{"report_id":"f66e3d56-affe-4462-a694-5c36382bfe1a","version":6,"status":"done","tags":[],"date":"2024-07-28T02:06:22Z","url":{"schema":"http","addr":"87.246.54.159/stalker_portal","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":""},"ip":{"addr":"87.246.54.159","port":0,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/login","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"title":"login"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T08:00:12Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"blueimp.github.io","ip":{"addr":"185.199.110.153","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":148321,"first_seen":"2013-04-20 02:42:42","last_seen":"2024-07-05 20:53:07","alert_count":0,"request_count":1,"received_data":2417,"sent_data":358,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2024-07-27 18:17:04","alert_count":0,"request_count":1,"received_data":46058,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-07-27 18:12:19","alert_count":0,"request_count":6,"received_data":5325,"sent_data":1962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"87.246.54.159","ip":{"addr":"87.246.54.159","port":0,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":17,"request_count":17,"received_data":498859,"sent_data":7522,"comment":"","tags":null,"fingerprints":null},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":3413,"first_seen":"2012-09-07 17:11:00","last_seen":"2024-07-27 23:40:10","alert_count":0,"request_count":1,"received_data":6466,"sent_data":368,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2024-07-28 02:06:59","alert_count":0,"request_count":1,"received_data":8887,"sent_data":356,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2024-07-27 18:22:31","alert_count":0,"request_count":1,"received_data":1134,"sent_data":417,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/login","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":0,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/plugins/jquery/jquery-2.1.0.min.js","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca7582261c421482436dfdf3af9bffe","sha1":"98884258cbdb0d939fa2c5e74fc7ac9e56d8170f","sha256":"f284353a7cc4d97f6fe20a5155131bd43587a0f1c98a56eeaf52cff72910f47d","sha512":"aa9dbb9ee532954830059247b269b75bb925c2e3398247b8a6b4ef3e89375f9ce2e74cb7328f1c8297977a0596add7ee5f217651d2d62bf5826f932fec228770","ssdeep":"1536:XPpEy5BMibZGOj/bEe8v+/UWf4IhvAQPFZ93E8ud44d+ROvcpbRNkVPEWW9MtXaQ:uIOKpETQRsFrta98HrP","tlshash":"af83c6d9b2c6b162d77730b850bf450bb13a98dab80c8c60f0a5d5e47db4a89507bf2d","size":83615,"data":"","first_seen":"2023-03-07T01:17:22Z","last_seen":"2026-04-03T09:54:44.746642Z","times_seen":2565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:56.682635068Z","timestamp":1722132356682,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"9BDC1A9C47D76DC96134B04996050573491D15A2D8B6BE4157791B9D6F0766C9\"\r\nLast-Modified: Sat, 27 Jul 2024 06:56:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3724\r\nExpires: Sun, 28 Jul 2024 03:08:00 GMT\r\nDate: Sun, 28 Jul 2024 02:05:56 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"1923cde36555abe065c52a358521a6f5","sha1":"1cfff065ff7d9706aa7142cc99855769a50f642e","sha256":"9bdc1a9c47d76dc96134b04996050573491d15a2d8b6be4157791b9d6f0766c9","sha512":"1c2273b39652094f1d40cdc92cee45d667771c4ed76b8f6c35b83639bb9d48101b080bb3ba585a76c38dd174d1f38cc2878927d25ff660d1aebb2d1b5bf81106","ssdeep":"","tlshash":"f0f005943196740667900d1627fcc1544d21d4f835146491f56c41aa6850fa501cd40e","first_seen":"2024-07-27T17:43:23Z","last_seen":"2024-08-19T15:34:32.866037Z","times_seen":27742,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:56.72452512Z","timestamp":1722132356724,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"552C092E8F81EBCD4575F45F58DBBC32E2813E6E6A988ADF173122916658AE47\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3667\r\nExpires: Sun, 28 Jul 2024 03:07:03 GMT\r\nDate: Sun, 28 Jul 2024 02:05:56 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b8e31d15afcf09f5bb82859001dd8709","sha1":"9cbcde3c0dfe955fa6116416d94a7a18746b50c7","sha256":"552c092e8f81ebcd4575f45f58dbbc32e2813e6e6a988adf173122916658ae47","sha512":"db788fb4a4e5a3f1d8bea8902f29da5dd43d6c2c6a9d8c9105d925a84ba5ac5bbdda7daba19bc3ac618579edcc04f17ab00e5d6d573a6415a7e5a1463fbdfb32","ssdeep":"","tlshash":"eff0058a34deba847d7d9a4d1ff3e260dd10d9fd149a0ed1b8600397781479554cc868","first_seen":"2024-07-27T15:00:14Z","last_seen":"2024-08-19T15:35:18.222738Z","times_seen":18604,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:56.978016843Z","timestamp":1722132356978,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"5D2CC1A96F886C04483D570F2FBA83B9B430796D2FAF9D6D115CCA98BC6B713F\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=9738\r\nExpires: