kernel_main_v1.css?175921384519041","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/css/s1/aspro_mshop/kernel_main/kernel_main_v1.css?175921384519041 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Sep 2025 06:30:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db7915-4a61\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19041,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15851)","md5":"d3f1d17d71957354aa886a878e0b3194","sha1":"91da133bf3548111deb7ed80eaa824fb2e49585e","sha256":"6e0cece038100cd1df1fee2935f327075b57de0c3c38d398cc72abf06238e755","sha512":"a6db11e66c02964c9bcc5648424cbc1b4343ff2c1df6383faff080e19b406f3c50636f43bf7442e270f0009db3eb92512596959240bd65d1ccdc6a6d1165d2db","ssdeep":"192:d6++Gv+u9nKXmoZ9uuqcwEoRc8jeOx+uagEOXE8iHzPVeYrPrnr9rNgrNCrorimS:CGm3TZ4hcw9RcXOx+uaF8KzPVe/O60","tlshash":"408252b1f580394aa13fc715d383bb6c25269042f5114f7eb214f674a282feb937626e","first_seen":"2026-01-15T20:20:02.558751Z","last_seen":"2026-04-11T12:58:36.326056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/page_57d6b0b71a39b4b763c1f9618670f39a/page_57d6b0b71a39b4b763c1f9618670f39a_v1.css?17592126204812","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/css/s1/aspro_mshop/page_57d6b0b71a39b4b763c1f9618670f39a/page_57d6b0b71a39b4b763c1f9618670f39a_v1.css?17592126204812 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Sep 2025 06:10:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db744c-12cc\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4812,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4598)","md5":"4dab18d1f9480315298ef9c959ec1d9c","sha1":"16e6df894883e8b1e67ce8a5134922a510b6458c","sha256":"c7268e1d224fd10c8c8ae9a3c6ffd83934a7df78f851c3e2bb4b991599ae9e96","sha512":"37328e5a87df89b3292ad0f315b428299417da6aa7a717312cb9051247c5dce40cc149cd8168ea69320c22cf7d55d577b0ed1956e0c2ee97e07e6fb1bfdc43ee","ssdeep":"96:CZQK6HXZdaE4fZdxEBPISpljmrzISd6SZoEb3c:CKF3ZdWZdxEtxmrzISd6SZPc","tlshash":"38a1bc62d27918ee721bf27dba18fadee1e0484742429becc0d16274c3de1e219579cd","first_seen":"2026-01-15T20:20:02.576855Z","last_seen":"2026-04-11T12:58:36.327019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/template_44d827daf5c7ab8cfac2a726225f7b94/template_44d827daf5c7ab8cfac2a726225f7b94_v1.js?1759212624319322","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/js/s1/aspro_mshop/template_44d827daf5c7ab8cfac2a726225f7b94/template_44d827daf5c7ab8cfac2a726225f7b94_v1.js?1759212624319322 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 30 Sep 2025 06:10:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db7450-4df5a\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":319322,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (21571), with CRLF, LF line terminators","md5":"00bae9ddb979e389af1d32be18a4a509","sha1":"1079c73bfce0656e2b7ba7c94f5c0724ebedbdbb","sha256":"99e0c6a1372320a099d3f0b3e7cef24fd20a91d47d74a97ba0c09a91d1c67ba5","sha512":"bf0a108c2e2b881246abf81c51f7cf180d39f42793c3fec076e8d586293d8af101c0b018f475a4df28d128154347649948c35586b04eefe29af873f9d8d6994f","ssdeep":"6144:9+Er05Y/EUwCjP/Lsn4lHKxPI1VLHrdCUtkjUa+rdTj3J+UtMSV:cM1fP/7HKKbL8SV","tlshash":"94645a4ab251366347f730ba116f1107a172ab3ae40a8054f07ad4e42ebcdc96777f7a","first_seen":"2026-04-11T12:58:36.327855Z","last_seen":"2026-04-11T12:58:36.327855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/kernel_concept.tagmanager/kernel_concept.tagmanager_v1.css?175921262098989","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/css/s1/aspro_mshop/kernel_concept.tagmanager/kernel_concept.tagmanager_v1.css?175921262098989 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 30 Sep 2025 06:10:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db744c-182ad\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98989,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55097), with CRLF, LF line terminators","md5":"c86d84aee0c04ab2dec7db2d9cbaffa1","sha1":"d0ad72a94ab83213d91427dc4f27a1d2462bab94","sha256":"7f1d0a04ffd583b482513786ac79e8cc557d02afb640920e973142826a3763c7","sha512":"96476b904c4387871cb4eac88c20c5519ce7525de872b0ee5ce6c8fe6aece0f87e6f81e4734f25cd9a445b1b28782ea6fef54224d19c7bf33baa515be81533f1","ssdeep":"3072:+kZGwO1CA5kiDb3CyQ5xrQe/0ST5JitFMNd:+kZGwO1CA5kiDb3CyQ5xrQe/0STL","tlshash":"29a3217fc8701245622b0aa2d3ec0e65c73a895348666cfe3345384b9f96f9f22d6747","first_seen":"2026-01-15T20:20:02.546912Z","last_seen":"2026-04-11T12:58:36.328689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/js/main/jquery/jquery-1.8.3.min.js?175921142993637","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/js/main/jquery/jquery-1.8.3.min.js?175921142993637 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 30 Sep 2025 05:50:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db6fa5-16dc5\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93637,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65482)","md5":"73804795d9acd833df75c190bd36fbdd","sha1":"8572e0c20913128656f9cca75151ea445c04bf42","sha256":"375d351d3e2fce7b3d15a56a43dfdb13ed953fdea6ab707b7f0f7c4a626d31d9","sha512":"d6e7cf34d449e651032788b3ce9807f3067139d0d565c2eaa81f3a7ba86c585a5b3d4d281b3a6a867c8e517158009bb3cc9cb23b3d821a8cf66e6e35be1f7695","ssdeep":"1536:86IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:++vIklosn/BLXjxzMhsSQ","tlshash":"7193f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T15:49:14Z","last_seen":"2026-04-11T12:58:36.329872Z","times_seen":425,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/29d/29d905e7d4c9a0740b894a35edfc7489.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/29d/29d905e7d4c9a0740b894a35edfc7489.