{"report_id":"e32722a8-e5b8-44e4-96f7-deb0998efbd8","version":0,"status":"done","tags":[],"date":"2026-09-19T04:46:53Z","url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"title":"Ігрові автомати онлайн в Україні 🎰 Гральні автомати на гроші","dom":{"size":282275,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"bb564445580814b16d65938ef7fce38e","sha1":"ac9f00769c7c1b3e4677ca6402291324a4d37b34","sha256":"8a61a87c6e54ba0d5cad11a585cd0e40b61e1b336555f9fd43e19974caa1c167","sha512":"11340d468966e11a278193468665f3bd85ca17d33ad49c14d4ee3a1519e1c123b94eeded8464888e3aac616dc88df2a2d3165bc8c4832109dd3369ffed87aa54","ssdeep":"3072:VSOcLELVNqSWDDl3iMl8K3ZJ1gycqmZF/wEy2HpTsRBAFkmAehtPwdiUV0jk6:5LVNqSWDLl8KpJ1gyoL/7H1sHmF","tlshash":"ae54b571909414af000bb1d8d9547b0eedda92bbeb67470577fc29be6fd2ca4893620c","dom_hash":"domhashe69f664fa85c6ea007aa54a694056c16","first_seen":"2026-09-19T04:47:13.995023Z","last_seen":"2026-09-19T04:47:13.995023Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T04:46:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rkk.com.ua","ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-17","domain_rank":4088929,"first_seen":"2026-09-19T04:47:09.889582Z","last_seen":"2026-09-19T04:47:09.889582Z","alert_count":99,"request_count":33,"received_data":898911,"sent_data":18468,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:24.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"a3 Lazy Load:2.7.3","description":"a3 Lazy Load is a mobile oriented, very simple to use plugin that will speed up sites page load speed.","website":"https://a3rev.com/shop/a3-lazy-load/","common_platform_enumeration":"","icon":"a3.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"u2t.dev","ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"domain_registered":"2024-06-24","domain_rank":1451909,"first_seen":"2024-10-22T03:13:27.436529Z","last_seen":"2026-06-14T19:16:19.683045Z","alert_count":0,"request_count":6,"received_data":6768,"sent_data":3177,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"u2t.dev/U2T_UU_ID-frame.js","fqdn":"u2t.dev","domain":"u2t.dev","tld":"dev"},"ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"39c3c3e3e43d453ddd91d5986f28f178","sha1":"c4061255a159f53b17a8597e2582eb7fd43253f1","sha256":"270154513fe622a4ff57412b2712d86335ff3d067384d8ae7e4af89add331f6a","sha512":"43ae5ea238d8038e0e79b111188cba5b2bafa684e54f2590e592bf1675e56f98da97ae91c7e28993f1fddd97a0f19f9f43ed0fd10b207055ab452e56730bda41","ssdeep":"96:YT7Xf1r+cNzTmDp4NqsUiWV4/DeAEai19gp:Q7Xf1K0GiFU+/DeAEat","tlshash":"9191102d38e6693f1533f92d570b050072266a039396d91cbe6d97f02f42931fdaa2c7","size":4385,"data":"","first_seen":"2024-12-04T03:19:50.531445Z","last_seen":"2026-09-19T04:48:21.549229Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f04c824623943811730e488f08c2ebd3","sha1":"0c043e9b20bd558c545f91982ac767449b62fcf4","sha256":"8b8620802cfd3393cd241387ca1194b75daf569565cd791ff72b087ee198cf10","sha512":"108d783d2f8dd809fd74e8d8b88ece3f5defc99f8692f6457c0424cbd2daeca88ee6cf0f71e4172d9c1ebb37230e002a949996d3554fd80a20e0f86e84a9452a","ssdeep":"","tlshash":"3dd0a71e78eda404043374e06c7f55095d55729d1546c5c57e5d90a46f2437d550321c","size":237,"data":"","first_seen":"2026-09-19T04:47:14.031699Z","last_seen":"2026-09-19T04:48:21.604898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"909130d0502a23d13bb5b1383c6ac71a","sha1":"f68b8295ce717925230202044ef65edbee706c90","sha256":"943d7e4e790306aa74590e3b6c377864ff2c237acf05a4bba70b7a37910e1948","sha512":"71d33f6217a8d4693eb03fbebd33314e17c20cdf6fc443d936b11533dbac9c769630295c592e6d4d83de3c74b6b0cafa9f2bc87166fb6de80ae17f4e4f4c0a45","ssdeep":"","tlshash":"99c08c1d70256034026b3839193b590a2b23b806ad9be2041089aae00d2981c432be24","size":157,"data":"","first_seen":"2026-09-19T04:47:14.032682Z","last_seen":"2026-09-19T04:48:21.606441Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"16267154c943f807e9f0faf1b2fcc1d0","sha1":"b69ba144fe9c1cdaaf5628ee0b0dea1309ecc823","sha256":"b8a7d94c2002859660bd0be54b986db53fb6f687f097903c02892284051b3b1d","sha512":"7131d51c102352d2ecde71e7c47f5d1bf4809bde13792c978a19b2ce605ca45aaf68f6779caa3f0e4f3e82b73b1525b44694a1e94ddbddd89baf43df8d3721a7","ssdeep":"","tlshash":"2581bf5e34e6547f6973e02e9f4b0700313265439256f4283fac8af03f41920faeb68a","size":3847,"data":"","first_seen":"2026-06-14T19:16:24.669166Z","last_seen":"2026-09-19T04:48:21.607606Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"789203b997e3b0e1c850b7b6e4c82136","sha1":"44ab12090aef757cc6f01d1c03508a9b71025b8f","sha256":"cc050660aa9ca7ef72b97e91b0d892f2b3bf24ee274059f8fafe29fd06370621","sha512":"b6c350e54b1b034978894b91a0e38ec67dc4dfab2964e174d2282021f3bdddae5ee6cd95bb617cf8017ad0140bcbbe038702b00ce589f8c6bd8d7837d012e15b","ssdeep":"","tlshash":"d5b0123a003b944093f2e3d181417554a6d2a4cea0fe61c4a234802c29d833a02a3364","size":102,"data":"","first_seen":"2026-09-19T04:47:14.034816Z","last_seen":"2026-09-19T04:48:21.608566Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"54233438f42fba79ede36d552179a945","sha1":"807f26d54e9ae942ff7a259355e94dd0c6b68e24","sha256":"686d7ba7159d29c244daa85484b205045d68314417979b5851051a04da3a8a00","sha512":"a69a92c66a7d4226d38054cf000eb164157354b9a29e87929eac2b2b3e386e13a713a0b85f90ac7dd6414beb60c64bb775e105b4821c82865077ee778027e7b1","ssdeep":"","tlshash":"03b0120ed6505700d2a80000ccc51362f877a2032b1c0e95d9d80d5c4582fdd6045143","size":98,"data":"","first_seen":"2025-03-29T13:54:17.583392Z","last_seen":"2026-09-19T04:47:14.036263Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbcddf8042daa7de346577edffa02244","sha1":"eb9c5263784cf5305d634cd98ac1d5603ae3a0e3","sha256":"f1d2e631c79ae33b7d2f07b59d7cbdbb9aeceb68588661d3dd495a326ecbd809","sha512":"5636ca8346ed0819ebe7e94d493b7d509a74b31415ba11dd6e29b5591222fc39d835aeedd5dadfa70f8f8f430ef234e3bc9649433494893e178201d2cd3e9257","ssdeep":"","tlshash":"3d113276e17c823b4461c2ba8f4257f174bf31bd7ba3838488e4e424131da5b312a4d5","size":1074,"data":"","first_seen":"2026-09-19T04:47:14.037449Z","last_seen":"2026-09-19T04:47:14.037449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"96edcf32d9c13978fe3875028db10b5a","sha1":"398bb3b241d3f2a3515b9f2142c798b1e074ab10","sha256":"cd0c0e82e75f425758cd664fba4b0cb7924ecab1b4f52afdb7118374ba7ab7c9","sha512":"ff55a3158e1ce2ddd81597d8baef3c3ff42d221a50a614f78b547232618dc9f1f672d3ea8b6ee15135bb08f9de2ea09b5bc2fa1a63ff562e20a3d8cb51cab5ee","ssdeep":"","tlshash":"0aa002c030d7ab215647f44cd55a0956e0dcaae2b6c85a02b54f15304198cbb2721645","size":65,"data":"","first_seen":"2023-03-07T22:36:15Z","last_seen":"2026-09-19T04:48:21.612365Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e6f567b56e715368fa709fab49599a7","sha1":"46efd4b311e3c1b917ced6a4201245f1c9ecd10c","sha256":"35dfe07eada41b72e37a4cd31210bd151880ad87e04212712e7ea5455296f841","sha512":"3c157f14f16f80467351c0b4ed4b15e1dc89bc74bffe5feaa781981d41fb80b804219cc9798090c5149fe0ed832fcbbaa9989adb71ac5245dfcac318daacfec6","ssdeep":"","tlshash":"0da011080a03aa38ae83a088820c88e3ea0882abea002ca0b0e880008280c2220a0c80","size":83,"data":"","first_seen":"2023-03-07T22:36:15Z","last_seen":"2026-09-19T04:48:21.61303Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0edaa42e837d85bc5e94eea001132418","sha1":"27ded363a7bf8ff99d4069d8d0327bfb76829e09","sha256":"073351c657bbb62703d3e79b437eb5b7c7a647b2293edd2caab7e7016f3d91