Sun, 28 Jul 2024 04:48:14 GMT\r\nDate: Sun, 28 Jul 2024 02:05:56 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"182b9c01b864c7d116c3fc28cbb58d6e","sha1":"644efdd1cd6ee4e5d5ec976387b3dbf47ed51dc1","sha256":"5d2cc1a96f886c04483d570f2fba83b9b430796d2faf9d6d115cca98bc6b713f","sha512":"f1d6cd69db95a577701c3f1f461265338578115386dfb851e46e4ed326beeac57972012be668e3e35d8a1c80606865530a88a1132f1f1dd068f5b4a9e49d119d","ssdeep":"","tlshash":"4bf07585056c7586f378070419e8f2149911eadd2c442da2681043e1fc3b7f241c440c","first_seen":"2024-07-27T14:02:03Z","last_seen":"2024-08-19T15:35:34.356344Z","times_seen":27365,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:57.27380626Z","timestamp":1722132357273,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7D7DF3345B5736CCCE59D0996A373C2CCC915B51D725A47131936CB170207467\"\r\nLast-Modified: Sat, 27 Jul 2024 06:27:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13788\r\nExpires: Sun, 28 Jul 2024 05:55:45 GMT\r\nDate: Sun, 28 Jul 2024 02:05:57 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0b1ec2ddc6f2bdcb53c4a68f0dadfffa","sha1":"6e2cca0a8a8c68f778c60628583b1c944c3cc2fc","sha256":"7d7df3345b5736ccce59d0996a373c2ccc915b51d725a47131936cb170207467","sha512":"ac8d7b2da92e34d87d0a3a67d1ef18e17f84b7712d83afcb177c4f49f8c5cbbd361d2fd5cc516663220816d7643d1b9cc29ae8d8ccaca2ed959d0f0f6ccb4c73","ssdeep":"","tlshash":"8cf0059105b9f892767185211ef8d62c59609c9d38119cc650c083d13062bde14d4184","first_seen":"2024-07-27T21:53:53Z","last_seen":"2024-08-19T15:33:25.893956Z","times_seen":17718,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":0,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:57.361892023Z","timestamp":1722132357361,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:57 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 323\r\nConnection: keep-alive\r\nLocation: http://87.246.54.159/stalker_portal/\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":323,"size_decoded":323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"38f3bea961457ee43970389cf981faab","sha1":"9a82e7a2602cf59d27d5f70da1022ee8cf9b15f7","sha256":"57e3248f3c391f1dff1683aadbdaa88f5d7972e303d66df3bfb300c1d4f6f946","sha512":"87f69bd958ad7aa18dd9e64a62d643934194ea6c9b9b425805baf49a029e76d6b035f76d0a577b629755a7dac43bb0bc30cdc1803e2e7b746e23f1b91a13db4f","ssdeep":"","tlshash":"abe07dfc678234d1e9833f10b6e150c426ac10f261d9867915db994ad5984b3cd5f4c9","first_seen":"2024-08-19T15:31:35.148895Z","last_seen":"2024-08-19T15:31:35.148895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":0,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:57.640457019Z","timestamp":1722132357640,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/ HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:57 GMT\r\nContent-Type: text/html\r\nContent-Length: 101\r\nConnection: keep-alive\r\nLast-Modified: Tue, 22 Nov 2022 14:07:33 GMT\r\nETag: \"64-5ee0fb1797340-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":101,"size_decoded":100,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a1403bc12e1eafa1ddee5f1bbaff95a4","sha1":"a1298a6ed96fcfbf22267c42b8b64d78eea251bb","sha256":"e3da791f212f2ab40690905633a7b54b5d7d2a4f88c64d40e51a7454efba8b77","sha512":"82f63018636904740b804da19fe0486094e08f08e64c97d4520bf7af050338f6189a9fa02b560dca44adbfcc34714da8ae6f53cab6555d8e4ba042e45c0abdcc","ssdeep":"","tlshash":"55b0125b008141091171a800dec1325002575e44418049c087c2c09784f8f01c8cf164","first_seen":"2024-01-27T23:33:39Z","last_seen":"2026-01-06T04:51:30.723685Z","times_seen":4,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-28T02:05:57.955Z","timestamp":1722132357955,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:57 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 334\r\nConnection: keep-alive\r\nLocation: http://87.246.54.159/stalker_portal/server/adm/\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":334,"size_decoded":334,"mime_type":"","magic":"HTML document, ASCII