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4760\r\nlast-modified: Tue, 30 Sep 2025 05:51:05 GMT\r\netag: \"68db6fc9-1298\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4d8559b6f05afff3772674063e54ea2f","sha1":"71d5e7ed20d34490cc7ffba102edc24a269abc5d","sha256":"4d0c419454656e7922eba196e9c4e39e6233483bb20b8e52bc61c931004844bd","sha512":"35da0b33e70cdec9a312a0c6cdfbd366870d8299a7aa897a3b7bc45cf2161bb91079edf4a3a164618c7ec7e0446b86aa1d06a4aac9029dc35b52b2f1ff9bc1cd","ssdeep":"96:cH5tIaaTlNIJg1hMOIaHSznzdqvuWbKqhUiOVDIUZEQKP2iaWaEyfZ:Q5tIaelNIJQhM1nzddWbHUimUUqHHaWu","tlshash":"92a17efdc612c6de4d6c779274ae0d90e82c9329ab08c1fbd42385e15314e69c85a6d1","first_seen":"2026-01-15T20:20:02.530477Z","last_seen":"2026-04-11T12:58:36.330468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/79e/79e1832d73d7c445f2e8681784d4455d.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/79e/79e1832d73d7c445f2e8681784d4455d.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6282\r\nlast-modified: Tue, 30 Sep 2025 05:51:18 GMT\r\netag: \"68db6fd6-188a\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 119 x 48, 8-bit/color RGBA, non-interlaced","md5":"b12dc7a8a4f6e9badf13b2cb09a40155","sha1":"b6215c3cb0ccb7552c911272469214aec6024896","sha256":"bc19f2873cfeaff5b02536ebef89070c9422b3910499ac567e63822e55b558b8","sha512":"c4a6b69befeb38804d028f41ba724165532569596c1a64c943b80693d877d89003535c480b746cb0f23f17e0816dc3445c5eb89234c81298e1d4dd427b0baa9f","ssdeep":"96:Lr9zFv3scGWe6Uw7+kDVpin8cI73PeSMSzh56JV1TNJkE3S1EDRr3k9p8sSV+i:LrXvsDEUJn8bNNP6JHTPDQ8hci","tlshash":"2cd18c4bb85a13dd990cb100c37b73c7d458b8580b4999685eff2da61a26b0780e4bad","first_seen":"2026-01-15T20:20:02.570832Z","last_seen":"2026-04-11T12:58:36.331437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/d43/d43ff525557f6f4b689c59d97fb6ab70.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/d43/d43ff525557f6f4b689c59d97fb6ab70.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5685\r\nlast-modified: Tue, 30 Sep 2025 05:50:47 GMT\r\netag: \"68db6fb7-1635\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 47, 8-bit/color RGBA, non-interlaced","md5":"4208af721b5f4ad7e0223b520290c0a3","sha1":"af2d89fc9818655a966f71eef9d1caa5d01a5803","sha256":"3f7a85d8e494e8c44b2d1b82ac17046576e35890b02b12a19eb8e7afa28cbe33","sha512":"6b54c59bceba76386532a7a9e079792c39ffc7120bd8febf9d1cf7eccd17551d6cc61ffcf47c5099fb945f6a2cc5164f807b3527eef2cb0e6fd6b37491269bcb","ssdeep":"96:OAjqA0ZnUeq02VyojAQEVfWH5qMsbzKuCRxMlmQ09PLG2X9LL4uKZ1fzdv5vmY:J+OehXou2gnzyxMUQwK2JZmxhv5n","tlshash":"d1c1ae85642396abc94ec8ea7a6ce250951f09a90200e5b4f7f4d1b0d12db3efbfc443","first_seen":"2026-01-15T20:20:02.553393Z","last_seen":"2026-04-11T12:58:36.332486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitrix.info/ba.js","fqdn":"bitrix.info","domain":"bitrix.info","tld":"info"},"ip":{"addr":"217.16.19.172","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitrix.info","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 28 Feb 2026 10:16:26 GMT","end":"Thu, 01 Apr 2027 10:16:26 GMT"},"fingerprint":{"sha1":"52:4E:0C:1F:AF:7E:E5:F7:94:4C:08:C4:CF:68:D9:10:CE:2E:E8:78","sha256":"53:22:6A:97:F6:F9:42:18:68:DA:8B:E9:AA:87:2E:C0:17:C0:76:CC:A6:53:7D:74:C6:89:13:D5:56:74:05:4B"}}},"request":{"raw":"GET /ba.js HTTP/1.1\r\nHost: bitrix.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 11 Apr 2026 12:58:08 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: bx_user_id=; Domain=bitrix.info; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; Max-Age=0; HttpOnly; Secure; SameSite=None\nbx_user_id=; Domain=.bitrix.info; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; Max-Age=0; HttpOnly; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T15:55:57.916718Z","times_seen":13626335,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":122,"dns":26,"connect":44,"send":0,"wait":43,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/e74/e74df9ba39ff727aba57e26bfe85ef97.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/e74/e74df9ba39ff727aba57e26bfe85ef97.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 199661\r\nlast-modified: Tue, 30 Sep 2025 05:51:15 GMT\r\netag: \"68db6fd3-30bed\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 1920x400, components 3","md5":"924a473e754e98bdde037e5c98cc1f9d","sha1":"f9ace76239507851999621b5f743cce566b785c8","sha256":"0debc1024c9b51e8f353dba29b34020a3a3f342efab264a40f30085b20c472df","sha512":"4bdb05d48f1429e40f3550be9a2f1cf4a06774b070823d3d9777d101fddf8a492563bac31d4756c68e2af5ca2c3308b3525f9f82a591b2b8896f0c00f88b3a8e","ssdeep":"6144:OX6Ix5oybTQOvsxX0QSixaQl4APU3NzzU:On5oyXQO202yAP29U","tlshash":"b214220f57596d25d4f026bb892f82855f6760058566c86e39fb0fe238431c632ebfca","first_seen":"2026-01-15T20:20:02.509333Z","last_seen":"2026-04-11T12:58:36.333446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/d0b/d0b84d55b14b9912387900c24b4c9c1a.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/d0b/d0b84d55b14b9912387900c24b4c9c1a.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2162\r\nlast-modified: Tue, 30 Sep 2025 05:50:54 GMT\r\netag: \"68db6fbe-872\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 46, 8-bit/color RGBA, non-interlaced","md5":"b6d630044ebca0e1c3a6f5b9b07e4c5e","sha1":"948a9d56649e922a70603df45d07025142ce3977","sha256":"c51fbfb28e7bc869b3279a4c078e45cbe7e0c17b33a8adff79a6d0d1cb7a2a8b","sha512":"9afe13bfa821f1e260e3c4e067dcfb642213bcc3943c589cb999f0dc47c86c1b71f020a0d304bbd780dc0b4d550d2787ec270b8348633f719bf9ab1b4b2bc6c1","ssdeep":"","tlshash":"4541096afd9420c22a68f8e55cfba06f9c534900d9d4f452a98ad87e9c201b6885d0eb","first_seen":"2023-06-09T10:57:33Z","last_seen":"2026-04-11T12:58:36.334676Z","times_seen":87,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/templates/aspro_mshop/images/icons_wish.