fa","sha512":"aad6d7fa5931be3e9763248476114e9f01cb51c0fdb212913626ae5bb8187ce4f5007af0877a36226d370a775560df1176182954baff48c2a5a42c31c6e0cc18","ssdeep":"","tlshash":"0f51757070092abb0d4f2960e27f568af238887e08494174918ee4f22d3d84751f7faf","size":2535,"data":"","first_seen":"2023-03-07T12:07:16Z","last_seen":"2026-09-19T06:14:22.041542Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/js/scripts.min.js?ver=1750934046","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b22a5713177280063d4162745814ec6d","sha1":"6ff259f08faba6b70f7e2b5b8c56fd53efc2b3cf","sha256":"7444ea3959193a5340cacccc9e8b01c63f2b638f907161593ddff8e591038063","sha512":"d8f9392d82383d60a4e048802f21225187e00a2fe31b9de37a559717c5c7034deac4db14abee73646b22589bed63f81f0676f6e1f63e4d8d9acc44934faeb9f3","ssdeep":"","tlshash":"0c71003c752af5f404ef16bd717ab64575223826a704ba1838184c682a3cfdb419b72e","size":3664,"data":"","first_seen":"2026-09-19T04:47:14.000542Z","last_seen":"2026-09-19T04:48:21.545654Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/vendor/js/jquery.validate.min.js?ver=1.0.5","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ef877ffbcf161cf8bd2c7054d290c23","sha1":"61fed7867fa63c18dc0907050e9da6d5c87c7839","sha256":"37f1043b3ca6e371925cdf4fe51f4e0531b02fcfc37c0595d5df4bb8f0cb9433","sha512":"9706adbb2537e6dbd80d598549657603847bdca1c6166ff7d7a92c7fdfa910019c4469a85aa8770014b8caf29c9fcc8b7fbdb0d26f47fe48a3bb81313ecaa794","ssdeep":"768:iWZ6/8lHJdkMioFpg5SUB2yQEny+zgxV4Ky47Z0z:W0d3ioFpg5SUB2yQEny+OaKyCiz","tlshash":"37b2a78976d271065e9720f4509b660b61b669a1e008e83cb5b8d4d2bef8fcc50f7f78","size":24600,"data":"","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-09-19T04:48:21.58575Z","times_seen":9003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.73","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f0d173893eab3401131bea6b2a24de","sha1":"cbe1ff491cc8f890c5ac8511302dd89cea5c1239","sha256":"23288a00ecc43659a2cdfbd9b13996f510fb709bb15bd48712849763491ec420","sha512":"2047d93471b28d52330712533878880c177c0c6376dc7356bf77000310098eeddee82bbca8beed1d11dca1865f148d9225a97a7f2dbab0e39c119d4c336b448e","ssdeep":"","tlshash":"3621ed85e70215bdf1bd00dcfc392322f36bf19679257409265868972d44f7928afa60","size":1239,"data":"","first_seen":"2025-03-12T16:27:30.342343Z","last_seen":"2026-09-19T07:04:41.562924Z","times_seen":7231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f743fedf0a3fbe570f05318e2c4f0748","sha1":"8fc11fbd0828d5b58be90697f4e8e1a17fbbf8a3","sha256":"9b4ed13bfe6e05b6340281394abe265105b1eb916ab1e53e604352525305f7c2","sha512":"600308c38f8ed38053ad1bb0592f2f3b39c24f64e9656869de6b5cb4220359d463ca2536a111853f04cfc5dd1bf5c812c823ee6f5a7b4baa73ae240bf2986aa8","ssdeep":"","tlshash":"5751d9847399753647fa325c42ad6a0751e6e03199d34018eb0edc8817e1e87f077b86","size":2892,"data":"","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-09-19T06:14:22.033919Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-19T08:40:49.457711Z","times_seen":1061506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.73-1750934045","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"774811547f86870ed5e676ed35bf9e0b","sha1":"578ba30f95376ce238227be3200092b914e72365","sha256":"dd3e3bd2dffba91f45f33f2e6c2b831ffa0cb76a3461d49b7d45fb8768f1d2d2","sha512":"62877e1cef9dcdabf56b91b3aa9178564c4bba93475b8e23a35a22c0687477d096deabdc202bf6b6d620a1bb5e2b034fc88b905eab1b4be5a85ec760173f1085","ssdeep":"96:uBtHE7lB3IHL+MIG3u3b3F3Ph0MZ9HYkY5FBk+H+g5:uB1E7lKIN+MZ94kY5Fp","tlshash":"599161a0f563b46162fa655dc89736017b1dfc2bd6c391a9b8c0d8d81d28dc93227e36","size":4233,"data":"","first_seen":"2025-01-28T05:52:40.581592Z","last_seen":"2026-09-19T04:48:21.574293Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.7.3","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"53e0fbdc5d79d07d6d955e523f8d2996","sha1":"e830d0de78b481e31995d69bfda2e71f4cc1be56","sha256":"2b3c6f1d3cea37b4d8cc609a141b421a88bcaf2f3646965f9f95f4d4a683c949","sha512":"d4052967b14991377fcbd49d023aa944778ccb02e2f11257adfb0926a3d2944b50939c3f3708e126cf872a8492db57365a7e40a935c912371cb1720def2f6e7b","ssdeep":"","tlshash":"b351b4fd7102ba5139ab1136d11fe10a5232267fcb1a9d41b43e50a91ca49f3221beaf","size":3015,"data":"","first_seen":"2023-03-07T01:27:07Z","last_seen":"2026-09-19T04:48:21.575431Z","times_seen":2881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.7.3","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e6902b70ee52754121f017fd48175db","sha1":"0a5d8a5716c7b249eb5e0b02d04aa74c5b9948cb","sha256":"21dc21cf1cc77b458d114634e3775e70f229dc0c215b0c8958920e2079cb5a16","sha512":"3c3a2ef49c5af4b426a325adf79a86817e2c7454804180684290fbc71351841c13318e6d24e18636866c7e87904702ca809a810f35737005ce6ca3d146ab045f","ssdeep":"","tlshash":"ca311699fd5d3870011610e8a95eac06e1367553620bcc58cd38e48dbc78ce9794bb8f","size":1573,"data":"","first_seen":"2023-03-07T01:27:07Z","last_seen":"2026-09-19T04:48:21.546945Z","times_seen":2985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.7.3","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"624ebb44eb0fd0fd92d0a0433823c630","sha1":"44010ca531b82a13513375597adb4c08b77473fa","sha256":"a8a819d7548b9c102d7776cb645212ca1e324ac2de2170598699061e29bc6cbf","sha512":"6cd26435debf4d20b0726520df6f93adf971f1c6d43eb2e7d38faf0c477d09c178c5e60fbb5b5518cb81cd67be129da5072405c4fd9545673b2e2ff5c85683fc","ssdeep":"","tlshash":"dc118cacb99584baadbbb118f33f813ea62b766779042d55f1ec4d84aec0d342841844","size":1045,"data":"","first_seen":"2023-03-07T12:02:09Z","last_seen":"2026-09-19T04:48:21.542211Z","times_seen":2448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.7.2","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.839Z","timestamp":1789793182839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.7.2 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 311\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: \"685d221d-137\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311,"size_decoded":861,"mime_type":"text/css","magic":"ASCII text","md5":"d4a56d3242663a4b372dc090375e8136","sha1":"7815fa6a775fd92a2399a791aaa50146d9d3aabf","sha256":"d982c4fff78c63ed84481eb36845e3b9e2753bfe996a3ba45835f75c6af1dc55","sha512":"6c1568145eb55ee1672830f98415ce0883719817a5b2f64d9da79f6e050a91d063a05f941055b936b3e0f3bbd613415030f4c95ebbbc51262563eecab38a1878","ssdeep":"","tlshash":"f8e0cd1518aa9d9e702b97dc993a52bc0a1ec20bb7ac4f7da227f0b6734c18080b7557","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-09-19T04:48:21.582938Z","times_seen":1670,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.73-1750934045","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.848Z","timestamp":1789793182848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.73-1750934045 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-1089\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4233,"size_decoded":2020,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233), with no line terminators","md5":"774811547f86870ed5e676ed35bf9e0b","sha1":"578ba30f95376ce238227be3200092b914e72365","sha256":"dd3e3bd2dffba91f45f33f2e6c2b831ffa0cb76a3461d49b7d45fb8768f1d2d2","sha512":"62877e1cef9dcdabf56b91b3aa9178564c4bba93475b8e23a35a22c0687477d096deabdc202bf6b6d620a1bb5e2b034fc88b905eab1b4be5a85ec760173f1085","ssdeep":"96:uBtHE7lB3IHL+MIG3u3b3F3Ph0MZ9HYkY5FBk+H+g5:uB1E7lKIN+MZ94kY5Fp","tlshash":"599161a0f563b46162fa655dc89736017b1dfc2bd6c391a9b8c0d8d81d28dc93227e36","first_seen":"2025-01-28T05:52:40.581592Z","last_seen":"2026-09-19T04:48:21.574293Z","times_seen":353,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u2t.dev/gc","fqdn":"u2t.dev","domain":"u2t.dev","tld":"dev"},"ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.233Z","timestamp":1789793183233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.u2t.dev","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:01:44 GMT","end":"Sun, 06 Dec 2026 09:01:43 GMT"},"fingerprint":{"sha1":"62:BC:A6:4E:CD:57:3E:27:C6:72:8F:F3:BF:0A:41:E5:EF:D4:52:15","sha256":"FB:56:1C:99:CB:73:24:A1:22:54:7C:EB:C9:B7:F3:B1:23:3C:10:A0:DD:A6:A4:6A:0C:9A:FA:1F:C2:39:7C:67"}}},"request":{"raw":"GET /gc HTTP/1.1\r\nHost: u2t.