text","md5":"ec6e932925e00c4a3a98994ccea19da4","sha1":"06f49bc7da47c26de4842b9645381ebe95b19d38","sha256":"61c0814486ea80f41c0dc1d79ee683f691c5ed366bc954aa5f9c5fe1a3cf2cb2","sha512":"ae4c70654eede9b68ee284bebbc4ba75ccb594b21657e3627e2c1b431f4c684ba55b825ef48ebdac214729ad2fd478598263120a62cc58ddc7bb07515e729e29","ssdeep":"","tlshash":"fee02dfc278235e2e9833f10b6e110c022ad10f360c9867812dfa94ad4984b3cd8f0c9","first_seen":"2024-08-19T15:31:35.150488Z","last_seen":"2024-08-19T15:31:35.150488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-28T02:05:58.170Z","timestamp":1722132358170,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/ HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:58 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 452\r\nConnection: keep-alive\r\nSet-Cookie: debug_key=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nPHPSESSID=g5530oa55ok3ck9e82n6gsreg1; path=/\r\nCache-Control: private, must-revalidate\r\nLocation: http://87.246.54.159/stalker_portal/server/adm/login\r\npragma: no-cache\r\nexpires: -1\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":452,"size_decoded":452,"mime_type":"","magic":"HTML document, ASCII text","md5":"0ea32f360083e322609b85e5d1bdb077","sha1":"5cf74923d1c3513ac6712045fbb66d25d388b0da","sha256":"ac64d55050b161010ca47185375f2516054510a25b94b5a0386466d72abe8f43","sha512":"64addf50e9ce1c574aac8f224542711f0a661a716d81347403633a5d7d4ba3e6c636993c2976efba4efb63196aaed68e0b26cac05598dd9bcfd5c70bb6adf944","ssdeep":"","tlshash":"6ef065dc05d51e1ad3a19e2936e1a1880b9f118b62c88f2af7ec37495f4464186db296","first_seen":"2024-08-19T15:31:35.151799Z","last_seen":"2024-08-19T15:31:35.151799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"87.246.54.159/stalker_portal/server/adm/login","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":0,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-28T02:05:58.293Z","timestamp":1722132358293,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/login HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:58 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 2097\r\nConnection: keep-alive\r\nSet-Cookie: debug_key=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2097,"size_decoded":6766,"mime_type":"","magic":"HTML document, ASCII text","md5":"cc585114907d9af2679426eb2bf839b8","sha1":"b6345fa2567ddc754391f250285dfc21320618fa","sha256":"19b810c01b15634745b91ebf3541d91d9ef590e30b8dc8dfb864db40247ffcb9","sha512":"1d7e66137df1626fd8d783f98c70826cf6772b15223b9673ce60f71ba5d8506fc0a5e094dbcaa799b5ec498f78630fb366666270a161a17577f0d3acda506318","ssdeep":"192:/6Y00K8rQL8Iy0BRCy6G6rFiLhhPyi/MU:+YIXCyHhd","tlshash":"9ad1751945650d0a70221598bfd2612debee9127e11edd6a39ad233cefc4bc505b3e8c","first_seen":"2024-08-19T15:31:35.152545Z","last_seen":"2024-08-19T15:31:35.152545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"netdna.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.010Z","timestamp":1722132359010,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /font-awesome/4.3.0/css/font-awesome.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jul 2024 02:05:58 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCDN-PullZone: 252412\r\nCDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74\r\nCDN-RequestCountryCode: DE\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=31919000\r\nETag: W/\"3f05a51a1e5260f4179db8ca65307a6a\"\r\nLast-Modified: Mon, 25 Jan 2021 22:04:53 GMT\r\nCDN-CachedAt: 03/19/2024 07:27:09\r\nCDN-ProxyVer: 1.04\r\nCDN-RequestPullCode: 200\r\nCDN-RequestPullSuccess: True\r\nCDN-EdgeStorageId: 722\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nX-Content-Type-Options: nosniff\r\nCDN-Status: 200\r\nCDN-RequestId: 732b2513e81f394e263b5d0bec959118\r\nCDN-Cache: HIT\r\nCF-Cache-Status: HIT\r\nAge: 3854430\r\nServer: cloudflare\r\nCF-RAY: 8aa14eabaaad712d-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5580,"size_decoded":28747,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with very long lines (372)","md5":"3f05a51a1e5260f4179db8ca65307a6a","sha1":"2148b3dddca54f413e8ba50aa48b53b400bd99b8","sha256":"c374efba54279628793f04e10ebf5d0c1b4dbc36b3f4132d9235f01d64ca5c8e","sha512":"5c9de7b561e5e34a2912213ee9d1a17caf4d00a38210bae98e205140ab6eeae25ff4f962f1763e1e2929eeb945cd8e0494b485b738f1f461a01ea97b3cb49ea2","ssdeep":"384:95f0j++ArEPSIDqvnIDyYTnBrbkPvVY5JY+n:/0j++A4PSIDqvnI+YTBrQPvVwJjn","tlshash":"a7d23dece6bf18904391e0d12386a270bb3db73d9c4a6d9cd2a2799cb5c1255c2c63dd","first_seen":"2023-04-05T10:34:37Z","last_seen":"2026-04-03T16:50:25.839542Z","times_seen":2217,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:58.992Z","timestamp":1722132358992,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /ui/1.12.1/themes/base/jquery-ui.css HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Length: 8323\r\nServer: nginx\r\nContent-Type: text/css\r\nLast-Modified: Fri, 18 Oct 1991 12:00:00 GMT\r\nETag: W/\"28feccc0-8c85\"\r\nCache-Control: public, max-age=31536000, stale-while-revalidate=604800\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nVia: 1.1 varnish, 1.1 varnish\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nAge: 6813164\r\nX-Served-By: cache-lga13627-LGA, cache-hel1410022-HEL\r\nX-Cache: HIT, HIT\r\nX-Cache-Hits: 42, 30019\r\nX-Timer: S1722132359.021898,VS0,VE0\r\nVary: Accept-Encoding\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8323,"size_decoded":35973,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"c4a88ec0cb998929a670c0c58d7dc526","sha1":"03135a88e8dbc36020dd453d1e7407ce9a3a2cc2","sha256":"44f8a56d427917b5fa0dd7933ba545679be5e6b3b93099e64a4e29c2159f57c0","sha512":"fd0d6c06abcd661796db2bc071c2a2bbfc5cfe8d80b434b68cd068cc312a03ff0c93f21c1fce77c2bc03486a80765ee317239639c79f2edc03777918a36efa1f","ssdeep":"192:10OW02ANbMb6l2n+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHllPb:xMb/+vaW1e07/PiF5fy/EzDS25qb","tlshash":"10f20c316b432919ba1bd1a425a11bf7e32e1342ee1b6e7f609a345cc3d54e0c0bf5b4","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-04-03T17:49:34.302241Z","times_seen":7817,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":12,"dns":1,"connect":26,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"fonts.googleapis.com/css?family=PT+Sans:400,700,400italic,700italic\u0026subset=latin,cyrillic-ext,latin-ext,cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.011Z","timestamp":1722132359011,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css?family=PT+Sans:400,700,400italic,700italic\u0026subset=latin,cyrillic-ext,latin-ext,cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nTiming-Allow-Origin: *\r\nLink: \u003chttp://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nExpires: Sun, 28 Jul 2024 02:05:59 GMT\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nCache-Control: private, max-age=86400\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nCross-Origin-Resource-Policy: cross-origin\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nServer: ESF\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":597,"size_decoded":5218,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ffa4798812fd2098983bd725aebe62aa","sha1":"621192d399976e7e492b91b361eac3f07ade4479","sha256":"29fa3453a00f1acc3abed85da0b7951adf2cbbfc641cb669dade1af2d256cb18","sha512":"119b5386d7381cbe944886998897ee0145796c2050a6c7ca2c8467bfd7197c9e9e6183237363151d4f9622c603c842b87c3d1b7d06de4f4ec38b3d66628a4150","ssdeep":"96:RYgLKThYgLKxFZOYgLKZVc+ucYgLKkNRYgCK8hYgCKjFZOYgCKwVc+ucYgCKE3N1:WkKTGkKlkKlwkK1pK8GpKXpKawpKLKao","tlshash":"acb1bbc1092be544ab831cda33df6d31ce1da29530459436aaff1cd8eca6e1a5370b5d","first_seen":"2024-04-19T11:30:37Z","last_seen":"2024-10-13T11:54:10.524684Z","times_seen":13,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"blueimp.github.io/Gallery/css/blueimp-gallery.min.css","fqdn":"blueimp.github.io","domain":"blueimp.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":80,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.013Z","timestamp":1722132359013,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Gallery/css/blueimp-gallery.min.css HTTP/1.1\r\nHost: blueimp.github.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Length: 1708\r\nServer: GitHub.com\r\nContent-Type: text/css; charset=utf-8\r\npermissions-policy: interest-cohort=()\r\nLast-Modified: Sat, 25 Sep 2021 16:57:14 GMT\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"614f54ea-1f5c\"\r\nexpires: Fri, 26 Jul 2024 04:20:03 GMT\r\nCache-Control: max-age=600\r\nContent-Encoding: gzip\r\nx-proxy-cache: MISS\r\nX-GitHub-Request-Id: 2557:0EA5:1FF76D8:20E2C22:66A3219B\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nVia: 1.1 varnish\r\nAge: 2\r\nX-Served-By: cache-hel1410020-HEL\r\nX-Cache: HIT\r\nX-Cache-Hits: 1\r\nX-Timer: S1722132359.035630,VS0,VE1\r\nVary: Accept-Encoding\r\nX-Fastly-Request-ID: f3e5e0c7c4c114b5b3394775ce5611c50046bd60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1708,"size_decoded":8028,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7976)","md5":"f174dea6b07bfd481767160f4e58a8d8","sha1":"89a2e40b59e67fe8a9f7bd5128bcf3e9e5ee749f","sha256":"596536b7006ca46f714e1d4605d07eff49363732e6202203849bad6845af9f77","sha512":"f33f7310f118571097ee174cfba840d113125b8d95f97b6ab325d26cd92e8d761c945aa1455f09e3e31ab08a6e619383a0726e420c468dc44a9bffec584426eb","ssdeep":"96:5v0dlJ1mJecV0VcpVIgw+2p7EYilNpwUADq9xJ0Ea2Qrt0KlUdhf:OlJQd2+W7EYi/ADQ7ko","tlshash":"01f11d78ec34103a22ffc35abdb8d17713ede212f663b66db2a8f251d68694720211d4","first_seen":"2023-04-08T01:03:05Z","last_seen":"2026-04-01T19:32:26.294159Z","times_seen":86,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":1,"connect":26,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/plugins/colorbox/colorbox.