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/templates/aspro_mshop/images/icons_wish.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/template_0a4f59623f3fb24fd7fc785f2bbba664/template_0a4f59623f3fb24fd7fc785f2bbba664_v1.css?1759212620550263\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 10954\r\nlast-modified: Tue, 30 Sep 2025 05:50:32 GMT\r\netag: \"68db6fa8-2aca\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 250, 8-bit/color RGBA, non-interlaced","md5":"d5ff521055246a1783b0d9ee5d4e965d","sha1":"42b07028576771f6df6bcded267d6dafdab068af","sha256":"dc512aed938b48fe71844aac7279906648816ba1afa69542897f130ce00aa715","sha512":"5d51d4cb76ec234e2b6f9a465472447f0ff8c1797ee7bb352a56f53f326e0b99298a0f29d4308da95023d214551a75ef30528399b71761407726adf99dec5f86","ssdeep":"192:w3F/0koaL1Tf4zzDg3DB3HOfe7uQDGgjzWqQDu3BBMZTnK2AL84i1mx7jluKW1F9:w3Z0zaLJcfe7TWvTKUP1y3cKW1YFy","tlshash":"b132ae0c80b34a65e724111f0a4c5d56f6907a42110e3a75b7bb3e1d6bef836b0d3baa","first_seen":"2023-05-17T10:45:59Z","last_seen":"2026-04-11T12:58:36.335516Z","times_seen":105,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://podshipnikug.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:40:08 GMT\r\nexpires: Fri, 09 Apr 2027 08:40:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188280\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-04-11T14:50:30.804478Z","times_seen":7206,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/aspro.mshop/556/556403c9e3f9ba3546f7e2f94cba8b95.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/aspro.mshop/556/556403c9e3f9ba3546f7e2f94cba8b95.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7992\r\nlast-modified: Tue, 30 Sep 2025 05:51:18 GMT\r\netag: \"68db6fd6-1f38\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 159x47, components 3","md5":"934bbcf71aeea162270178de299079d9","sha1":"39fdd4ac384ff45a4e84ea941351644ab2a1d24c","sha256":"10c1c3bf2065a9f88c9654eaee882ab32abf6685c2c41045bcfc481022bbe6d8","sha512":"3f179847f455d655b5c5ac160367a5aa0f053aa87ae37b63217db3da8d90df685834d3b66b2bd1f4a2b4c1b6393d3a72561d3d56b55d8dc5f373a99744a45de9","ssdeep":"192:ajicKf2MThMVAkkHoFxQek0nFXC6FQSg6F7BPR+mtz6Yp:aSf5TYAvD0nFLaSj7PR+mtzDp","tlshash":"eaf1afcfd9243501db1fac7dca1230a3d1ba061de087525ee6604f452dc8ec5c6aaee7","first_seen":"2026-01-15T20:20:02.527293Z","last_seen":"2026-04-11T12:58:36.336987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Ubuntu:400,500,700,400italic\u0026subset=latin,cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css?family=Ubuntu:400,500,700,400italic\u0026subset=latin,cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 11 Apr 2026 12:58:08 GMT\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7470,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6d58411dbf7425ba65bad9ce0197ed16","sha1":"3a116131e1e1a1157ac5e573a8cb31f2d9dcd7fc","sha256":"584c2b9644d2bc2ca2deff55ef3e9a4eaf20b8b66a01070b4f5dd3b229b915ec","sha512":"7b10145f14c38e3a8b3c982da1725dcd24404cafb606879ab6f301904dd088bb66cc2652d598a1e565db7203bb1e2b31f559494d9e9c95de9f478a22004ae094","ssdeep":"192:UkTkkvk9kzSkpWk+g+orxg7UuVxml5LK/CW3zQ6FZZH:U6kU+lZuyFP","tlshash":"0df1bea3145b9444a7435cc223cbbe35ce8f6185a045c5b6bbfe1cd8ace2d3a4366b4d","first_seen":"2025-09-16T10:40:54.265033Z","last_seen":"2026-04-11T12:58:36.338212Z","times_seen":86,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":72,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/fd1/fd1ca5a9fa9766f1597a8637c4b467a3.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/fd1/fd1ca5a9fa9766f1597a8637c4b467a3.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6866\r\nlast-modified: Tue, 30 Sep 2025 05:50:49 GMT\r\netag: \"68db6fb9-1ad2\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 48, 8-bit/color RGBA, non-interlaced","md5":"ee2b5f9cc799e752489a3e7a6fc944f0","sha1":"a1da20695204413d6b54f8adfe37cf2aa19ce566","sha256":"6fb4ec9c1ab49e9b20f37566414ad267df573e73137c2efea764ddca51f150f8","sha512":"53d203f5a38ef679c0eac9d8d79147418f8b807c1539ac2d90eba5983660560e7dd7fd8f14d99451ddee5d852d8c0456a6670c17e8e3028bcb3fe5129dbbd2d4","ssdeep":"96:seqA+42K3QlkmjG0kpjP+qHZJPHgNeLosD9SgFXS2NUP0bWZkYQDeepYkfjpteGx:7BAkjJp7+qjPlohuMRZ7JkfeGocFEaP","tlshash":"a4e1be8aa850ddb31cb97e4b2f70a405000318f1c1f52b0d96bfa90cd2f7a1a949926f","first_seen":"2026-01-15T20:20:02.519824Z","last_seen":"2026-04-11T12:58:36.338837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"site1.cy89513.tmweb.ru/bitrix/spread.php?s=QklUUklYX1NNX0FCVEVTVF9zMQEBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9HVUVTVF9JRAE3Njk3MzABMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9MQVNUX1ZJU0lUATExLjA0LjIwMjYgMTU6NTg6MDcBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9TQUxFX1VJRAEwZmYyNzA5Y2VmZGU3NDQ2MzM1N2MxZTk0YTc2OWQxOQExODA3MDE2Mjg3AS8BAQEC\u0026k=0bf4156c32306ce7eed655d6089705cd","fqdn":"site1.cy89513.tmweb.ru","domain":"tmweb.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.368Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bitrix/spread.php?s=QklUUklYX1NNX0FCVEVTVF9zMQEBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9HVUVTVF9JRAE3Njk3MzABMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9MQVNUX1ZJU0lUATExLjA0LjIwMjYgMTU6NTg6MDcBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9TQUxFX1VJRAEwZmYyNzA5Y2VmZGU3NDQ2MzM1N2MxZTk0YTc2OWQxOQExODA3MDE2Mjg3AS8BAQEC\u0026k=0bf4156c32306ce7eed655d6089705cd HTTP/1.1\r\nHost: site1.cy89513.tmweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T15:55:57.916718Z","times_seen":13626335,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/tools/conversion/ajax_counter.php","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"POST /bitrix/tools/conversion/ajax_counter.php HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 64\r\nOrigin: https://podshipnikug.