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkk.com.ua/\r\nOrigin: https://rkk.com.ua\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-length: 32\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\nContent-Type: text/html,application/json\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":320,"mime_type":"application/json","magic":"JSON text data","md5":"1f111fb29855f032bb947fd9805aa453","sha1":"f5a49a79373a9d9e086fab26260afcfccd012920","sha256":"cc55d8d238f244d75a61f24877dede6d517b174f9916629382d5645dbdbe74e7","sha512":"ee8bfd3507deef89fc77d0af84d6e18183ea9bbebd637230c88c69b4105875522e44c177781ca97f8ead0c428ee3a58e33f87d6b2aae7fb4b3ba7f346089ff8e","ssdeep":"","tlshash":"e38000080c22020b08c2c82a02080080208c3a02830a0088bc0c3ca3082c800fc02802","first_seen":"2026-06-14T19:16:24.643947Z","last_seen":"2026-09-19T04:48:21.578679Z","times_seen":3,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":22,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u2t.dev/gc","fqdn":"u2t.dev","domain":"u2t.dev","tld":"dev"},"ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:24.346Z","timestamp":1789793184346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.u2t.dev","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:01:44 GMT","end":"Sun, 06 Dec 2026 09:01:43 GMT"},"fingerprint":{"sha1":"62:BC:A6:4E:CD:57:3E:27:C6:72:8F:F3:BF:0A:41:E5:EF:D4:52:15","sha256":"FB:56:1C:99:CB:73:24:A1:22:54:7C:EB:C9:B7:F3:B1:23:3C:10:A0:DD:A6:A4:6A:0C:9A:FA:1F:C2:39:7C:67"}}},"request":{"raw":"GET /gc HTTP/1.1\r\nHost: u2t.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rkk.com.ua/\r\nOrigin: https://rkk.com.ua\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: U2T_UU_ID=1447976-556bcd2088430aff2e9bec0bb5ed2268-28-1789793183.448; U2T_FP_ID=t13d1715h2_5b57614c22b0_a54fffd0eb61; U2T_UU_ID=1447976-556bcd2088430aff2e9bec0bb5ed2268-28-1789793183.448; U2T_FP_ID=t13d1715h2_5b57614c22b0_a54fffd0eb61\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:24 GMT\r\ncontent-length: 126\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\nContent-Type: text/html,application/json\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126,"size_decoded":415,"mime_type":"application/json","magic":"JSON text data","md5":"7f82fe77b50792cce1a1e5c42830e7dd","sha1":"26697e27550d42b07c6f37c35b1e939aa77cd667","sha256":"166e7dc272bf9edc62a7ccc19921eb8ebcfbc287dd6dab3de7a5fa70972a29cb","sha512":"abaf6b85f42b49dbbce5fce052915235519a5e811e7fe39f44d09b21cf5672aa08ae33d65df7861c9660b8ee7f31d0a5c90d0eba8d8e3d94f76c730ba42e0d0a","ssdeep":"","tlshash":"80b02b1f8c010d6358d0a9f2144ce08050442c10421040800da7101309cc920fc41d03","first_seen":"2026-09-19T04:47:13.999367Z","last_seen":"2026-09-19T04:47:13.999367Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/js/scripts.min.js?ver=1750934046","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.849Z","timestamp":1789793182849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/assets/js/scripts.min.js?ver=1750934046 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: W/\"685d221e-e50\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3664,"size_decoded":1875,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3640), with no line terminators","md5":"b22a5713177280063d4162745814ec6d","sha1":"6ff259f08faba6b70f7e2b5b8c56fd53efc2b3cf","sha256":"7444ea3959193a5340cacccc9e8b01c63f2b638f907161593ddff8e591038063","sha512":"d8f9392d82383d60a4e048802f21225187e00a2fe31b9de37a559717c5c7034deac4db14abee73646b22589bed63f81f0676f6e1f63e4d8d9acc44934faeb9f3","ssdeep":"","tlshash":"0c71003c752af5f404ef16bd717ab64575223826a704ba1838184c682a3cfdb419b72e","first_seen":"2026-09-19T04:47:14.000542Z","last_seen":"2026-09-19T04:48:21.545654Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.7.3","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.852Z","timestamp":1789793182852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extend.js?ver=2.7.3 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-415\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1045,"size_decoded":962,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"624ebb44eb0fd0fd92d0a0433823c630","sha1":"44010ca531b82a13513375597adb4c08b77473fa","sha256":"a8a819d7548b9c102d7776cb645212ca1e324ac2de2170598699061e29bc6cbf","sha512":"6cd26435debf4d20b0726520df6f93adf971f1c6d43eb2e7d38faf0c477d09c178c5e60fbb5b5518cb81cd67be129da5072405c4fd9545673b2e2ff5c85683fc","ssdeep":"","tlshash":"dc118cacb99584baadbbb118f33f813ea62b766779042d55f1ec4d84aec0d342841844","first_seen":"2023-03-07T12:02:09Z","last_seen":"2026-09-19T04:48:21.542211Z","times_seen":2448,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/pokerbet-casino.png","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.871Z","timestamp":1789793182871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/pokerbet-casino.png HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 12350\r\nexpires: Mon, 19 Oct 2026 04:44:47 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:36:48 GMT\r\netag: \"043efcddb0fa0aae161bae33e3ac0810\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12350,"size_decoded":12948,"mime_type":"image/png","magic":"PNG image data, 300 x 180, 8-bit/color RGB, non-interlaced","md5":"043efcddb0fa0aae161bae33e3ac0810","sha1":"f0a4358a3dfc80e70ab200e0da77d44f222d2eba","sha256":"6b104728ad331776de0174c01df50ccc58f7fbb985939ff9b5e76113a22219e6","sha512":"e72c8c9e1bbe464b79a1286347c3febd4bcc41eb9fa4fced17ce867bffc2904b78cdc459ae808671b36690fb06241b21956ed1884ae0c7b80a1212e823fbd52e","ssdeep":"384:gVeQX/nqWS8rNY1QWhQWOSAB01zYuOXUcLAw:WeQPqWDrScWOS+UOlL1","tlshash":"bc42b07bf2c27be9a19af24097c20d4721b3aa2891375ca53724c1ca757bfd161d8319","first_seen":"2026-09-19T04:47:14.002255Z","last_seen":"2026-09-19T04:48:21.588226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/favicon-1.png","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.214Z","timestamp":1789793183214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/favicon-1.png HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; bonus-popup-not-show=show\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3237\r\nexpires: Mon, 19 Oct 2026 04:44:47 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:36:29 GMT\r\netag: \"5dc5c3eb7b8aa9670b4897eb5acc501f\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3237,"size_decoded":3834,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"5dc5c3eb7b8aa9670b4897eb5acc501f","sha1":"75b4ee155e7b096c0e4059a1018a6ae1c652f3e0","sha256":"fff37e957f6770f4de81df1753a3368d9cb1475ff7ea49a4d2f921bbfa806c31","sha512":"bba2ac030aa5887d9e2822185deb7c0329aaa31d121545f200d8382ecae426a61ad3c81e4f618cd2a6b772d17611442bf93ed30e9385f46277446b89c55a1724","ssdeep":"","tlshash":"1d614d94b510f5bcc45c2872e9b8ff945cc24ca423132665114ab3565530ee1e29bb07","first_seen":"2026-09-19T04:47:14.003501Z","last_seen":"2026-09-19T04:48:21.548151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/5vO9G5AV-joker-1.png","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.228Z","timestamp":1789793183228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/5vO9G5AV-joker-1.png HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; bonus-popup-not-show=show\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 9410\r\nexpires: Mon, 19 Oct 2026 04:45:14 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:36:07 GMT\r\netag: \"d1d72517a59863f0ecf4a0363b67b4fc\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9410,"size_decoded":10007,"mime_type":"image/png","magic":"PNG image data, 300 x 180, 8-bit/color RGB, non-interlaced","md5":"d1d72517a59863f0ecf4a0363b67b4fc","sha1":"a05dec26125f4fa4f85b4d432c25e4ba828652e4","sha256":"fb2fa680e3d7801a9ab790e6033a73b599c4931f65aa98958051952b38bbaf9f","sha512":"46914761c7c947f99f7e47bc3d633168b1bbc5d192eb04c3668f8854c71e9236ae82d238e5df27ca5710ea68450b636ae4a9f7e08c80ce5d4804883867f0e322","ssdeep":"192:5SxVwbCmnD7a7oB4MHeFE/GIfkqOl8uvMzsHV8L5Ujyu/CH:g3wb37yGJHmOkqO+8MYaL5fH","tlshash":"fc129e8c9b2ce820eb5d95d14b21399aff780457b81e1e2a83f919137550d7f4485fc6","first_seen":"2026-09-19T04:47:14.004761Z","last_seen":"2026-09-19T04:48:21.577999Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.73","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.844Z","timestamp":1789793182844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.73 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-4d7\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1239,"size_decoded":1100,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1239), with no line terminators","md5":"81f0d173893eab3401131bea6b2a24de","sha1":"cbe1ff491cc8f890c5ac8511302dd89cea5c1239","sha256":"23288a00ecc43659a2cdfbd9b13996f510fb709bb15bd48712849763491ec420","sha512":"2047d93471b28d52330712533878880c177c0c6376dc7356bf77000310098eeddee82bbca8beed1d11dca1865f148d9225a97a7f2dbab0e39c119d4c336b448e","ssdeep":"","tlshash":"3621ed85e70215bdf1bd00dcfc392322f36bf19679257409265868972d44f7928afa60","first_seen":"2025-03-12T16:27:30.342343Z","last_seen":"2026-09-19T07:04:41.562924Z","times_seen":7231,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/js/scripts.min.js?ver=1.0.5","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.833Z","timestamp":1789793182833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/assets/js/scripts.min.js?ver=1.0.5 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: W/\"685d221e-e50\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3664,"size_decoded":1875,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3640), with no line terminators","md5":"b22a5713177280063d4162745814ec6d","sha1":"6ff259f08faba6b70f7e2b5b8c56fd53efc2b3cf","sha256":"7444ea3959193a5340cacccc9e8b01c63f2b638f907161593ddff8e591038063","sha512":"d8f9392d82383d60a4e048802f21225187e00a2fe31b9de37a559717c5c7034deac4db14abee73646b22589bed63f81f0676f6e1f63e4d8d9acc44934faeb9f3","ssdeep":"","tlshash":"0c71003c752af5f404ef16bd717ab64575223826a704ba1838184c682a3cfdb419b72e","first_seen":"2026-09-19T04:47:14.000542Z","last_seen":"2026-09-19T04:48:21.545654Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/vendor/js/jquery.validate.min.js?ver=1.0.5","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.840Z","timestamp":1789793182840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/assets/vendor/js/jquery.validate.min.js?ver=1.0.5 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: W/\"685d221e-6019\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24601,"size_decoded":8465,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24462)","md5":"6ef877ffbcf161cf8bd2c7054d290c23","sha1":"61fed7867fa63c18dc0907050e9da6d5c87c7839","sha256":"37f1043b3ca6e371925cdf4fe51f4e0531b02fcfc37c0595d5df4bb8f0cb9433","sha512":"9706adbb2537e6dbd80d598549657603847bdca1c6166ff7d7a92c7fdfa910019c4469a85aa8770014b8caf29c9fcc8b7fbdb0d26f47fe48a3bb81313ecaa794","ssdeep":"768:iWZ6/8lHJdkMioFpg5SUB2yQEny+zgxV4Ky47Z0z:W0d3ioFpg5SUB2yQEny+OaKyCiz","tlshash":"37b2a78976d271065e9720f4509b660b61b669a1e008e83cb5b8d4d2bef8fcc50f7f78","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-09-19T04:48:21.58575Z","times_seen":9003,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.7.3","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.851Z","timestamp":1789793182851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.srcset.min.js?ver=2.7.3 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-625\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1573,"size_decoded":1311,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1533)","md5":"3e6902b70ee52754121f017fd48175db","sha1":"0a5d8a5716c7b249eb5e0b02d04aa74c5b9948cb","sha256":"21dc21cf1cc77b458d114634e3775e70f229dc0c215b0c8958920e2079cb5a16","sha512":"3c3a2ef49c5af4b426a325adf79a86817e2c7454804180684290fbc71351841c13318e6d24e18636866c7e87904702ca809a810f35737005ce6ca3d146ab045f","ssdeep":"","tlshash":"ca311699fd5d3870011610e8a95eac06e1367553620bcc58cd38e48dbc78ce9794bb8f","first_seen":"2023-03-07T01:27:07Z","last_seen":"2026-09-19T04:48:21.546945Z","times_seen":2985,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/QRrnPNeC-elslots.jpg","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.870Z","timestamp":1789793182870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/QRrnPNeC-elslots.jpg HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15341\r\nexpires: Mon, 19 Oct 2026 04:44:46 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:36:09 GMT\r\netag: \"5b28f94cacacc29aff95abad58c5b18d\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15341,"size_decoded":15940,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x180, components 3","md5":"5b28f94cacacc29aff95abad58c5b18d","sha1":"9410196999d49c6c7a73e8c6984385412cb7ac63","sha256":"8f6347c4be3627749be7a508d0fff041f09ee9aee9ce479ccd974ed1b2ae8f43","sha512":"d873da255a3637d48293f787c8587b31ed50bb4a73610eceed685373c4a5d3d04ef56a0704375fde3317ad3c2bd3f34f27567bc24d8b959640e11421c60e2d6d","ssdeep":"384:5BE9QNFat4DnaL47VxM6CXWhlldm+1JY1G0rlks5YoBJE:rE20t4WL47FQq8qYjr5YO6","tlshash":"3c62bffae3cd5c522e8e6928470a7b75761e921dc2bab2a63c4d42f4c8304572c4f27c","first_seen":"2026-09-19T04:47:14.007659Z","last_seen":"2026-09-19T04:48:21.586392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u2t.dev/U2T_FP_ID","fqdn":"u2t.dev","domain":"u2t.dev","tld":"dev"},"ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://u2t.dev/U2T_UU_ID-frame.html","date":"2026-09-19T04:46:23.442Z","timestamp":1789793183442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.u2t.dev","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:01:44 GMT","end":"Sun, 06 Dec 2026 09:01:43 GMT"},"fingerprint":{"sha1":"62:BC:A6:4E:CD:57:3E:27:C6:72:8F:F3:BF:0A:41:E5:EF:D4:52:15","sha256":"FB:56:1C:99:CB:73:24:A1:22:54:7C:EB:C9:B7:F3:B1:23:3C:10:A0:DD:A6:A4:6A:0C:9A:FA:1F:C2:39:7C:67"}}},"request":{"raw":"GET /U2T_FP_ID HTTP/1.1\r\nHost: u2t.