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:58.988Z","timestamp":1722132358988,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/plugins/colorbox/colorbox.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 4084\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-ff4\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4084,"size_decoded":4084,"mime_type":"text/css","magic":"ASCII text","md5":"16e62cd2423d6b7ba08275c5f555714c","sha1":"d841a616bbad6210c4b03abcf888c7a4c63e220d","sha256":"92875ae3e616ba064ea1c2dea1c866d7292e04eab2fcabe1abe71c192b185970","sha512":"c2bd9af65cdb14eeef33ead3fe0b79b9cd51630e38509a2d2c821d391cc374ed641d403e45cdfde9b1598627fb64c1b10a3a3f12c10594ffa55451db274a5166","ssdeep":"","tlshash":"4481203689c1210de017e2746b50bbf81236880bd753cdafb15ca478afcb59840b24ee","first_seen":"2024-08-19T15:31:35.147284Z","last_seen":"2024-10-24T22:30:38.089917Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":48,"dns":0,"connect":60,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/css/countries_flags/docs.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.007Z","timestamp":1722132359007,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/css/countries_flags/docs.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 570\r\nLast-Modified: Tue, 22 Nov 2022 14:07:33 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a5-23a\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":570,"size_decoded":570,"mime_type":"text/css","magic":"ASCII text","md5":"c6fcdb19e53bd390146f9b62009d02d4","sha1":"f1e5128a4d713804bf50b21cb7cfbb82d9cbb54d","sha256":"08f172678a5c7a12e010a02cf7858ca04185877c2e439213a8730da4a04344d5","sha512":"87781cb9d69230257d1b20dccc1ea88072c31be6c875ed42e38bef9b77c20ea8b92ee67e923132ce64595e8439708e9bf05c67ee9f089212fb75ed456fe497b5","ssdeep":"","tlshash":"06f0e1445e721948210ee5b818568a28373e1051c78fcd7c5aed24086f4e1564553fb9","first_seen":"2024-08-19T15:31:35.150288Z","last_seen":"2024-10-24T22:30:38.093033Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":36,"dns":0,"connect":60,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/plugins/select2/select2.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:58.989Z","timestamp":1722132358989,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/plugins/select2/select2.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 17570\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-44a2\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17570,"size_decoded":17570,"mime_type":"text/css","magic":"ASCII text","md5":"9bb1aefdf1fc3f3c0808ed63da85f3d2","sha1":"98a2c4e11a85703ab19e140974c59a3e1eee70fe","sha256":"fd2c35626e23e3d2d93d5ff542fd117c599f557401bffb71a99c28ed86e70a36","sha512":"0e8e00ca27be621ea5309b670dd82ab7bd4fcd21d3c49dd003e7dc44285e2910e8ae9cfa509132a1dc99e8de219f18ab1ef541ce93c74b25023684ebf35de725","ssdeep":"192:klbA5gTbxFeAyL3EllgA44hD0YFcFxFTFUE5FnFC2KCgxTZTVDNjG+LvcFTFwEiA:aFyLTVYFcFxFTFXFrKCgplNx+FTFEF2X","tlshash":"9d82e1a57ede5131b07e4daf6cf271806328cd0fc0089fa97ae8e148efd4594269b54b","first_seen":"2024-08-19T15:31:35.147939Z","last_seen":"2024-10-24T22:30:38.095889Z","times_seen":3,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":48,"dns":0,"connect":61,"send":0,"wait":61,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/plugins/jquery-file-upload/css/jquery.fileupload.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.008Z","timestamp":1722132359008,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/plugins/jquery-file-upload/css/jquery.fileupload.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 685\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-2ad\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":685,"size_decoded":685,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"6c35df3755760c87e401c51fd1cee561","sha1":"b88e9abe11b3d27f187e31591a62bc3a52077ddb","sha256":"8a6365732ef3d70ce495de3d8d5a8c9815b6c4c483a3a33e89bbde58396dc1f7","sha512":"b4db13a6f1746acb095926127b4d7b45daeae8c8d6bf7d66ce26237ca9fe31f99f6a255cf5f91488cdfae067e16ce0a03c74fd23a7f1dfa4a276cad385bdbbf0","ssdeep":"","tlshash":"970110ee57b012012e2b8bb1bde6e39f712d4183289bec5da0401316dd409774293f8a","first_seen":"2023-05-15T15:31:38Z","last_seen":"2026-03-08T15:05:23.670383Z","times_seen":47,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/css/jquery.dataTables.