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"SITE_ID=s1\u0026sessid=602dfb56be3e5eaef2e18921ee6f3601\u0026HTTP_REFERER="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2\r\np3p: policyref=\"/bitrix/p3p.xml\", CP=\"NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA\"\r\nx-powered-cms: Bitrix Site Manager (609ad2c367b24b90045470bd198e2416)\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: BITRIX_CONVERSION_CONTEXT_s1=%7B%22ID%22%3A5%2C%22EXPIRE%22%3A1775941140%2C%22UNIQUE%22%3A%5B%5D%7D; expires=Sun, 11-Apr-2027 12:58:08 GMT; Max-Age=31536000; path=/\nBITRIX_CONVERSION_CONTEXT_s1=%7B%22ID%22%3A5%2C%22EXPIRE%22%3A1775941140%2C%22UNIQUE%22%3A%5B%22conversion_visit_day%22%5D%7D; expires=Sun, 11-Apr-2027 12:58:08 GMT; Max-Age=31536000; path=/\nBITRIX_SM_ABTEST_s1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-11T14:57:40.595751Z","times_seen":264386,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/7b8/7b856dea01cc61d9efd226aed0e26bae.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/7b8/7b856dea01cc61d9efd226aed0e26bae.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 171189\r\nlast-modified: Tue, 30 Sep 2025 05:51:05 GMT\r\netag: \"68db6fc9-29cb5\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171189,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 1920x400, components 3","md5":"7b9af045f7167a40dd2ee3163e01177b","sha1":"dae9a2d34d91fa813edf38c81087fdbd58ebc47e","sha256":"8c1ff57b5ec6b7836df99140a25eca449ac0006c69d64e5d73624e7e5120b3ad","sha512":"265b13c291086cd6db08dd749807d79afefd9a9c318cde3b9efb73e66511880a295eedbc4e5d3c05fbb5cc3e29bcf2340a3f3c011944ea722ae66477bf531b21","ssdeep":"3072:8aXiGNMjlIhtbxUqG6bwXR2mzllKvLnp3coI9psiKyqS96uN7USpBNy1PAiGN:8unCjlMtFUqnwXR2mzlMvLpMsiKyp96g","tlshash":"94f3136377001926c40eb7bb15036f2c6bbfa628e2491d477d128d14fc98bde29673e6","first_seen":"2026-01-15T20:20:02.534989Z","last_seen":"2026-04-11T12:58:36.340585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/dfa/dfa676848546e6cdef8bb7425c3d4810.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/dfa/dfa676848546e6cdef8bb7425c3d4810.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2410\r\nlast-modified: Tue, 30 Sep 2025 05:51:14 GMT\r\netag: \"68db6fd2-96a\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"d33c44b03821b089a98155f668a03d09","sha1":"20b6b0e97deee482e9c8b0aeb30df5e6b4ac3f1a","sha256":"f2ac1305b874782946382306780d613d527d7729dba137078bfb7754cdfae0f1","sha512":"14bba38e8beb7d3316d73be857fc54fa8d8d127097ac7672d6b3973672f65395eb34e427b6de4c4d7ff36eac00d1c23c5a43aedb839187e2d99f7588e42a124d","ssdeep":"","tlshash":"30410a06fa61a880934a5d8134f670377d0308c8dce2f18e6dcd946702711be95797cb","first_seen":"2024-08-19T12:49:31.988324Z","last_seen":"2026-04-11T12:58:36.342373Z","times_seen":81,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/57c/57c60abc828b6e3bc4637a867163173e.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/57c/57c60abc828b6e3bc4637a867163173e.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2277\r\nlast-modified: Tue, 30 Sep 2025 05:50:57 GMT\r\netag: \"68db6fc1-8e5\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ac521393a3235c488d599a089a2c15d3","sha1":"d4dc90f0bed9f3a9f93ff6ca7d069b84a91533f0","sha256":"bed34883be7bc8d7ffe2d07263e11a65c12369dd6a5d8df0ab824a5617969b9a","sha512":"db7fe13b5a8ab33a2ac9bb08c0b213f4eba7a3d2b46a8d88df9f3736c9e3a6ebe11f2818a51d59f17310b626599785306ee6e88868e68bf7913ffc8694ece362","ssdeep":"","tlshash":"ca412b13b951ad6d6a094cf4a9edfd23fa6110df072db34b55d28d581723a9c2ccca03","first_seen":"2026-01-15T20:20:02.532103Z","last_seen":"2026-04-11T12:58:36.343037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/f4b/f4be91aa60d014895509cf96a6a3df1f.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/f4b/f4be91aa60d014895509cf96a6a3df1f.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1947\r\nlast-modified: Tue, 30 Sep 2025 05:51:12 GMT\r\netag: \"68db6fd0-79b\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4bd5bc122045fbd16464db7acd636dda","sha1":"1655aed8be8f0f805e8558dcd8648c5aa06c99e9","sha256":"71d4303cb08df11c743f99ecab8ae37c4b015953be077deba4a8ef4c295d5046","sha512":"0b9879498da5785ac859db77fe04fa5e1617bf1c88b8a347e8bf3f8d3efe8689c8e5cd21e215a2022eca3cd2349bb43059054f890571a7ec00efe42cc575bbb4","ssdeep":"","tlshash":"7541ea377e33c6bfeab1125d04de0b8aa5b494d8151c618f00c6e0573639136d9b56b5","first_seen":"2026-01-15T20:20:02.548143Z","last_seen":"2026-04-11T12:58:36.344135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/525/52599124af40f110732e369857bd9db9.gif","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/525/52599124af40f110732e369857bd9db9.gif HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/gif\r\ncontent-length: 550\r\nlast-modified: Tue, 30 Sep 2025 05:50:56 GMT\r\netag: \"68db6fc0-226\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 150 x 22","md5":"9cfb042bed390d80525b067a4ca9ffb9","sha1":"649fcee1fe1718105b17ecab943a6e203bcb6f01","sha256":"a630d384fa63a433bb925315cbc15d2889ab7549a012723348d419f96584f742","sha512":"06968764ea7ee26407cd98b905f4598673d2d8f717dff871b6f2da75c9e3b6b6db89bc5c70e2952eb5f695e48296e90b31d161883279351a83750cf63aabf2e0","ssdeep":"","tlshash":"2cf0208ac6a9460bc54ca135bc94734c011963914ab63e3b265682c49202fea8228a61","first_seen":"2026-01-15T20:20:02.573374Z","last_seen":"2026-04-11T12:58:36.345197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/d10/d10aab8157f07037705fa8898e8ff393.