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://u2t.dev/U2T_UU_ID-frame.html\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 36\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nset-cookie: U2T_FP_ID=t13d1715h2_5b57614c22b0_a54fffd0eb61; Secure; SameSite=None;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"U2T_FP_ID","value":"t13d1715h2_5b57614c22b0_a54fffd0eb61","quoted":false,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"U2T_FP_ID=t13d1715h2_5b57614c22b0_a54fffd0eb61; Secure; SameSite=None;"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36,"size_decoded":326,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"ec092568163a29616f3079eb61b56b8f","sha1":"a60fdd32c993a8ba7f568669feec58b313250670","sha256":"d456ab185f6c4de7e636d62f6c51da290f7b60b81fe135048f26068f9c0acfee","sha512":"4370612628998a67beafbfb537a6973234c798f02cf317390db92d1876f7146bacf34ec116b0f0fd35602af11b0d2076e0ba6cbefa51813019f7fc9f3af97075","ssdeep":"","tlshash":"4c800447c5410553c4dcffd7701740c3444104304434004041d10534041c714d4c4411","first_seen":"2026-06-14T19:16:24.564793Z","last_seen":"2026-09-19T04:48:21.532938Z","times_seen":10,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/images/lazy_placeholder.gif","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.874Z","timestamp":1789793182874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/a3-lazy-load/assets/images/lazy_placeholder.gif HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: \"685d221d-2a\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":591,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-19T08:42:28.152065Z","times_seen":1069772,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u2t.dev/U2T_UU_ID-frame.html","fqdn":"u2t.dev","domain":"u2t.dev","tld":"dev"},"ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.177Z","timestamp":1789793183177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.u2t.dev","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:01:44 GMT","end":"Sun, 06 Dec 2026 09:01:43 GMT"},"fingerprint":{"sha1":"62:BC:A6:4E:CD:57:3E:27:C6:72:8F:F3:BF:0A:41:E5:EF:D4:52:15","sha256":"FB:56:1C:99:CB:73:24:A1:22:54:7C:EB:C9:B7:F3:B1:23:3C:10:A0:DD:A6:A4:6A:0C:9A:FA:1F:C2:39:7C:67"}}},"request":{"raw":"GET /U2T_UU_ID-frame.html HTTP/1.1\r\nHost: u2t.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 248\r\nlast-modified: Thu, 30 Jul 2026 19:39:26 GMT\r\netag: \"6a6ba86e-f8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248,"size_decoded":592,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"067034a43dd849c7165d76cb799c371e","sha1":"831a2e537141a76c1527cd05ba736cd893e41fd2","sha256":"066018b4aefd1f631822b8e8f7873b4c181a372bac307e5f134dcfb2605e9796","sha512":"7e397d6bcf23d63c4197d255ef60c9a810995e2979f0c0c6c63e20e50ee8f002b367d9a92942f599dc6761c3e458b1c9b5ac9ef706ec53933a27370a9906a127","ssdeep":"","tlshash":"85d0a787d802952d84b0db110cd0f1081586db9cb7c69e841ad7e0d92d9ab9af8d775c","first_seen":"2024-12-04T03:19:50.529663Z","last_seen":"2026-09-19T04:48:21.603844Z","times_seen":82,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":25,"connect":22,"send":0,"wait":22,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/favicon-1.png","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.212Z","timestamp":1789793183212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/favicon-1.png HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; bonus-popup-not-show=show\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3237\r\nexpires: Mon, 19 Oct 2026 04:44:47 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:36:29 GMT\r\netag: \"5dc5c3eb7b8aa9670b4897eb5acc501f\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3237,"size_decoded":3834,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"5dc5c3eb7b8aa9670b4897eb5acc501f","sha1":"75b4ee155e7b096c0e4059a1018a6ae1c652f3e0","sha256":"fff37e957f6770f4de81df1753a3368d9cb1475ff7ea49a4d2f921bbfa806c31","sha512":"bba2ac030aa5887d9e2822185deb7c0329aaa31d121545f200d8382ecae426a61ad3c81e4f618cd2a6b772d17611442bf93ed30e9385f46277446b89c55a1724","ssdeep":"","tlshash":"1d614d94b510f5bcc45c2872e9b8ff945cc24ca423132665114ab3565530ee1e29bb07","first_seen":"2026-09-19T04:47:14.003501Z","last_seen":"2026-09-19T04:48:21.548151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u2t.dev/U2T_UU_ID","fqdn":"u2t.dev","domain":"u2t.dev","tld":"dev"},"ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://u2t.dev/U2T_UU_ID-frame.html","date":"2026-09-19T04:46:23.440Z","timestamp":1789793183440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.u2t.dev","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:01:44 GMT","end":"Sun, 06 Dec 2026 09:01:43 GMT"},"fingerprint":{"sha1":"62:BC:A6:4E:CD:57:3E:27:C6:72:8F:F3:BF:0A:41:E5:EF:D4:52:15","sha256":"FB:56:1C:99:CB:73:24:A1:22:54:7C:EB:C9:B7:F3:B1:23:3C:10:A0:DD:A6:A4:6A:0C:9A:FA:1F:C2:39:7C:67"}}},"request":{"raw":"GET /U2T_UU_ID HTTP/1.1\r\nHost: u2t.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://u2t.dev/U2T_UU_ID-frame.html\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 58\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nset-cookie: U2T_UU_ID=1447976-556bcd2088430aff2e9bec0bb5ed2268-28-1789793183.448; Secure; SameSite=None;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"U2T_UU_ID","value":"1447976-556bcd2088430aff2e9bec0bb5ed2268-28-1789793183.448","quoted":false,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"U2T_UU_ID=1447976-556bcd2088430aff2e9bec0bb5ed2268-28-1789793183.448; Secure; SameSite=None;"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":370,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"09d3166ad72c85dbc4025095e37cd213","sha1":"63cb63b2149cbf5c7d0001d85877e8edde066cc5","sha256":"8bf06a56c518093ada9161d035157c3c8ea4572f0b66a0fff64dfb47b6501057","sha512":"af920592d00b850f8d3c8d3c8d889ba7703145440a79b2e0b92f1d601d28ab7ebd2f82dda420f57b9b6cb85837beb407850c1f6a216a661bb214dcc1e1399615","ssdeep":"","tlshash":"44a0223e2c280c33208020f00cccf08020002c080000e020022200030fc88a02c02f03","first_seen":"2026-09-19T04:47:14.011944Z","last_seen":"2026-09-19T04:47:14.011944Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/tablepress/css/build/default.css?ver=3.1","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.838Z","timestamp":1789793182838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/tablepress/css/build/default.css?ver=3.1 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: W/\"685d221e-1af3\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6899,"size_decoded":2117,"mime_type":"text/css","magic":"ASCII text, with very long lines (6898)","md5":"776964c22bd947085796ad83a8b9f1b7","sha1":"3c9e922809818103199fe69ce15a0fa6da228c20","sha256":"457467cee03686d72a5bdb4ca56d8b687bbdae26c99fbb0d1a9a0faec9804d89","sha512":"355c33d5671606056479ca8fa09f43104b43e0e91f7cd80b2f68a461c54fde97a883e31033785d039c5d081ba12b88f7ca256dc2de65a793d82ce86caa976188","ssdeep":"192:iCc3qg4qS3HDnj2oX0aw0u0b0d0l0b6a0P:iAV0B0u0b0d0l0b6a0P","tlshash":"ece1fbe1e7a437e5b2b7c029baf4be5db9207ce2f4811afbf09181700695e961f91c05","first_seen":"2025-04-17T10:31:29.133889Z","last_seen":"2026-09-19T04:48:21.585166Z","times_seen":44,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/images/bonus-popup/bonus-popup-gift.webp","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.877Z","timestamp":1789793182877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/assets/images/bonus-popup/bonus-popup-gift.webp HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 106612\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: \"685d221e-1a074\"\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106612,"size_decoded":107098,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8757282bcb9f1d87393c5fe1a4392bbe","sha1":"4a354e73f1a6310cdc91f7381771d2fecf7aa4aa","sha256":"5c2c313739eb8a1792c37dbbc8445e816a5afb4a6021d9bb473e7f8a027a6358","sha512":"731e350fd5c0d649f1bade72cb12d8fc4aa3bac6e699329d002746280925d1b8e444328019c4a795e0ab9b64f7185787587c836d89889fc9d505d7bff8b0ce5c","ssdeep":"1536:Qt+s1dDlKSSaQYwmNWE6fvUBaXjfk2Ggjd72wjr4913qJWLXR58AbHLuaHIEIh:Ij1d4SSa5GfvUBcxXhEOe9q8","tlshash":"94a3125daf1e131bd3d0e1bd85e06bc5e8292a8b83834bb3df0274d19653c5a9f948a1","first_seen":"2026-09-19T04:47:14.014019Z","last_seen":"2026-09-19T04:48:21.544551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/images/footer/sprite-1.svg","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.181Z","timestamp":1789793183181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/assets/images/footer/sprite-1.svg HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; bonus-popup-not-show=show\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6827\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: \"685d221e-1aab\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6827,"size_decoded":7384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44ec1f754628c2b7928486ae8389eac0","sha1":"3002300b921ea4ec07194ec8043b1eff7e08d440","sha256":"5db63df1453f63c1b7cbd5df14b4ff2cdadbb208a83b3dbb4691b8e898615860","sha512":"624e988190ab00a7153041e106c2192a4b8e99ffc0d08e0c45b6381b996fa88ab8c6eda792502418ddeaac3f76e78abe1346e706cbd735e3ceb2bdf9405debf6","ssdeep":"96:7bqOd+x4w/5pNwUo0Bsk95Ui6cRs7mxlEL2Q2B4tF1YkWGe3x3A:/qOM4sogai6cSalERs3x3A","tlshash":"5de1d7b6c2200f7ef55583bdd2f0629a223a945275710e98eb653a2f1c56ad3342cfcd","first_seen":"2026-09-19T04:47:14.01509Z","last_seen":"2026-09-19T04:48:21.531855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T04:46:20.602Z","timestamp":1789793180602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://rkk.com.ua/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2\u003e; rel=preload; as=style, \u003chttps://rkk.com.ua/wp-content/themes/vipcasino-1/style.css?ver=1.0.5\u003e; rel=preload; as=style, \u003chttps://rkk.com.ua/wp-includes/js/jquery/jquery.min.js?ver=3.7.1\u003e; rel=preload; as=script, \u003chttps://rkk.com.ua/wp-content/themes/vipcasino-1/assets/js/scripts.min.js?ver=1.0.5\u003e; rel=preload; as=script\r\nset-cookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; path=/\r\nx-pcdn-proxy-cache: EXPIRED\r\nx-pcdn-host: rkk.com.ua\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"1vml8kmvj5k8qrfur71kc6ug84","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:24.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"a3 Lazy Load:2.7.3","description":"a3 Lazy Load is a mobile oriented, very simple to use plugin that will speed up sites page load speed.","website":"https://a3rev.com/shop/a3-lazy-load/","common_platform_enumeration":"","icon":"a3.png","categories":["WordPress plugins","Performance"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":281929,"size_decoded":47101,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"6aa90928e86b32a8165180eb43e3c3bc","sha1":"06966eebdc3ab64b6c6abe5b63740c9f39d8d6e8","sha256":"e18234b43b160f0594da4a95697e3e9b07c97260a078ace646f1c88958b15a17","sha512":"df4a5d27605d72b5fab77889156bdf90975b57afea1fff9bcb2914de2a46658f81b3269ed0a6be56092abc1796abd0f758c31908f8936f1818548b314af7590f","ssdeep":"3072:eUocIE8NRqEynyBwEMvXKA66uajSZokk/NEy2HpUsRBAFkmAehtPwdiUV0jkC:18NRqEyn/vXKZ6uajht/KH6sHmp","tlshash":"c454a57191a4546f000bb1acd5403b0ee9ca92bbeb67474577fd29bb6fd2ca4893720c","first_seen":"2026-09-19T04:47:14.016215Z","last_seen":"2026-09-19T04:47:14.016215Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1980,"timings":{"blocked":-1,"dns":57,"connect":26,"send":0,"wait":1840,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.797Z","timestamp":1789793182797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7.2 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: W/\"685d221e-1c012\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114706,"size_decoded":15712,"mime_type":"text/css","magic":"ASCII text, with very long lines (59458)","md5":"8c9f31823282e4e056eb0aa7fac262a9","sha1":"dc3b1a37381e079fda8db59c1a9469852cd18b80","sha256":"3bb38d0f302677ff4104564454f60f495133579d6e6dfb722b3de850df596502","sha512":"39f239c875550bf9a31254eed1f0358ea3c6309d9fcbf6005d8852843eaf60bc20b8626d169f810a6c71b7dcdb769b8512314b89ba1fdeea2cb3089be9d21ae0","ssdeep":"3072:HaeJuf7Qg5MG7H+qehvP0x2pUk44Q03Pm:Qf7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"2fb3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-11-13T05:08:51.610493Z","last_seen":"2026-09-19T06:14:29.676998Z","times_seen":34653,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.73","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.835Z","timestamp":1789793182835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.73 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-1704\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5892,"size_decoded":2137,"mime_type":"text/css","magic":"ASCII text, with very long lines (5892), with no line terminators","md5":"a5041cf01d238b78b60d276f0c02127a","sha1":"02e5c83e7cd98881ca3223563069c8591d6e8c28","sha256":"2fdf5f9a856940c379e8cc777e289f5b58d179a3edb5ef3e1e0cff46f7dd670c","sha512":"4cee0b5c1481c7927ad0a9ef61e37c096d3e3ba44cb986b3ef538c5d7f6cc0c2966e68af418fa04c99dd4754b027e2f3b0158ebb3cbde359b2eeea5edf6d85be","ssdeep":"96:rz8JLTnCNWPAKwUDwAcZoZ6dOxdOdZoT3OdFDsYZoZnOQMvDBjkGQ6:/uLYWB/DguAdOxdOFhsYuCrBjkP6","tlshash":"6ec1fe31d6421125f9ab841efc5075c92f3dd08bc953aeecace1eaa0cbd6495363f261","first_seen":"2024-10-19T14:55:04.704312Z","last_seen":"2026-09-19T06:08:41.139841Z","times_seen":4542,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.846Z","timestamp":1789793182846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-b4c\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2892,"size_decoded":1821,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f743fedf0a3fbe570f05318e2c4f0748","sha1":"8fc11fbd0828d5b58be90697f4e8e1a17fbbf8a3","sha256":"9b4ed13bfe6e05b6340281394abe265105b1eb916ab1e53e604352525305f7c2","sha512":"600308c38f8ed38053ad1bb0592f2f3b39c24f64e9656869de6b5cb4220359d463ca2536a111853f04cfc5dd1bf5c812c823ee6f5a7b4baa73ae240bf2986aa8","ssdeep":"","tlshash":"5751d9847399753647fa325c42ad6a0751e6e03199d34018eb0edc8817e1e87f077b86","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-09-19T06:14:22.033919Z","times_seen":202,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.7.3","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.850Z","timestamp":1789793182850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/a3-lazy-load/assets/js/jquery.lazyloadxt.extra.min.js?ver=2.7.3 