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:58.996Z","timestamp":1722132358996,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/css/jquery.dataTables.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 20598\r\nLast-Modified: Tue, 22 Nov 2022 14:07:33 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a5-5076\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20598,"size_decoded":20598,"mime_type":"text/css","magic":"ASCII text, with very long lines (368)","md5":"05d44de6474415505283ffd820756a8f","sha1":"39c612cf7e33c563a1d1f59b9784971070eafadc","sha256":"d3291619b9aa2acb09e2c18b4d587eb66362bd26ae5a8ef50278decd7d70eafb","sha512":"07013c47e19e0bd23c96dde976a49eaea3741bbcc70fcc6b280d047b9d6fb39ad6fbd5dd6689aa057ea001ccebd8e8b6db57d37f97bdd988e4c24573751fb150","ssdeep":"384:KERleLwBh+c0poDazA95eUieNheW6ysHw5LSKiDGjav8lUnA7l9SSydn60rGLweg:KmLwMF9Gh","tlshash":"7c920e94b3c7fa06220ae9f5040d56747b347111894ecdb87da8e28a2f05dd7e5aacf2","first_seen":"2024-08-19T15:31:35.146471Z","last_seen":"2024-10-24T22:30:38.105136Z","times_seen":3,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":43,"dns":0,"connect":60,"send":0,"wait":60,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/css/countries_flags/flag-icon.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.005Z","timestamp":1722132359005,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/css/countries_flags/flag-icon.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 36252\r\nLast-Modified: Tue, 22 Nov 2022 14:07:33 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a5-8d9c\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36252,"size_decoded":36252,"mime_type":"text/css","magic":"ASCII text","md5":"27769091b763689f396606fc75d9b5ba","sha1":"93b992672738eb2e2d51f88a324ccca27ea0f17d","sha256":"9034e1b469a4115d583b66b40a5f8619792d9178b26d0dd7d3cb20472c6402e4","sha512":"fc2fe37f41c703906bd8ce5953f163a797e516fe3d7765ddce36f4e21afd2789c5dfcad2ee739e6033db6abd597f6d89e66e5eb5c53fe84a18766f9fec6c67f5","ssdeep":"384:HzKo/cusE2XIVDJe96NyZeFa9G1ZcPc1fDp38PQBOhbtMdKFMHMCylq8eFkm:Hzdf5Je96NyZeFa9GdXeyKS","tlshash":"50f2f127a9d3da0e7213c1356927736c6bbd3441dab59e6e017930b8a2f2449f43eb70","first_seen":"2024-08-19T15:31:35.149604Z","last_seen":"2024-10-24T22:30:38.108657Z","times_seen":3,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":37,"dns":0,"connect":61,"send":0,"wait":60,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/plugins/jquery-file-upload/css/jquery.fileupload-ui.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.009Z","timestamp":1722132359009,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/plugins/jquery-file-upload/css/jquery.fileupload-ui.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 1096\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-448\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1096,"size_decoded":1096,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"c53280a8799998b0c151d47ecb7bf1cf","sha1":"077dc00cb5ca49b49719a63127a57b7b5c5604b6","sha256":"89f4f557df9c6dcc1094a3e61b9210023c3c77711634e0ff349c89ec105d0caf","sha512":"ecb2f2a6e6e42e5f06d1b7e69408d491676663375f122255756725165863e0f74276b040a4d0ac756a956e64a2a17b04b747bb2af792aef8377ada1a834acb42","ssdeep":"","tlshash":"1e11f35ff1a1a80d363171d07ce5524a794c4007630eed9aad6493e6ff4c34240e5bf5","first_seen":"2023-05-15T09:51:35Z","last_seen":"2026-01-28T15:31:54.931766Z","times_seen":42,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:59.202570621Z","timestamp":1722132359202,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"310CA992570F568ED449D579727A026E44E75F4DD6A609897A3FBA0BC7CBCE57\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=18504\r\nExpires: Sun, 28 Jul 2024 07:14:23 