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/d10/d10aab8157f07037705fa8898e8ff393.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94930\r\nlast-modified: Tue, 30 Sep 2025 05:51:12 GMT\r\netag: \"68db6fd0-172d2\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94930,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1920x400, components 3","md5":"d34fedf0872e044bf58ac8c8413f3bc5","sha1":"de57306a960f69aa1055eea580025bae86acbbee","sha256":"1771999b81b267f27864f544982f41efa780fbcf292f9072a63b37d5f28533bb","sha512":"de8b6b108540b2fef3a77b6cd78cdba104898c6b6083cfad3530a343205abee1fdc33d6ec787f39e3e85fb8134e128ea517b12794ad43773ab6ade967ae7e6c1","ssdeep":"1536:ezEpFv7ponP27cedpZJ0WW+vfQzHd5x6hyl6FmNQ9OSyVESBV0OmyTAB9gJ6eoV7:eI7o27cSLvfUd5/U0nSQ2O7TAfg8eo9","tlshash":"869338538c498a93943c87e97e570fac2f093f1ce5912fef50261f8b7a242664c9e15e","first_seen":"2026-01-15T20:20:02.565741Z","last_seen":"2026-04-11T12:58:36.34623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/kernel_currency/kernel_currency_v1.js?17592126241875","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/js/s1/aspro_mshop/kernel_currency/kernel_currency_v1.js?17592126241875 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 30 Sep 2025 06:10:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db7450-753\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1875,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1486)","md5":"f80fc551f1d7193bac86ff8711f7c468","sha1":"800021225acb08a3ad890b43acc47d9d06a85f92","sha256":"9a5c2a75cd3612385b6b593c8b7016d20cf9c6464665fceb42cbf0361d96e399","sha512":"f08de765235febd9f8df1198badda8459808831f2634dcd403c655e319646cb72743a8e7f999709af70fbf1f0b6fd22fd673c2458b313b75b42a620d71dd8882","ssdeep":"","tlshash":"ae31fc49798258e9c2f41400211f3a0a447b7b9a780bb1daf91da1d6afe8e05c188e7f","first_seen":"2026-01-15T20:20:02.561321Z","last_seen":"2026-04-11T12:58:36.347403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/a78/a782a103078c5832df236359da02c09f.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/a78/a782a103078c5832df236359da02c09f.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1609\r\nlast-modified: Tue, 30 Sep 2025 05:51:04 GMT\r\netag: \"68db6fc8-649\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 58 x 34, 8-bit/color RGBA, non-interlaced","md5":"11cd0c1030af4c8a36050e8fde8809ff","sha1":"85c7833dea389e352424089cedbd50ea7af20606","sha256":"7b0bab96d0ee5d8891b380eafeb1dbb911853e0e9ab3ee8f5cbd137eb80325ac","sha512":"4f904c16e288e01abe4657d1de96ddbd5cb2103d78fdb69c076240207907e0fa5a5feda0e31ef1154eb7a025f3792d65cc9b20880d7d5bf76baa110b02f2899d","ssdeep":"","tlshash":"db31ca8ff5d1b0025195a59a24fae05b9c134890fde0f5d5fccadcab19b12ba002a0c7","first_seen":"2023-06-26T13:01:49Z","last_seen":"2026-04-11T12:58:36.348623Z","times_seen":87,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/8e5/8e5422fb7e27653b76d0bfcb04156bd7.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/8e5/8e5422fb7e27653b76d0bfcb04156bd7.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 7658\r\nlast-modified: Tue, 30 Sep 2025 05:50:52 GMT\r\netag: \"68db6fbc-1dea\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 24, 8-bit/color RGBA, non-interlaced","md5":"c1a307c0dcbffbd93129bf312e33a984","sha1":"6c360e9aaf4f17d1fbd24124305e16b3430d4540","sha256":"7ee88c9e9ea7519fc31c43b13a975fe31347dc92303cf845c75bd068d367541f","sha512":"4fc575cdf27bacd39ba70e48eb3c6eaa8c3f08e2e084a644270e22f6c9a4d8cba820e7e7d2c5793b299f169906af980f8b17fa1c08f8b4152dd9c9cda4099c9d","ssdeep":"192:9SZJI8/3UdMwPMHsn7+2p693Me0g6exCeWm0gSLxqyLgR19I:9SZS8/UdVvn7+2sf10gSLxOfI","tlshash":"acf1afd990b54a2ba8883183c0c63185496c7f34bf86e222b6d162a4b15c77eafe551a","first_seen":"2026-01-15T20:20:02.523651Z","last_seen":"2026-04-11T12:58:36.349356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/5f0/5f013782da6ee1bffbe7d0ea7c19b25a.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/5f0/5f013782da6ee1bffbe7d0ea7c19b25a.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 6803\r\nlast-modified: Tue, 30 Sep 2025 05:51:12 GMT\r\netag: \"68db6fd0-1a93\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6803,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 48, 8-bit/color RGBA, non-interlaced","md5":"790ef91aede90f49dbfea12acbfe8f49","sha1":"7cf5b12aa3383900d8582ceef04a0cc0c23697b5","sha256":"7f87ea9c2d27bb526b685ca1421c85290ba8106feb62638b83f2615706e7efe1","sha512":"38387688e253e1ffe199c7e69eb8c163af6d4817fe15c2617d5362162ecbb6df6474e8c34e72cc29b7151978c4a73cc7cb512b1cfe6b12163c8ffb910f857935","ssdeep":"192:T/t1s12Of5TEbsPeE6MVncHM7p5wryDIobKRpT3+:I1jZEbs2All7CGopTO","tlshash":"1be19e95683d6d465308ccb29315c51dbd7309cd63cbda3be625fbec50dec2186aea02","first_seen":"2026-01-15T20:20:02.579528Z","last_seen":"2026-04-11T12:58:36.350657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/f3c/f3c5ddc832728d89c7a04e03c86e2ec6.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/f3c/f3c5ddc832728d89c7a04e03c86e2ec6.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5587\r\nlast-modified: Tue, 30 Sep 2025 05:50:53 GMT\r\netag: \"68db6fbd-15d3\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 48, 8-bit/color RGBA, non-interlaced","md5":"6671ff34b598157aab5761deee2bbf3f","sha1":"d2db44fed67242a9739abcd911efd844b0538479","sha256":"d1bab8e2fdef6765023d395e6e34e26d24b0eb7e2808a426005fedb1c02d9ad2","sha512":"0bb4d3358937110113f15eb8bd201d10bc4a5c5ad2bbbed57f96b6049abe561c06d3284750ceee571e7e7a81fb81129437940c7744ead34f80f8f3f768a3a8e6","ssdeep":"96:7dWgEBH5nV+T8XH1Bbe25nR2nlT+40deUnkQiDxN4eGGm4e6O6:7dWgEDnV31gMAnlT10deUkQgGszFO6","tlshash":"56b1a05f1f7751763d7d0952eb326616d9c6d340503f3d43a6efe2061c2621b09c28e5","first_seen":"2026-01-15T20:20:02.569608Z","last_seen":"2026-04-11T12:58:36.351831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/templates/aspro_mshop/images/scroll.