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-bc7\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3015,"size_decoded":2085,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2976)","md5":"53e0fbdc5d79d07d6d955e523f8d2996","sha1":"e830d0de78b481e31995d69bfda2e71f4cc1be56","sha256":"2b3c6f1d3cea37b4d8cc609a141b421a88bcaf2f3646965f9f95f4d4a683c949","sha512":"d4052967b14991377fcbd49d023aa944778ccb02e2f11257adfb0926a3d2944b50939c3f3708e126cf872a8492db57365a7e40a935c912371cb1720def2f6e7b","ssdeep":"","tlshash":"b351b4fd7102ba5139ab1136d11fe10a5232267fcb1a9d41b43e50a91ca49f3221beaf","first_seen":"2023-03-07T01:27:07Z","last_seen":"2026-09-19T04:48:21.575431Z","times_seen":2881,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/uploads/2022/12/author.jpg","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.875Z","timestamp":1789793182875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/author.jpg HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15822\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: \"685d221e-3dce\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15822,"size_decoded":16377,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 256x256, components 3","md5":"198187a6a0e4113013915cf963b897f6","sha1":"ac05eff1d0ac10c63f951076b3d9cd99e3b9de64","sha256":"54c719b134e1d78b8e055f03cfc8ab9a18e5075dc103e875f0f23cc3ce43a4ce","sha512":"220150080150970b53cfda70dd3964982c403d6cc398d09c7024a1742ce5c6853175fe3ac740666e74d892849f259ced35e0ddadba5f12161d23a2a7e0f79e1d","ssdeep":"384:NKh9DGyqngKhVh/+i4HYOeez04p3zrOy9jebgIN2:G9D6VhVx4zeR4Jr+MIN2","tlshash":"9d62c066f303ada4ff7950b7c43907c062c81ae97fb0a50a0869b9c8cc66bd61cd3909","first_seen":"2026-09-19T04:47:14.020014Z","last_seen":"2026-09-19T04:48:21.538563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.845Z","timestamp":1789793182845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: W/\"685d221d-9e7\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2535,"size_decoded":1643,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2369)","md5":"0edaa42e837d85bc5e94eea001132418","sha1":"27ded363a7bf8ff99d4069d8d0327bfb76829e09","sha256":"073351c657bbb62703d3e79b437eb5b7c7a647b2293edd2caab7e7016f3d91fa","sha512":"aad6d7fa5931be3e9763248476114e9f01cb51c0fdb212913626ae5bb8187ce4f5007af0877a36226d370a775560df1176182954baff48c2a5a42c31c6e0cc18","ssdeep":"","tlshash":"0f51757070092abb0d4f2960e27f568af238887e08494174918ee4f22d3d84751f7faf","first_seen":"2023-03-07T12:07:16Z","last_seen":"2026-09-19T06:14:22.041542Z","times_seen":146,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/style.css?ver=1.0.5","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.799Z","timestamp":1789793182799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/style.css?ver=1.0.5 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: W/\"685d221e-9614\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38420,"size_decoded":7543,"mime_type":"text/css","magic":"ASCII text, with very long lines (38318)","md5":"4e8648a80eeb3b50b48f3b07926fbe1c","sha1":"80db86434623099ac24dd82f925961220087bfc7","sha256":"bdba0288a3906bc31877e8573321512f966d4ee7c55af3a09a9e5a24fa284f07","sha512":"419869130438c43bcceb2aafb48243b2738e1d61b9bfe3dc4d820a5bf3f5f18af63d3caeae92f84cbddf9a024209ead918eb698f7ad824a601cb7ef2c8892016","ssdeep":"384:8uq30Tte98BlJ5xWl74NHbCEM4IS9mezha:8uwotsIJ5xWl7+HGEM4IS9mezha","tlshash":"9a0385b6b921342c213b862df4c06d4d233de442f72789fdb9548c19d5cb7a259b3a8e","first_seen":"2026-09-19T04:47:14.021576Z","last_seen":"2026-09-19T04:48:21.584337Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.800Z","timestamp":1789793182800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 10:34:07 GMT\r\netag: W/\"685d221f-15601\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":30968,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-19T08:40:49.457711Z","times_seen":1061506,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/style.css?ver=1750934046","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.837Z","timestamp":1789793182837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/style.css?ver=1750934046 HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: W/\"685d221e-9614\"\r\nexpires: Sat, 26 Sep 2026 04:44:46 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38420,"size_decoded":7543,"mime_type":"text/css","magic":"ASCII text, with very long lines (38318)","md5":"4e8648a80eeb3b50b48f3b07926fbe1c","sha1":"80db86434623099ac24dd82f925961220087bfc7","sha256":"bdba0288a3906bc31877e8573321512f966d4ee7c55af3a09a9e5a24fa284f07","sha512":"419869130438c43bcceb2aafb48243b2738e1d61b9bfe3dc4d820a5bf3f5f18af63d3caeae92f84cbddf9a024209ead918eb698f7ad824a601cb7ef2c8892016","ssdeep":"384:8uq30Tte98BlJ5xWl74NHbCEM4IS9mezha:8uwotsIJ5xWl7+HGEM4IS9mezha","tlshash":"9a0385b6b921342c213b862df4c06d4d233de442f72789fdb9548c19d5cb7a259b3a8e","first_seen":"2026-09-19T04:47:14.021576Z","last_seen":"2026-09-19T04:48:21.584337Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/igrovi-avtomati-logo.png","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.841Z","timestamp":1789793182841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/igrovi-avtomati-logo.png HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 20849\r\nexpires: Mon, 19 Oct 2026 04:44:46 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:36:35 GMT\r\netag: \"62804f3f86c6c1471ddf17f9b2898684\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20849,"size_decoded":21447,"mime_type":"image/png","magic":"PNG image data, 840 x 328, 8-bit/color RGBA, non-interlaced","md5":"62804f3f86c6c1471ddf17f9b2898684","sha1":"8961b954bd3481843fa51757b3d76c6a2f96007a","sha256":"d3e1eafaccda92e3ef75b77e1bccc761db436e25511641816db1dfa1d2dbf2c3","sha512":"303455321f0eabec0b557ad2a1cef18db086442c7d1c20dd7a40a2ea8d2e1dde3fb26bc5c909f590042e319547e4121890f02eb77a2218bf78a8c4482ff55ffd","ssdeep":"384:HH8r0xXwad20fMFTYOQYu6jQL9QkfjeKRFX5qWE88e16hNii+iNYQwCRqpNdtU+h:Hy0R20kFTjQQQBZRFX5qWEZe1iNiibwF","tlshash":"d492f20da43720f9cd79005919aa329e7ce8457740bb7caa5ae85f40df74cb94c9035a","first_seen":"2026-09-19T04:47:14.023336Z","last_seen":"2026-09-19T04:48:21.534232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/aER4ffT5-vbet.jpg","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.873Z","timestamp":1789793182873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/aER4ffT5-vbet.jpg HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17000\r\nexpires: Mon, 19 Oct 2026 04:44:47 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:36:10 GMT\r\netag: \"c49bf3d3ded769d90e22b951ff1a9a42\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17000,"size_decoded":17599,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x180, components 3","md5":"c49bf3d3ded769d90e22b951ff1a9a42","sha1":"3632f7473e4d2b7ce739fe12b0f39d809e803980","sha256":"f4ad63dbabea01ce1c13700390bfb5e730dd013cd25dbdc1ba37bbeaa88824bd","sha512":"f8c137751f349d334da190cbb78910d7c028461d6fbf965418895dfe1869adc4839abf4d2896d888ada450af857bdfb7089509300c09188bd13e317304828d40","ssdeep":"384:5/Z8B5oDONJGzjv5AEgAFwWLq/2xejsjsJosu22uqlhQNeU3H:RmB5oDONJevJgMq/Q30os12j8DH","tlshash":"dd72bf6e4b93db6b448e3ef109400645b15b8eaa65b3c3ba312a2fc49cad1bcc588184","first_seen":"2026-09-19T04:47:14.02459Z","last_seen":"2026-09-19T04:48:21.602866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/css/loading.gif","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.182Z","timestamp":1789793183182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/plugins/a3-lazy-load/assets/css/loading.gif HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/wp-content/plugins/a3-lazy-load/assets/css/jquery.lazyloadxt.spinner.css?ver=6.7.2\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; bonus-popup-not-show=show\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1690\r\nlast-modified: Thu, 26 Jun 2025 10:34:05 GMT\r\netag: \"685d221d-69a\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1690,"size_decoded":2242,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"265808cc54404f22de9785c713e0cb7e","sha1":"bf3d1b71957caee1c6273061ad00c99c5d785a0f","sha256":"b6e4dff920e21e3f436a014140d01d43c97177e007556ede69f772f08cb7a7ec","sha512":"125e05c1da5bf67b0eb643230be29a209d5f143e546fc4aeceb69bf3f3ce85a0cdc986095d9551cd9d89e2eea5b163ecf32376430a6e4ba3bdf651feeec6708e","ssdeep":"","tlshash":"2d31928fe8629627f6ede2b6417e5e1c0cc094b0b2b8c19b100de154393372fc2c862e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-19T04:48:21.576365Z","times_seen":2420,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/images/footer/css_sprites.png","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.182Z","timestamp":1789793183182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/assets/images/footer/css_sprites.png HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/wp-content/themes/vipcasino-1/style.css?ver=1750934046\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; bonus-popup-not-show=show\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 13752\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: \"685d221e-35b8\"\r\nexpires: Sat, 26 Sep 2026 04:44:47 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13752,"size_decoded":14306,"mime_type":"image/png","magic":"PNG image data, 248 x 203, 8-bit/color RGBA, non-interlaced","md5":"e6e5ad342e4dca2a5eabd07e27ac5d24","sha1":"864ad2d560ce06d924751a30b2f62adbd67ce026","sha256":"00239f4ed8a9d8315216378181f04a36e2525cbfa9a8195d55b35955e4c01180","sha512":"0b171d057e812e0a0bcf1a8c907ccce70d35279b10c136307d02c4c8012513c84ee093d1bfa419fbf4445004298280e038de2f7fea8785ccd53e6c1fb2d0a6ec","ssdeep":"384:VFrhMEn3qHKvLeU962Ivo7ZBu8+uP4s1IwZFyY/xl:iCaHKqU9znFu2PZdP","tlshash":"8052d08aad8add769c4bfbf90cbaaf25695f4630096487cec79d823c09c461d370c481","first_seen":"2026-09-19T04:47:14.026549Z","last_seen":"2026-09-19T04:48:21.577112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/wp-content/themes/vipcasino-1/assets/images/kc-reviews/bg.webp","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:22.867Z","timestamp":1789793182867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /wp-content/themes/vipcasino-1/assets/images/kc-reviews/bg.webp HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10006\r\nlast-modified: Thu, 26 Jun 2025 10:34:06 GMT\r\netag: \"685d221e-2716\"\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10006,"size_decoded":10490,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c4a1deb7e344e8684de2fb0501446a0","sha1":"b6bb9b92382e50383b8c1b4d6e9aac3039da5e28","sha256":"81414940e07c3fcb3440720e3f6011cecd35d8ba4a7ead3d6c3d27eeb940f465","sha512":"680b15bf1159c5d1d62204217fc17864d270337cf45d52732f37943551abd76f269d316e474e8b3e28087b2ac5a682eb4d0ff4082f17fb351344b2442c4ff95e","ssdeep":"192:9wTFb555555555555555555555555553/z6CihN5jZklPd0IZ6leVGLR+B0BNwzq:9wTVmfH5VkFdeeVGLR+6yztNvhah","tlshash":"89229d30b7e90b14d59151bb2902e286f27ba030e60a0f12115665f73e96dc5bfe4ac2","first_seen":"2026-09-19T04:47:14.027934Z","last_seen":"2026-09-19T04:48:21.536502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rkk.com.ua/media/vip-casino-1.png","fqdn":"rkk.com.ua","domain":"rkk.com.ua","tld":"com.ua"},"ip":{"addr":"178.128.245.184","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rkk.com.ua/","date":"2026-09-19T04:46:23.230Z","timestamp":1789793183230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rkk.com.ua","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:34:30 GMT","end":"Sun, 29 Nov 2026 16:34:29 GMT"},"fingerprint":{"sha1":"3C:5F:7E:C1:EB:B5:EB:39:D5:7B:0B:46:A5:BC:73:51:BC:38:8F:98","sha256":"3D:1F:C1:F7:47:BE:5F:F5:1F:7E:AF:0B:1F:5D:CE:1F:D3:98:6A:66:7B:B1:BE:5C:FE:63:62:83:34:29:FF:5F"}}},"request":{"raw":"GET /media/vip-casino-1.png HTTP/1.1\r\nHost: rkk.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rkk.com.ua/\r\nCookie: PHPSESSID=1vml8kmvj5k8qrfur71kc6ug84; bonus-popup-not-show=show\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 21553\r\nexpires: Mon, 19 Oct 2026 04:45:14 GMT\r\nlast-modified: Wed, 25 Jun 2025 09:37:00 GMT\r\netag: \"e2c5635c7b8313396d44339509f64e57\"\r\npragma: public\r\ncache-control: max-age=2592000, public\r\naccess-control-allow-origin: https://rkk.com.ua\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accept,Upgrade-Insecure-Requests\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21553,"size_decoded":22151,"mime_type":"image/png","magic":"PNG image data, 300 x 180, 8-bit/color RGB, non-interlaced","md5":"e2c5635c7b8313396d44339509f64e57","sha1":"bf45c00a4abc65c4c7fc51981d1c47e86fd051bb","sha256":"02affe8d2f68339f1aa5eea7454b0a0282b72f57b35cebc3108a213f6e936fff","sha512":"ea9d62e21523544b80e14307cc8a92cef977500018a336c4962bbeee66f6163bdb98f2d5dc464f1ea6c102453af0579d7df57246687d2fb970249db6ddeef912","ssdeep":"384:gfI/EEEEpS4ovDQFQvgiDrbmZr+AsBek8BNNunfVeXUrQXxxGD48QHEmpqEE5:C6EEEEMnUQYiDrkjOevNuohXxxG6koqj","tlshash":"51a2e172c0d1a230dd9afd0b05c93e6d62f5666fc2ce440ee3eb1ba981bf025554c99b","first_seen":"2026-09-19T04:47:14.029284Z","last_seen":"2026-09-19T04:48:21.5396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rkk.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u2t.dev/U2T_UU_ID-frame.js","fqdn":"u2t.dev","domain":"u2t.dev","tld":"dev"},"ip":{"addr":"188.137.236.206","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://u2t.dev/U2T_UU_ID-frame.html","date":"2026-09-19T04:46:23.403Z","timestamp":1789793183403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.u2t.dev","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:01:44 GMT","end":"Sun, 06 Dec 2026 09:01:43 GMT"},"fingerprint":{"sha1":"62:BC:A6:4E:CD:57:3E:27:C6:72:8F:F3:BF:0A:41:E5:EF:D4:52:15","sha256":"FB:56:1C:99:CB:73:24:A1:22:54:7C:EB:C9:B7:F3:B1:23:3C:10:A0:DD:A6:A4:6A:0C:9A:FA:1F:C2:39:7C:67"}}},"request":{"raw":"GET /U2T_UU_ID-frame.js HTTP/1.1\r\nHost: u2t.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://u2t.dev/U2T_UU_ID-frame.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 04:46:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4385\r\nlast-modified: Thu, 30 Jul 2026 19:39:27 GMT\r\netag: \"6a6ba86f-1121\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4385,"size_decoded":4745,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"39c3c3e3e43d453ddd91d5986f28f178","sha1":"c4061255a159f53b17a8597e2582eb7fd43253f1","sha256":"270154513fe622a4ff57412b2712d86335ff3d067384d8ae7e4af89add331f6a","sha512":"43ae5ea238d8038e0e79b111188cba5b2bafa684e54f2590e592bf1675e56f98da97ae91c7e28993f1fddd97a0f19f9f43ed0fd10b207055ab452e56730bda41","ssdeep":"96:YT7Xf1r+cNzTmDp4NqsUiWV4/DeAEai19gp:Q7Xf1K0GiFU+/DeAEat","tlshash":"9191102d38e6693f1533f92d570b050072266a039396d91cbe6d97f02f42931fdaa2c7","first_seen":"2024-12-04T03:19:50.531445Z","last_seen":"2026-09-19T04:48:21.549229Z","times_seen":89,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}