GMT\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fe86340c305817b173f7c0f3f59c795b","sha1":"bae41a5fad9f6cf6e13281eb7d567d6103f292b3","sha256":"310ca992570f568ed449d579727a026e44e75f4dd6a609897a3fba0bc7cbce57","sha512":"aead2ac0e45f187f797ed266c8b5b3b6eb6706c61947647d3db4eb6450d431b2353e524f58c542d751dce06d118f2f5e7bba85b60651ff94536869afa590c581","ssdeep":"","tlshash":"0df00e1211f97662a3740a1b3caee2380d18b6ac318a7ef4f1e043f5643679a12c0088","first_seen":"2024-07-27T11:05:01Z","last_seen":"2024-08-19T15:36:31.273261Z","times_seen":26985,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-28T02:05:59.203521615Z","timestamp":1722132359203,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"310CA992570F568ED449D579727A026E44E75F4DD6A609897A3FBA0BC7CBCE57\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=18504\r\nExpires: Sun, 28 Jul 2024 07:14:23 GMT\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fe86340c305817b173f7c0f3f59c795b","sha1":"bae41a5fad9f6cf6e13281eb7d567d6103f292b3","sha256":"310ca992570f568ed449d579727a026e44e75f4dd6a609897a3fba0bc7cbce57","sha512":"aead2ac0e45f187f797ed266c8b5b3b6eb6706c61947647d3db4eb6450d431b2353e524f58c542d751dce06d118f2f5e7bba85b60651ff94536869afa590c581","ssdeep":"","tlshash":"0df00e1211f97662a3740a1b3caee2380d18b6ac318a7ef4f1e043f5643679a12c0088","first_seen":"2024-07-27T11:05:01Z","last_seen":"2024-08-19T15:36:31.273261Z","times_seen":26985,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/plugins/bootstrap/bootstrap.css","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:58.985Z","timestamp":1722132358985,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/plugins/bootstrap/bootstrap.css HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:58 GMT\r\nContent-Type: text/css\r\nContent-Length: 122998\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-1e076\"\r\nExpires: Tue, 27 Aug 2024 02:05:58 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122998,"size_decoded":122998,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (540)","md5":"b9db9e5b28c7a55e1de8f9ebfbd2c28d","sha1":"a2643fd87df816f7077c13c712a0c0aae88c3c5d","sha256":"cdd948b7d6c8d783b0565c35672c8d4bb66a63e8118f467dd5a5636ebf0838b5","sha512":"ee767f716bde20073e1706936476e1d4edb910dad3f4444ff31efbd3ebd954463027e7b89ec5ad9781033c1d92c3e1ed630a745ad119c39fa35b90ba47f9d6a2","ssdeep":"1536:/il5UTAyPPAn2lvN4bWICLmF88+6A9h/okj+SA7bF65D5iEu:/eUTAu42LzLA/A9h/okj+SA7bF65+","tlshash":"cbc374d8f6b039407223c09934938e52771d6042e51fed7ab7e6396cafc91858973b8b","first_seen":"2023-04-14T15:52:26Z","last_seen":"2026-04-01T18:12:03.097196Z","times_seen":94,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/plugins/jquery/jquery-2.1.0.min.js","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.017Z","timestamp":1722132359017,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/plugins/jquery/jquery-2.1.0.min.js HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 83615\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-1469f\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83615,"size_decoded":83615,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"5ca7582261c421482436dfdf3af9bffe","sha1":"98884258cbdb0d939fa2c5e74fc7ac9e56d8170f","sha256":"f284353a7cc4d97f6fe20a5155131bd43587a0f1c98a56eeaf52cff72910f47d","sha512":"aa9dbb9ee532954830059247b269b75bb925c2e3398247b8a6b4ef3e89375f9ce2e74cb7328f1c8297977a0596add7ee5f217651d2d62bf5826f932fec228770","ssdeep":"1536:XPpEy5BMibZGOj/bEe8v+/UWf4IhvAQPFZ93E8ud44d+ROvcpbRNkVPEWW9MtXaQ:uIOKpETQRsFrta98HrP","tlshash":"af83c6d9b2c6b162d77730b850bf450bb13a98dab80c8c60f0a5d5e47db4a89507bf2d","first_seen":"2023-03-07T01:17:22Z","last_seen":"2026-04-03T09:54:44.746642Z","times_seen":2565,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":61,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/css/style.css?ver=533800203","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.015Z","timestamp":1722132359015,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/css/style.css?ver=533800203 HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 197344\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-302e0\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":197344,"size_decoded":197344,"mime_type":"text/css","magic":"ASCII text, with very long lines (514)","md5":"eab96ff90a7b26ada9065a3410f5d014","sha1":"ed4723e242a3eb7838d0bb819a833f01e65f61ee","sha256":"650ed6269696ab575e23a1303364475ebe03ee602fa2c99a90d64c671d74c283","sha512":"78ad59fdf035e51b57c535d70ec4fc0d8fcaf117127e4df80583a9709459f65a9cec3de0fd592d1d0ce7997875038e46cace7311da8dea676de30525c7aa417b","ssdeep":"6144:Qc814GR7Uzli5F6XOXiDk4/CSNO/IEyjBPFB9w9GBR7iNZzM9asMrw3m7/RRfi:L814GR7SXOXiDk4/CSNO/IEyjBPFB9wk","tlshash":"7114c6a2aae72905b41bc1952aa6abd2732d5103d10edc3c7fe4716c9fc99c485b3f4c","first_seen":"2024-08-19T15:31:35.172584Z","last_seen":"2024-10-24T22:30:38.11746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":61,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/img/m-logo-full.png","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.016Z","timestamp":1722132359016,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/img/m-logo-full.png HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 4196\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nConnection: keep-alive\r\nETag: \"637cd7a6-1064\"\r\nExpires: Tue, 27 Aug 2024 02:05:59 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4196,"size_decoded":4196,"mime_type":"image/png","magic":"PNG image data, 248 x 32, 8-bit/color RGBA, non-interlaced","md5":"e75e5c1ff97d59725c81aa8e8d7df3ff","sha1":"ef32df52d1d0e47596723e55548a5f01e4f83d72","sha256":"77b759f63cbde938a6a94f69a6282b23de556c54a0390a82e18a179c1165d589","sha512":"1b365b09bd20beee3f76713c765f122508a6f553a5ab1c6abbe90d736179d54a6864af75dc8a621e43ab6e07db1c0e909230cecc9a02f202485f7f173a0a9830","ssdeep":"96:PQjXlK7Q63jCQ7x4Tsu8oSMaHzXKtnaeVlKxR/R6P:0Xl+Q6OG4YuXaHzO2UP","tlshash":"6c817ee3b290600e9d1e823afd8e142d13267d558f43a462e6394f348e73a8ab5c5d4f","first_seen":"2024-08-19T15:31:35.1578Z","last_seen":"2024-10-24T22:30:38.121318Z","times_seen":3,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.452Z","timestamp":1722132359452,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://87.246.54.159\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://fonts.googleapis.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin; report-to=\"apps-themes\"\r\nReport-To: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\nTiming-Allow-Origin: *\r\nContent-Length: 45300\r\nX-Content-Type-Options: nosniff\r\nServer: sffe\r\nX-XSS-Protection: 0\r\nDate: Fri, 26 Jul 2024 08:18:54 GMT\r\nExpires: Sat, 26 Jul 2025 08:18:54 GMT\r\nCache-Control: public, max-age=31536000\r\nAge: 150425\r\nLast-Modified: Wed, 27 Apr 2022 16:11:08 GMT\r\nContent-Type: font/woff2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45300,"size_decoded":45300,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45300, version 1.0","md5":"5fe660c3a23b871807b0e1d3ee973d23","sha1":"62a9dd423b30b6ee3ab3dd40d573545d579af10a","sha256":"e13ffa988be59cbf299d7ff68f019f902b60848203ac4990819eb7e4624ee52d","sha512":"9eb08055befc2b70cc8bba34496f14414ea32f5b97f185d357f100ea7d74bfdc12afd815a53e629d02a53dc7f3e37096df8bbbd36ab44a011c1a4288b42780cd","ssdeep":"768:XNcHdvw7wbeW4t3x3dcjsflPt8YCRzGzgI/gBPaKkqnMMUQAbc6VBhXGGVJM/:XNmdvw73NAIlPtZCRzGzg+QPaKkqnMMv","tlshash":"4d1302bed59568a42c6e06e75ba17b03e7ab9f3260f97b2107c732a3c73455cd42108e","first_seen":"2023-04-05T14:04:03Z","last_seen":"2026-04-02T23:13:45.108105Z","times_seen":8035,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":9,"dns":1,"connect":8,"send":0,"wait":8,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"87.246.54.159/stalker_portal/server/adm/favicon.ico?ver=5.6.10","fqdn":"87.246.54.159","domain":"87.246.54.159","tld":"159"},"ip":{"addr":"87.246.54.159","port":80,"asn":205352,"as":"Kabelnet Ltd","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://87.246.54.159/stalker_portal/server/adm/login","date":"2024-07-28T02:05:59.489Z","timestamp":1722132359489,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /stalker_portal/server/adm/favicon.ico?ver=5.6.10 HTTP/1.1\r\nHost: 87.246.54.159\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://87.246.54.159/stalker_portal/server/adm/login\r\nCookie: PHPSESSID=g5530oa55ok3ck9e82n6gsreg1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jul 2024 02:05:59 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Tue, 22 Nov 2022 14:07:34 GMT\r\nETag: \"47e-5ee0fb188b580\"\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":1150,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"e6fdcd3320ff84f362a05d6fb6cc131e","sha1":"9184203208ae5aa1d7701dfad8694115b60dc363","sha256":"d9dc3308c63201b264d717d9bb4a85ae1e54662dbece43b6b981b0ac48b18638","sha512":"59e9ec88be804029fe0018980d3fc2e07389ab7832f7d9368ade794ec84516dec7ff09becea03655a194e0e8a918c8077f4ba7bc6a89c3ebac6df40aa54ce7ef","ssdeep":"","tlshash":"c52155e22a40d25ce8b36e317cd28ce025339885084cca1f5004ea13ed02315c56b303","first_seen":"2024-08-19T15:31:35.158408Z","last_seen":"2025-09-20T19:41:20.366389Z","times_seen":5,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-07-28","alert":"Sinkholed","trigger":"87.246.54.159","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}