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/templates/aspro_mshop/images/scroll.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/bitrix/cache/css/s1/aspro_mshop/template_0a4f59623f3fb24fd7fc785f2bbba664/template_0a4f59623f3fb24fd7fc785f2bbba664_v1.css?1759212620550263\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 386\r\nlast-modified: Tue, 30 Sep 2025 05:50:32 GMT\r\netag: \"68db6fa8-182\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 100, 8-bit/color RGBA, non-interlaced","md5":"c4cf0c226c03683aa13584877b72654d","sha1":"2086a2bf902171f93012dd29510bcca958ceefbd","sha256":"3a1ecff86855a0000ebf7c0374f0ecb3355ecac03b4dc0ded6a206831b1adf5b","sha512":"3c8f8a02dcd07c94bbb4131f46a36618db364bcd630b3e62ccdac9c6516bda990efb0ee2fb44fa6eb8a4983c3816ea2bf5d60c4179559dcb435b2d2d70355948","ssdeep":"","tlshash":"13e0f1eb220a067ec11d1672e847000c942f1a0a1433104e405a7dc53e9170fa860f05","first_seen":"2023-04-18T15:50:59Z","last_seen":"2026-04-11T12:58:36.353056Z","times_seen":768,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/d3e/d3eb422783f8ece8fb587565855092c4.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/d3e/d3eb422783f8ece8fb587565855092c4.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4942\r\nlast-modified: Tue, 30 Sep 2025 05:51:07 GMT\r\netag: \"68db6fcb-134e\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 110x48, components 3","md5":"6de81ac2ce8971599af79fa81690070f","sha1":"1449d47e1762930f280fcb94e5c465198294a6f6","sha256":"6c0ccf4335f5f104e668ce59f75df7cf2c338a8065c0067f822fa630f342072a","sha512":"4c003521716a0e6e1c5a8c5d094b9e39cdb79215b558e2b6491e6b0b23eda240ff1c53f8e3b3fdbe8514c808b3616b1586ee5a4ed57d4b98d5344422853b025f","ssdeep":"96:y/E1gDcTMAeDGCPUZFbyLttOMnYjY1cJ2DunlGdvYJOZoA/u:y/0Ys+ttMY1Of2dZH/u","tlshash":"84a17dc9ed710a428c4a9673cda21d6cc28c9c75f4a96e85dbcb00198ad06776680f3c","first_seen":"2026-01-15T20:20:02.57218Z","last_seen":"2026-04-11T12:58:36.353676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"expertdetal.com/bitrix/spread.php?s=QklUUklYX1NNX0FCVEVTVF9zMQEBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9HVUVTVF9JRAE3Njk3MzABMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9MQVNUX1ZJU0lUATExLjA0LjIwMjYgMTU6NTg6MDcBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9TQUxFX1VJRAEwZmYyNzA5Y2VmZGU3NDQ2MzM1N2MxZTk0YTc2OWQxOQExODA3MDE2Mjg3AS8BAQEC\u0026k=0bf4156c32306ce7eed655d6089705cd","fqdn":"expertdetal.com","domain":"expertdetal.com","tld":"com"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"expertdetal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 07:03:14 GMT","end":"Mon, 15 Jun 2026 07:03:13 GMT"},"fingerprint":{"sha1":"3D:6C:DD:3C:A8:6F:4E:38:18:67:D2:EC:30:AB:0C:B8:2E:4F:EF:EB","sha256":"7E:46:F3:D4:C7:8A:EE:9E:D0:AB:16:8E:6F:81:13:0B:63:CD:16:49:41:83:C6:89:80:F3:B5:EF:BA:84:7F:B0"}}},"request":{"raw":"GET /bitrix/spread.php?s=QklUUklYX1NNX0FCVEVTVF9zMQEBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9HVUVTVF9JRAE3Njk3MzABMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9MQVNUX1ZJU0lUATExLjA0LjIwMjYgMTU6NTg6MDcBMTgwNzAxNjI4NwEvAQEBAkJJVFJJWF9TTV9TQUxFX1VJRAEwZmYyNzA5Y2VmZGU3NDQ2MzM1N2MxZTk0YTc2OWQxOQExODA3MDE2Mjg3AS8BAQEC\u0026k=0bf4156c32306ce7eed655d6089705cd HTTP/1.1\r\nHost: expertdetal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\np3p: policyref=\"/bitrix/p3p.xml\", CP=\"NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA\"\r\nset-cookie: BITRIX_SM_ABTEST_s1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=expertdetal.com\nBITRIX_SM_GUEST_ID=769730; expires=Tue, 06-Apr-2027 12:58:07 GMT; Max-Age=31103999; path=/; domain=expertdetal.com\nBITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; expires=Tue, 06-Apr-2027 12:58:07 GMT; Max-Age=31103999; path=/; domain=expertdetal.com\nBITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; expires=Tue, 06-Apr-2027 12:58:07 GMT; Max-Age=31103999; path=/; domain=expertdetal.com\r\ncache-control: max-age=259200\r\nexpires: Tue, 14 Apr 2026 12:58:08 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"1C-Bitrix","description":"1C-Bitrix is a system of web project management, universal software for the creation, support and successful development of corporate websites and online stores.","website":"https://www.1c-bitrix.ru","common_platform_enumeration":"","icon":"1C-Bitrix.svg","categories":["CMS","Ecommerce"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T15:55:57.916718Z","times_seen":13626335,"resource_available":true,"data":null}},"time_used":1092,"timings":{"blocked":519,"dns":430,"connect":39,"send":0,"wait":52,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/4ca/4ca97a3084427ac7fb2d5c275635c400.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/4ca/4ca97a3084427ac7fb2d5c275635c400.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3968\r\nlast-modified: Tue, 30 Sep 2025 05:51:12 GMT\r\netag: \"68db6fd0-f80\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 33, 8-bit/color RGBA, non-interlaced","md5":"e9cae36177de84a980a058e1ccdbfdd8","sha1":"59dcdc1d5d6fc08a6d8cb258d3386f3f1c428dec","sha256":"59f4461377c04b6dac6759d005100ce3d4f5141c4fdcfae81ab6be8be7d0fb29","sha512":"80c3036ed663bddcf80c2fc20525c25982f96363bc9897b83abd67536c021f09d1e736dc7122a2ccb8939fe15eea1a0c8441a76e1764bf22dc7b02a75021ef41","ssdeep":"","tlshash":"ad816c7277c16d918326f5547926e86bb116bbdf3c3fe2f479918db342b54483870844","first_seen":"2026-01-15T20:20:02.552166Z","last_seen":"2026-04-11T12:58:36.35473Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/70b/70b2a1b54cccd00eeb1c27402a4332cb.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/70b/70b2a1b54cccd00eeb1c27402a4332cb.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2604\r\nlast-modified: Tue, 30 Sep 2025 05:51:04 GMT\r\netag: \"68db6fc8-a2c\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 48x48, components 3","md5":"e600fc6c2faab5acbcda51b460e0f939","sha1":"c224f63f895f55218efbb666701dae8c2660492d","sha256":"b936f6e7fde4245788f79f282a8f19168ddf0150b38b10d3e84561a9d14b45b5","sha512":"296c4088bdb960e0f9bfd210976c15e72d0676ad713666f8dde196557a784dc168545f2b5eb531d9e0a417f1bc6de80a29f9b7e2387509fc26fbf703151a37ef","ssdeep":"","tlshash":"7e51397ec38205d3cd026233a36d709a56ad2b99f8a1a7204b3063d0dac444793ab99c","first_seen":"2026-01-15T20:20:02.575669Z","last_seen":"2026-04-11T12:58:36.356332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/default_2544a37bb3ca42f43df9a9f1c30f39e2/default_2544a37bb3ca42f43df9a9f1c30f39e2_v1.js?17592126244474","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/js/s1/aspro_mshop/default_2544a37bb3ca42f43df9a9f1c30f39e2/default_2544a37bb3ca42f43df9a9f1c30f39e2_v1.js?17592126244474 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 30 Sep 2025 06:10:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db7450-117a\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4474,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3799)","md5":"878634ef00f66243516c5e12d1e691cc","sha1":"6a1b6e6a642b45299ba080c2c9465706f464f8b1","sha256":"97ef56cfd898e7aed745560a9c14b0c5f599080376930e795fff82f30e86e6d9","sha512":"b65e3d8457fd8043ae40e6347092654b2c2e28624c3a9112bc3bf21c5048dddc7996a00aa997da4c9c2708e3f298f57cf1f12468752172c233882238681cb7b0","ssdeep":"96:831B4Skwh/vIvUyz5haspvWUpCb3139M7qw:831B4TgvZ2vVgFvw","tlshash":"d891ef21b050687e95fe941d222127cd7332f154d58a806db8f4d6e6363af8a343ebf9","first_seen":"2026-01-15T20:20:02.578115Z","last_seen":"2026-04-11T12:58:36.357466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/aa4/aa47b76176765510a8b2035fe7923575.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/aa4/aa47b76176765510a8b2035fe7923575.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2885\r\nlast-modified: Tue, 30 Sep 2025 05:51:10 GMT\r\netag: \"68db6fce-b45\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2885,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 95\", baseline, precision 8, 78x48, components 3","md5":"c5d5dca8aadfaae6738aa996d5cd2d59","sha1":"76ddab13483d4a3da76511eceae3b67bc93edd08","sha256":"f2aa32ab72e5d7a39bdead51dc6d73a5dca096e684bc1f4f8570c5296f90a52f","sha512":"b27ff69c37053dde61fe4c5a6f649020ff54437999d74870856253f7b877500d10153e469fafca5dc61f1ee81881e2d84faa5b09008769c61d4e5583a3bf9995","ssdeep":"","tlshash":"d351296fcb615891ac4b88bd48bb1012e6bf8bc0f664674a27652170e8d0dc8259d7ce","first_seen":"2026-01-15T20:20:02.555719Z","last_seen":"2026-04-11T12:58:36.358583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/bitrix/cache/js/s1/aspro_mshop/kernel_main/kernel_main_v1.js?1759213845189267","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /bitrix/cache/js/s1/aspro_mshop/kernel_main/kernel_main_v1.js?1759213845189267 HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 30 Sep 2025 06:30:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68db7915-2e353\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189267,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65016)","md5":"e76e7c8ca8b9ea12da387edced95cbce","sha1":"2b8b9b5cac063c25daa05edbb04616fee8781122","sha256":"2a0e77b9d8a67f898a53dd7090563c8ed83c684a5da18a3b1bd64ce174b95cfd","sha512":"0130888a383f064c6c8bdc831d1f3f8d7f9d1bd90e97963bf64f5269f055e13c8b0bfdc33c727b547a1bc291d74f2c8d92fa4a587d47151237298c7316a8874b","ssdeep":"3072:dJTMmtxZ13IwyFYh4zVeLfHyGgEc/SLkxPjMwVw3SfUM:dJTMDEnyGgEc/SLk2wlUM","tlshash":"10042b49b56d713f83fa60a9161f1309733981b569084869f828e9e4fcb4d0b927bf7c","first_seen":"2026-01-15T20:20:02.544407Z","last_seen":"2026-04-11T12:58:36.359721Z","times_seen":2,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/260/2605f1f447834b2347bf7c4f80bba69c.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/260/2605f1f447834b2347bf7c4f80bba69c.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8028\r\nlast-modified: Tue, 30 Sep 2025 05:51:10 GMT\r\netag: \"68db6fce-1f5c\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 39, 8-bit/color RGBA, non-interlaced","md5":"0aa1f0291a51b2ee5a5d30e1d5df45e9","sha1":"0bd5aec39cebe726df578536abd9fe5028c02501","sha256":"1bebf229c16df33b629bc39b14faf9922e821dcc6f842aab5e911535e52a1be9","sha512":"289ff6bd12a33c2293697a5d864498294add6d1484390adc68ca4997609d78807487eb1f07b98fb61fed6e1763dd7652c3cac7b26cc2f9dc51068e0bfad20f97","ssdeep":"192:V4J9UFvamKl/ZlwOaZQjhfLnJzOcam7uPSqKeme:V4jsihlLBhflz1CPtKeme","tlshash":"15f1cfa141da5d5fda76c08562111a1ca6b49c5c4330cd5e4beafeae4f2ad6722c32d0","first_seen":"2026-01-15T20:20:02.52886Z","last_seen":"2026-04-11T12:58:36.36088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/fb9/fb9bd55955476591fefd1c683c5fbd11.jpg","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/fb9/fb9bd55955476591fefd1c683c5fbd11.jpg HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4445\r\nlast-modified: Tue, 30 Sep 2025 05:51:10 GMT\r\netag: \"68db6fce-115d\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", baseline, precision 8, 150x41, components 3","md5":"5a1efa0068fef13223ee89a478ea43f6","sha1":"739e9030c0c9331dc1ec3f9d246c6ac000386d09","sha256":"5148fd47a792782a94327f476efc0add23201954375bbf7a8636e72843a4f246","sha512":"b9d8acc50b25cbeffcc2338cfab59a947c4d30645ad8895b8f18cbe7f436c0570578e36badedda7db3f83b7403927eb44fff56aadc6c084e26ace11611ac5fb9","ssdeep":"96:6jEc/p5cDI7LM3bt5J4bUNe099TI4ixpy0pbdpZsC+0:6jdpaIL4bt3Nejvp3N","tlshash":"57918e03fce1d030887eb5750207b89a4876d9e5f7ca1b448bf027179229c03f18ba64","first_seen":"2026-01-15T20:20:02.514175Z","last_seen":"2026-04-11T12:58:36.362002Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://podshipnikug.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 14:13:42 GMT\r\nexpires: Sat, 10 Apr 2027 14:13:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 81866\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-04-11T15:16:09.34243Z","times_seen":13217,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":66,"dns":0,"connect":7,"send":0,"wait":10,"receive":8,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKew72j00.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKew72j00.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://podshipnikug.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20852\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 20:14:36 GMT\r\nexpires: Sat, 10 Apr 2027 20:14:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60212\r\nlast-modified: Wed, 27 Aug 2025 19:19:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20852, version 1.0","md5":"3c8d2630d8bd2e0b75e565519bcdb5dd","sha1":"ecc2b13a795067ee23c7d4c47ef30ed67dcd9129","sha256":"c86112704544f597d4814625795347beffe516e15c679d52b14302ec5e149ba7","sha512":"6e84ccfcb207dd524c822ab73e3b37c613c302c778a9545947e667fbb6ea48c5e8ef8ad1a493c7d2d5d34c2257bb107aa440f53e84f2ada6089371c956690f8c","ssdeep":"384:wiFxTZCZ0os6HYDnV8wHhz49mJKmsSkbOO+jbRkKU+oc3+TntbUEDVBrApLuR6:wuZCenV8w1OmkJaRMrYEDTC/","tlshash":"c392d1fa00c9d56ef6b50db2baf07c8eec7dc9152650b909b6f40086348fe5552d4ab4","first_seen":"2025-09-03T01:47:43.124415Z","last_seen":"2026-04-11T12:58:36.363757Z","times_seen":875,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":140,"dns":0,"connect":21,"send":0,"wait":8,"receive":2,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://podshipnikug.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 02:16:44 GMT\r\nexpires: Sun, 11 Apr 2027 02:16:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 38484\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-04-11T15:16:09.274454Z","times_seen":10472,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":2,"dns":0,"connect":21,"send":0,"wait":14,"receive":3,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/aspro.mshop/a68/a6813aa522154db362414d8bb3f8db76.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/aspro.mshop/a68/a6813aa522154db362414d8bb3f8db76.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19; _ym_debug=null; BITRIX_CONVERSION_CONTEXT_s1=%7B%22ID%22%3A5%2C%22EXPIRE%22%3A1775941140%2C%22UNIQUE%22%3A%5B%22conversion_visit_day%22%5D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 36940\r\nlast-modified: Tue, 30 Sep 2025 05:51:18 GMT\r\netag: \"68db6fd6-904c\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 169 x 164, 8-bit/color RGBA, non-interlaced","md5":"8e92880ed2e31eddf81f16710b11ee91","sha1":"1491fbdc99d59dc4d3cd7902ae1432902add0665","sha256":"ee005f9937b51b61dd3f234fedce0faa441390df9a5c5a8c132e7d28682e8438","sha512":"3edaffe023b28646520d6f162af0ed7136d7644b66ae60f3ee678a68a039b722318755b9ac96c1ed53e90b24dc018d2a4837c9862fff976513dbc4407a8e06f6","ssdeep":"768:up1kKTZupA5FGMYasNX4kekbLqh0r6jN//mIJrwr8yabOz+4:LOX5VAqibrirJrU8yabg","tlshash":"d2f2f1cb6f590ed3cf561bcaec814fda80fa9d1580017b329863b37ad4968688d64d33","first_seen":"2026-01-15T20:20:02.557569Z","last_seen":"2026-04-11T12:58:36.365083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podshipnikug.ru/upload/iblock/750/750c0776ef2c1dc29e1a879d6b1076ab.png","fqdn":"podshipnikug.ru","domain":"podshipnikug.ru","tld":"ru"},"ip":{"addr":"5.23.51.23","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://podshipnikug.ru/","date":"2026-04-11T12:58:08.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"podshipnikug.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 14:55:51 GMT","end":"Fri, 08 May 2026 14:55:50 GMT"},"fingerprint":{"sha1":"FB:54:2B:0A:97:F6:39:E7:F4:56:11:30:73:6B:12:4E:22:4A:24:21","sha256":"2D:D8:68:D2:E2:4C:E2:D8:B6:7A:17:86:9E:CD:AD:B6:F8:79:6D:46:21:12:10:02:51:13:7F:CF:0B:46:B8:DE"}}},"request":{"raw":"GET /upload/iblock/750/750c0776ef2c1dc29e1a879d6b1076ab.png HTTP/1.1\r\nHost: podshipnikug.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://podshipnikug.ru/\r\nCookie: PHPSESSID=Zhl1TMSo8WW5zA6lL4dZstRvQdhZ9A55; BITRIX_SM_GUEST_ID=769730; BITRIX_SM_LAST_VISIT=11.04.2026%2015%3A58%3A07; BITRIX_SM_SALE_UID=0ff2709cefde74463357c1e94a769d19\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.2\r\ndate: Sat, 11 Apr 2026 12:58:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1600\r\nlast-modified: Tue, 30 Sep 2025 05:51:18 GMT\r\netag: \"68db6fd6-640\"\r\nexpires: Sun, 11 Apr 2027 12:58:08 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 36, 8-bit/color RGBA, non-interlaced","md5":"e48e57287f259015abeda9b4d86c2456","sha1":"954334417fe013225c60e08e781bdbddf5877a09","sha256":"6f772631eb3dd989bd4da9864f2590015efb8b0a9ff5932161351856e3e4254c","sha512":"76006c54820d30b013951a2497ff3c35f2525cf85d76e2d8f0e70a31b0bd7d996f5821ef2d7900eba267d393f17b6369d3c35cd7987a3624392ef7bb3ca856cb","ssdeep":"","tlshash":"0f31954ffa8164819269a8c235f6d10f6c6345d0add1f2ae788dca271d312b94d5d0db","first_seen":"2023-06-26T13:01:49Z","last_seen":"2026-04-11T12:58:36.366126Z","times_seen":88,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"podshipnikug.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
